Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: YordThCBI3Fa6Je+T+UkaI0bHx1XWcFmVhbN+SIojnc=
Subject key identifier: 7D:76:36:0B:20:9A:29:8C:E7:FF:1F:32:38:6F:65:7A:5F:BD:40:D2
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01A1822B6659AFCA86CD5FF6D2E2D39C7EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 133E
Signing time: Wed 28 Oct 2026 11:00:44 +0000
Manifest this update: Wed 28 Oct 2026 11:00:44 +0000
Manifest next update: Thu 29 Oct 2026 11:00:44 +0000
Files and hashes: 1: 6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa (hash: 2S27aehbfJcrJNKLthId4Hl3jXo5Nbp62N40ke4PF/Q=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: g7KwnMwccVOi8+oaA3xuTKT7cxSMQ6iMLyXGH7B77pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:66:59:af:ca:86:cd:5f:f6:d2:e2:d3:9c:7e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Oct 28 11:00:44 2026 GMT
Not After : Oct 29 11:00:44 2026 GMT
Subject: CN=7d76360b209a298ce7ff1f32386f657a5fbd40d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:b6:06:22:0a:95:52:90:19:28:23:04:38:
ff:ce:7f:36:d0:cf:b8:45:f6:61:87:6b:12:fe:bc:
78:78:63:c3:45:ef:99:a0:37:24:d5:66:da:4e:6a:
39:7d:8c:4c:d8:52:4a:50:ba:99:6e:b1:50:a2:49:
e5:b7:46:e1:21:22:b6:fb:68:12:f9:b7:d7:15:2e:
92:77:5e:90:4c:93:dd:6b:af:bc:5f:8f:64:e8:92:
72:96:67:32:36:d4:08:61:c5:eb:f0:6d:b7:8f:73:
87:62:1b:01:e7:ae:cb:43:38:bb:0f:bf:a7:19:2f:
13:2b:3a:62:62:46:d5:91:c9:2d:85:b8:52:44:82:
14:14:69:0e:cf:27:ec:55:37:41:30:f9:3c:f0:32:
6e:bb:35:1a:6b:42:80:2e:49:f8:d8:5a:81:7c:e0:
ab:04:85:33:0c:3f:67:02:7d:59:94:4b:48:f5:c6:
db:cb:3f:72:5f:02:18:1c:b8:d9:7c:81:50:f4:fb:
21:c7:00:10:d4:05:5a:6e:8b:02:ac:e0:f7:0f:8a:
eb:6a:00:5a:8d:3c:3b:a9:75:79:a2:66:1c:23:5b:
1f:2c:a6:ce:1a:f6:99:4b:de:99:85:c7:a6:dc:eb:
91:26:63:e5:3f:6b:be:e4:9c:b7:97:7f:57:a4:d1:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:36:0B:20:9A:29:8C:E7:FF:1F:32:38:6F:65:7A:5F:BD:40:D2
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:28:04:7e:e6:aa:f8:45:48:a2:fa:26:87:9f:0c:3c:2b:f3:
48:1e:21:52:16:f3:e0:94:cf:3d:05:56:72:ce:54:a0:0f:37:
49:40:29:ca:49:e0:94:30:ed:19:c6:6b:e4:6b:62:59:44:0f:
06:37:bc:54:de:da:0a:e2:a7:3c:af:c9:cf:b0:58:bb:84:83:
de:e1:9d:dd:82:fa:fa:ea:26:8a:c4:02:0e:01:9b:24:6f:ac:
33:49:c8:96:e0:c8:a8:23:06:ce:9f:8c:5f:27:01:a2:78:f6:
f1:98:da:9a:36:fb:ac:93:4c:71:df:fe:81:74:f5:ee:4c:fc:
05:02:c9:97:dd:46:71:7f:d2:67:19:98:b4:3b:1f:b4:20:f2:
77:b9:7a:04:60:b3:9e:52:4a:07:06:ae:26:88:df:05:0f:7b:
61:35:5c:91:2c:7b:5b:f8:08:ac:eb:16:90:03:cc:09:2c:7b:
8f:ea:a0:a2:c1:d5:2b:68:21:ce:ab:4e:1b:6e:f9:71:e4:b1:
24:c6:99:b6:86:13:c0:d8:cc:46:e7:e5:64:4a:1c:be:5e:c3:
9e:b5:5b:03:fd:c8:1f:e3:40:69:f0:37:59:f9:01:59:54:c4:
2a:0f:57:de:6e:d5:07:82:4a:69:f2:46:ad:41:a6:b1:1a:17:
ce:b1:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:18:24 2026 by rpki-client