Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: xzjGyNnNiZjMzex17PeSbLCQ9dB5rbuiSqRMR1Zrn7c=
Subject key identifier: 7A:59:32:9B:F2:58:AA:D4:38:6F:0B:1D:17:F8:C7:8B:82:5C:03:73
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019EB7A0E7CF13169C747B8A04255E0A6D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 11CB
Signing time: Thu 11 Jun 2026 17:00:36 +0000
Manifest this update: Thu 11 Jun 2026 17:00:36 +0000
Manifest next update: Fri 12 Jun 2026 17:00:36 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: OP7egFX7koCqW8u++03jJf5lgmx/SAmw779NZu81Kn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:e7:cf:13:16:9c:74:7b:8a:04:25:5e:0a:6d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jun 11 17:00:36 2026 GMT
Not After : Jun 12 17:00:36 2026 GMT
Subject: CN=7a59329bf258aad4386f0b1d17f8c78b825c0373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:52:49:2d:de:c5:1f:bc:d9:b8:15:fd:41:
20:c8:e0:d7:e2:b0:06:6a:2d:ca:ef:44:a5:af:91:
1a:3f:75:32:df:39:1e:9b:9d:bd:5c:e5:49:9d:a1:
f8:8e:90:0d:45:b1:41:51:1b:36:66:31:a6:e8:91:
b2:22:d8:12:7b:7b:71:61:3e:ed:d3:95:61:38:58:
e9:93:03:55:77:ba:c8:17:9a:a8:44:22:2c:fc:2d:
4e:76:06:95:de:9b:39:ff:cb:cc:2e:13:f4:25:05:
34:a3:7f:da:51:99:49:0e:5f:80:f0:f6:6f:42:98:
9f:72:6d:89:b6:20:25:ee:00:15:78:8e:c8:33:a1:
31:a0:5d:64:19:d7:ec:26:c6:04:57:b4:79:55:e8:
8c:65:dc:ed:1c:b3:ac:00:03:0f:ac:d2:c6:2b:e5:
83:19:06:48:96:7b:4d:5a:36:e9:0f:cf:e1:27:84:
78:c1:4d:4a:d2:d9:78:75:a2:c7:4e:58:24:a9:56:
69:6c:04:8e:24:e9:f6:46:d9:e3:42:1d:aa:d9:4f:
8d:a4:43:22:30:30:e8:93:d1:4d:e9:44:45:d9:bd:
61:c3:a5:d2:6e:5c:1b:9d:e4:9c:be:44:c8:f3:03:
17:92:e0:6a:7f:c2:42:8e:c7:cd:e8:d6:6e:97:f3:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:59:32:9B:F2:58:AA:D4:38:6F:0B:1D:17:F8:C7:8B:82:5C:03:73
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:62:32:34:a6:99:63:13:a8:87:e8:29:b2:78:db:ae:be:1c:
77:ff:53:09:dc:d7:2b:c6:70:9f:d6:81:79:ff:7a:99:8d:d1:
49:d1:f7:0f:f6:db:b0:1f:bf:23:db:3c:2c:28:b0:9a:7b:fb:
b2:ff:11:07:2f:84:49:b7:d2:d1:c6:2d:ea:8f:de:13:90:48:
71:a0:83:5f:e6:fb:be:b5:bc:fc:5b:e0:41:9f:cc:ef:fe:9b:
83:10:22:e8:6a:9b:0b:5f:f4:56:95:1f:33:87:6b:f9:26:74:
cf:12:e4:39:fe:1d:6d:d0:ae:fd:db:36:d8:45:14:d8:bd:7e:
26:f6:04:69:26:af:20:dc:fc:ce:80:b7:81:76:d4:18:e0:2c:
6e:66:0d:10:f7:c4:c7:6f:94:b1:84:61:6b:52:28:83:1c:cc:
a8:2c:38:68:b3:f3:7e:cc:82:ba:1c:2d:2b:19:06:b6:22:b9:
1a:77:e2:bb:7b:99:7c:78:da:19:4d:d0:ac:fb:cd:ae:a8:e3:
a4:56:dc:7b:6d:ab:9b:10:84:2e:68:98:34:c7:13:5f:29:df:
43:70:3b:f1:c7:4f:78:12:a6:c5:62:be:92:23:26:02:38:b5:
cc:a3:50:4b:a3:65:b0:93:5a:32:9f:92:74:c3:57:db:54:9a:
eb:3b:d4:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oOfPExacdHuKBCVeCm19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0
ZWI4N2UwHhcNMjYwNjExMTcwMDM2WhcNMjYwNjEyMTcwMDM2WjAzMTEwLwYDVQQD
Eyg3YTU5MzI5YmYyNThhYWQ0Mzg2ZjBiMWQxN2Y4Yzc4YjgyNWMwMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hVSSS3exR+82bgV/UEgyODX4rAG
ai3K70Slr5EaP3Uy3zkem529XOVJnaH4jpANRbFBURs2ZjGm6JGyItgSe3txYT7t
05VhOFjpkwNVd7rIF5qoRCIs/C1OdgaV3ps5/8vMLhP0JQU0o3/aUZlJDl+A8PZv
Qpifcm2JtiAl7gAVeI7IM6ExoF1kGdfsJsYEV7R5VeiMZdztHLOsAAMPrNLGK+WD
GQZIlntNWjbpD8/hJ4R4wU1K0tl4daLHTlgkqVZpbASOJOn2RtnjQh2q2U+NpEMi
MDDok9FN6URF2b1hw6XSblwbneScvkTI8wMXkuBqf8JCjsfN6NZul/ND9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpZMpvyWKrUOG8LHRf4x4uCXANzMB8GA1UdIwQY
MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt
OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz
LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2IyNKaZ
YxOoh+gpsnjbrr4cd/9TCdzXK8Zwn9aBef96mY3RSdH3D/bbsB+/I9s8LCiwmnv7
sv8RBy+ESbfS0cYt6o/eE5BIcaCDX+b7vrW8/FvgQZ/M7/6bgxAi6GqbC1/0VpUf
M4dr+SZ0zxLkOf4dbdCu/ds22EUU2L1+JvYEaSavINz8zoC3gXbUGOAsbmYNEPfE
x2+UsYRha1IogxzMqCw4aLPzfsyCuhwtKxkGtiK5Gnfiu3uZfHjaGU3QrPvNrqjj
pFbce22rmxCELmiYNMcTXynfQ3A78cdPeBKmxWK+kiMmAji1zKNQS6NlsJNaMp+S
dMNX21Sa6zvU/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:17 2026 by rpki-client