Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: 5Su9Gld6HDJRg1kFFkJF+fkhT4LeIWBD9Rd6opau2VQ=
Subject key identifier: 05:15:B0:08:E5:2F:90:D9:F5:EA:C1:F1:39:41:34:19:77:51:66:AD
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01A08AFA3D124BE0BF19757347180997E3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 12BD
Signing time: Thu 10 Sep 2026 11:00:50 +0000
Manifest this update: Thu 10 Sep 2026 11:00:50 +0000
Manifest next update: Fri 11 Sep 2026 11:00:50 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: n3bybLK0tYPCWuv0Gn9HI2Zty1NHG3AlbW+T5sH6084=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:3d:12:4b:e0:bf:19:75:73:47:18:09:97:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Sep 10 11:00:50 2026 GMT
Not After : Sep 11 11:00:50 2026 GMT
Subject: CN=0515b008e52f90d9f5eac1f139413419775166ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:f7:31:c7:bc:9a:60:66:92:ac:a0:bc:ee:
b0:23:81:19:93:0f:fd:e4:a1:5c:17:9d:5f:78:63:
f6:32:51:74:50:a5:31:0f:ae:e7:5c:f7:b0:f3:2f:
2f:6f:b0:5f:94:bf:68:9b:04:f0:23:65:96:7a:14:
53:40:de:f0:4c:d6:86:ad:62:54:f8:48:09:a9:11:
ac:ab:82:e1:3f:21:63:a2:12:a5:9b:f4:30:a2:2e:
5c:64:c5:ca:cc:5b:62:9e:08:01:dc:23:1d:e1:3f:
d4:6c:85:bf:b8:61:d6:d2:2d:70:91:8f:9a:72:13:
58:1b:96:9e:05:be:39:1b:8c:45:cb:9c:41:98:22:
c7:74:cd:f6:59:65:c9:12:5e:7e:1f:26:42:5c:95:
6d:d6:e8:2f:c3:4a:09:e8:7f:7b:17:50:3a:a1:f5:
a7:5c:ae:06:2b:4d:b3:9a:5e:d0:16:dc:db:39:54:
c2:f6:14:99:b5:cf:29:18:bb:dc:3a:25:83:d4:77:
73:5a:b1:f6:cc:48:fb:5f:40:75:6f:cd:2f:b4:98:
b4:84:fd:1a:fd:44:93:2f:3b:67:bf:4a:76:16:d0:
d7:59:fb:f6:86:0e:86:51:48:16:ea:e9:16:e3:80:
22:a7:c3:fb:87:dc:a2:25:6a:3d:af:76:f0:72:b6:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:15:B0:08:E5:2F:90:D9:F5:EA:C1:F1:39:41:34:19:77:51:66:AD
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:73:7c:08:91:dd:e9:b3:0b:a2:4f:22:8a:81:c4:79:16:b9:
63:cd:b5:35:3f:33:e9:4a:ab:27:23:4e:4e:29:36:33:47:c2:
47:ca:e1:31:b4:0e:b0:25:75:a5:95:5c:31:8f:b8:a1:11:23:
15:00:39:72:ca:c5:9b:95:cd:12:7e:63:c1:ca:a4:e4:79:1b:
cc:71:ee:32:74:e5:a1:42:8a:c4:fc:d4:ba:c9:a4:ae:a2:4d:
1b:c3:04:e0:95:97:a3:4b:ba:bc:a5:51:a0:7c:9d:10:47:52:
5f:17:cc:e9:78:c7:9a:3e:3a:fd:c6:c7:66:5a:4a:eb:19:91:
93:ef:ec:36:61:77:5c:0a:cc:57:2f:67:8a:b2:6d:83:cf:82:
6b:d6:81:94:5e:0f:25:7e:3e:95:9f:36:08:07:d7:d1:c5:45:
6d:21:60:fe:a2:ee:1b:1a:8c:fc:d4:15:eb:16:6d:54:91:bf:
ff:bb:f2:cb:62:c2:d2:37:2c:0a:e7:d9:2c:35:a1:66:83:04:
51:d1:45:f4:24:74:56:6b:85:94:2f:f0:10:15:e0:10:be:5c:
0d:cc:bc:15:f2:7f:28:c3:3b:cb:76:6d:f9:b6:ce:92:bc:5a:
24:86:35:12:df:f2:43:7c:6e:25:b2:a6:26:cc:86:86:72:43:
2f:8e:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:45 2026 by rpki-client