Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: 9iUSUTS54Q1TSKMMSlqPILA7ImQOeN5rIyG5pRIKlzc=
Subject key identifier: AA:1F:1D:78:5A:EE:61:AD:A2:50:2D:55:39:93:90:37:25:88:9A:88
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019F9F5F76562EC2DE01F7354C8AF11BC53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 1243
Signing time: Sun 26 Jul 2026 17:01:01 +0000
Manifest this update: Sun 26 Jul 2026 17:01:01 +0000
Manifest next update: Mon 27 Jul 2026 17:01:01 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: W9bKoqQkafgzjObb/n878PEJFiKmydvkMWhHO0aAwBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:76:56:2e:c2:de:01:f7:35:4c:8a:f1:1b:c5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jul 26 17:01:01 2026 GMT
Not After : Jul 27 17:01:01 2026 GMT
Subject: CN=aa1f1d785aee61ada2502d553993903725889a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:cd:35:60:35:c3:69:ac:3b:96:e9:66:fe:
94:67:ee:c6:6d:71:0f:81:7a:68:d9:96:56:ce:98:
a5:87:3d:5e:86:89:04:7b:ef:d3:dc:9d:14:95:60:
b7:19:3a:68:d3:3e:c4:79:3d:96:5c:7a:5f:2d:2e:
a9:35:c5:ad:c9:27:cb:8c:ae:99:f1:d5:17:ee:92:
12:b2:0f:ec:ae:68:4d:20:4c:c3:66:5c:fa:6f:eb:
84:b1:cf:25:16:ae:48:70:b6:57:b7:39:cc:21:d4:
63:1d:73:aa:a4:78:b8:40:03:f3:f1:d2:99:ec:b2:
00:e9:6f:9c:c6:ac:b8:7c:58:d8:89:f0:3f:35:37:
a5:6b:9b:9f:fb:2b:03:a6:ff:de:5d:cc:20:0d:83:
0f:d5:00:57:d4:02:b3:41:98:ea:67:a3:ca:e3:14:
b7:dd:d2:d2:23:7b:43:95:c4:8e:a5:2c:08:20:13:
38:53:2b:59:49:af:02:17:43:35:d0:4b:31:f6:92:
af:f3:87:eb:f4:5e:2b:bb:57:19:cc:84:62:b2:3a:
fd:bc:4d:4a:ce:dc:1c:04:19:95:d6:6d:d0:43:a9:
6e:68:c1:64:cf:8f:30:d2:39:e9:a9:77:1f:0e:f8:
1e:ba:79:aa:9f:9e:6d:70:26:48:a1:c9:a4:6c:e0:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:1D:78:5A:EE:61:AD:A2:50:2D:55:39:93:90:37:25:88:9A:88
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:06:1a:80:fc:42:51:4b:e0:2d:52:15:0b:9c:29:19:f4:e3:
1a:47:e9:f8:2f:6c:d5:cb:3a:80:52:50:9d:ad:39:5e:6d:8d:
63:66:b4:d9:c4:e5:0b:ee:82:37:a4:5b:9f:b7:bd:b3:b3:7a:
63:1d:af:45:19:bd:c5:be:68:58:32:47:09:da:0f:e2:5f:b9:
e9:7e:75:94:d8:fb:58:1c:c8:7e:bc:b9:8e:71:bd:2e:ed:61:
7c:22:41:c5:ca:bf:cb:e7:4d:e5:7e:66:c2:c5:e4:f4:ab:98:
b1:18:b7:83:b0:da:46:d1:f7:81:a6:4b:09:5e:be:9d:ab:44:
ae:af:93:50:79:fa:2a:a6:f2:56:a3:20:e8:c1:7f:41:34:f6:
b3:56:bf:93:fb:60:25:fd:ed:52:9a:6e:94:70:9a:ca:5c:bd:
27:14:73:96:f6:23:ad:c9:71:f5:3a:b8:45:f1:6b:50:0f:4b:
b2:86:38:52:67:0e:4b:d2:bf:79:94:cf:13:8e:8b:17:9f:81:
28:08:af:38:d2:8e:e2:f0:37:6b:cc:4f:61:3d:1c:6f:6a:08:
a4:c6:0a:cb:04:50:5a:a2:03:28:a6:95:66:f5:25:07:e4:83:
bf:14:53:98:e1:50:27:0c:a3:4e:b3:fe:e1:77:60:4b:53:3f:
21:75:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:22:02 2026 by rpki-client