Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier: dLyZ0aUzF+RZwWc8dk1WevKmycoRlxrDAHRmVXFmQE0=
Subject key identifier: D8:F0:8D:9D:D8:C6:28:12:B7:2D:D3:19:C0:5B:79:63:30:0B:CA:56
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 01A0BFC386FF0D4B62C327AFEF5F74C40269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number: 1389
Signing time: Sun 20 Sep 2026 17:00:57 +0000
Manifest this update: Sun 20 Sep 2026 17:00:57 +0000
Manifest next update: Mon 21 Sep 2026 17:00:57 +0000
Files and hashes: 1: 8B0Xvmidug3oJBFQNiVZ03LjllY.roa (hash: P1kj5JyGbpjO7k/9XiZFP26S2h0cS9e/Ah5VKAIZkgI=)
2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
3: lkqdEp6LwoeInW4-nbYEOMBruSw.roa (hash: LFD9MHEpAP74xMJWDo+tJr71CtFOG7i1RauaAjnGFMU=)
4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: GWrg4dSGuWPZpyYIro/ho1cz2nAnVKUanZMeQWunjtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:86:ff:0d:4b:62:c3:27:af:ef:5f:74:c4:02:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Sep 20 17:00:57 2026 GMT
Not After : Sep 21 17:00:57 2026 GMT
Subject: CN=d8f08d9dd8c62812b72dd319c05b7963300bca56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:6a:8c:a7:29:fa:a5:ff:8e:6d:19:46:e3:
62:0c:89:af:05:5b:23:7e:e9:eb:4a:0a:87:e6:d8:
46:b4:47:71:77:98:2d:e1:dd:28:50:a1:00:7f:0e:
64:7f:22:c5:cf:57:3d:fe:33:e2:49:0b:89:29:52:
e4:f3:9b:d6:67:7e:ff:8e:42:e1:36:c2:7e:4b:eb:
ed:d7:a5:c8:a0:9e:89:cf:86:eb:ec:bf:d5:8f:24:
65:d0:a2:ef:1f:da:f4:6a:34:23:3d:ca:a5:87:39:
a3:62:10:93:c2:5a:e8:7d:cc:fa:b7:11:78:ad:b8:
45:8e:1e:e5:23:0b:a0:39:ad:a6:78:9b:89:8f:f1:
e2:33:45:16:36:80:e7:b2:c1:7f:76:f2:90:6e:56:
58:ab:1f:dd:32:ee:fe:c3:77:e4:57:62:46:ef:61:
84:24:28:da:76:9e:7c:73:a2:b1:10:a1:dc:e8:e1:
60:dd:13:c6:53:89:0a:2b:1a:d6:1a:1d:78:be:57:
9c:f4:5a:79:0a:ec:0c:87:46:9b:76:ba:aa:ce:82:
12:65:43:fc:39:57:93:a9:ff:85:3d:b2:8f:97:3a:
81:ad:3d:47:bf:7d:68:b3:fc:d9:02:13:cc:f4:8a:
46:d0:8f:b3:0e:73:14:27:71:38:48:a1:3b:4c:30:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:8D:9D:D8:C6:28:12:B7:2D:D3:19:C0:5B:79:63:30:0B:CA:56
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:74:b3:64:ca:1c:1d:b7:d4:23:49:39:3f:60:c6:e3:35:b9:
17:16:c7:ac:44:cd:97:5c:c2:ef:ff:cc:ef:24:cf:e7:bd:49:
5c:52:88:48:4c:80:88:9a:c8:45:9f:93:64:49:a6:8e:49:41:
ea:4e:3c:91:b1:ea:c5:a1:79:6a:54:8f:63:e0:f1:11:18:95:
7a:00:d9:78:fb:d3:bc:bb:e6:0f:08:ea:16:35:0f:98:f5:ea:
4a:e6:83:6d:cb:e9:71:6d:ff:61:82:88:6b:82:8a:78:f2:74:
5b:5f:73:6a:89:05:86:b9:78:92:85:fe:18:5e:43:b7:73:5c:
ea:69:b6:da:cd:c6:29:f6:cd:b6:43:fe:c2:f0:6c:a1:e4:1c:
a3:82:55:44:01:4e:13:3a:14:c1:94:81:da:d0:82:cf:2d:d9:
08:d8:ba:0c:7d:a4:e5:7a:c4:8a:69:b3:f6:56:ec:3c:fd:a8:
e2:67:3f:29:a7:8e:0c:3b:f6:fb:ae:c1:04:2c:a1:49:d3:be:
17:46:91:66:d2:c9:ce:a1:91:e4:88:f4:30:b5:17:ce:0f:d0:
35:51:a3:5b:c2:db:05:28:a8:3b:ac:91:42:8c:7d:2a:eb:88:
f0:81:2b:aa:4d:10:9b:aa:66:f5:f0:a1:b9:31:b4:ca:dd:2e:
6f:33:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:29:45 2026 by rpki-client