Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: SNIasKlWE019p/CzdgDJDTV/MQtpApxnywL9A7Oa/V4=
Subject key identifier: BC:4A:34:49:52:4C:9A:43:9A:A6:69:21:9F:DB:FC:38:EF:83:6D:B5
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019EB5B2FE4DDC7DC2E7C4F9D28C58BB0EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 11CA
Signing time: Thu 11 Jun 2026 08:01:06 +0000
Manifest this update: Thu 11 Jun 2026 08:01:06 +0000
Manifest next update: Fri 12 Jun 2026 08:01:06 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: 2yGX8nkr+2ZBOweZ6VFckCQ4M+cCfxhKxVdg74wxjaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:fe:4d:dc:7d:c2:e7:c4:f9:d2:8c:58:bb:0e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jun 11 08:01:06 2026 GMT
Not After : Jun 12 08:01:06 2026 GMT
Subject: CN=bc4a3449524c9a439aa669219fdbfc38ef836db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:ef:9a:8a:72:c0:56:56:e0:c4:f8:21:48:
eb:3b:70:ef:61:7f:ee:69:86:54:f4:a5:cc:8d:82:
7e:13:47:49:1b:d3:c5:df:a5:3b:bc:5e:16:a6:a0:
b7:ed:65:05:ee:9c:50:92:de:26:8e:69:d8:c6:d0:
fa:56:98:c3:a9:97:bc:cb:de:c2:cb:5b:fd:92:ed:
b5:cb:8b:3c:8e:8b:21:e2:2d:b1:21:9b:a4:5b:9f:
3c:a3:30:de:33:90:ad:34:db:4e:55:de:94:95:9b:
d3:c8:69:61:12:9b:c6:99:33:7b:61:a0:56:38:59:
2f:56:0a:58:83:40:33:b4:2d:9d:4d:a5:91:67:47:
1d:10:39:39:b6:7f:03:ae:95:86:4f:9d:39:7c:c7:
dd:9a:cb:63:d9:b6:90:10:64:ec:e6:49:05:ab:ea:
b4:c6:5d:38:8b:16:78:bc:38:47:b4:7d:78:cb:f0:
a0:82:b7:44:eb:c8:25:97:d1:7e:fb:d4:d2:e8:d5:
38:1d:78:a3:78:63:21:f2:c2:17:71:48:4a:71:c7:
91:47:f1:51:d9:ce:14:01:b3:95:1f:68:8f:38:8b:
77:07:c2:6e:54:e3:66:6d:0e:95:63:c6:20:c3:ba:
f5:e6:25:34:a9:a4:b7:e4:2e:6a:b7:df:91:96:cf:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:34:49:52:4C:9A:43:9A:A6:69:21:9F:DB:FC:38:EF:83:6D:B5
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:9d:21:10:b3:93:eb:49:21:44:c7:4b:50:80:5f:aa:b2:
80:d7:65:f6:2b:e5:4c:7d:6b:66:9c:56:de:4a:82:86:e9:d8:
03:2a:53:dd:fc:51:90:94:ae:63:a3:10:f0:e0:55:06:0d:6d:
0f:fc:9e:8d:5d:0d:74:c6:92:d1:b9:b4:24:2f:a9:b8:d6:fa:
36:53:2b:c8:73:85:15:6b:a1:f4:15:6b:7f:cc:e4:3a:9f:81:
d5:f8:9c:40:f7:e6:03:09:b2:61:1c:12:ed:ea:af:be:2b:18:
1d:c0:78:4b:ea:2a:ff:12:9f:61:9e:a2:e4:81:e8:2b:a2:7e:
22:3d:f2:4a:4a:76:c8:ca:42:91:65:52:83:05:01:76:bd:2c:
3a:86:e3:b2:39:c0:6c:5d:4d:d9:6d:1f:8d:28:95:64:0f:a1:
0c:4b:c6:77:e5:9b:1d:71:4c:99:c5:5d:d9:4d:d1:a0:07:a4:
de:b4:b6:f9:05:71:1e:45:18:56:f0:2c:ce:3c:1e:70:c4:d0:
49:8b:94:e0:71:a0:38:65:96:f1:21:41:e3:0a:fe:6a:0c:1f:
c8:4f:93:04:36:8d:72:75:df:ee:dc:06:04:b3:52:52:2b:2e:
30:f8:ed:1e:6d:fd:8c:10:ee:35:ca:70:13:83:af:54:27:f1:
27:05:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:43:35 2026 by rpki-client