Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: Heqbkh0vYsQ1jvZCkvdEjw498YsuO18kk/LznDLB1to=
Subject key identifier: 5F:14:2E:FE:F2:5D:E7:87:D8:55:C1:CD:37:7C:68:EE:8B:38:C0:F8
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 01A08C43DD90AE7C7E9E3A46EB32E73BF35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 17:00:52 +0000
Manifest this update: Thu 10 Sep 2026 17:00:52 +0000
Manifest next update: Fri 11 Sep 2026 17:00:52 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: Qfzja18960DPOqKu9zbDDWh/nvTQVMRaCYh0sTxhWmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:dd:90:ae:7c:7e:9e:3a:46:eb:32:e7:3b:f3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Sep 10 17:00:52 2026 GMT
Not After : Sep 11 17:00:52 2026 GMT
Subject: CN=5f142efef25de787d855c1cd377c68ee8b38c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:ae:83:ef:ea:32:f6:f7:8c:35:02:c0:8d:
d9:7b:37:99:51:34:e3:01:00:94:75:58:b0:11:c0:
70:d0:92:bb:11:38:48:83:c2:d8:f3:bc:1b:41:55:
66:7f:dd:02:81:d4:7f:aa:0f:2c:27:e2:dd:bf:29:
97:4f:b4:eb:ba:87:c7:d3:45:2b:a7:58:26:43:40:
3a:3f:32:b9:99:a1:ce:e1:cd:ca:86:5d:63:ca:e3:
27:3e:36:39:3b:7c:2a:89:59:4d:e7:72:fc:d8:bf:
82:9e:63:c7:2c:a9:4b:e3:fc:d3:67:6d:5c:99:2d:
86:40:b0:dc:e4:af:88:e9:6b:30:10:0f:0e:ef:c2:
cd:0a:d2:d2:42:8f:d0:ff:c9:f6:a5:bb:b4:48:2e:
c0:95:29:de:28:2d:cc:f5:75:79:e1:8c:5c:09:3c:
53:84:7e:a4:3f:f2:57:d2:32:c4:62:2a:c5:dd:a8:
f7:0a:55:34:b7:42:39:1a:37:53:98:59:4f:74:da:
fc:25:6e:6f:18:49:11:70:b2:80:7c:67:b5:6f:e3:
95:9c:4e:53:f9:6a:d4:3d:25:91:da:d9:f8:a3:70:
50:c3:ed:c0:48:d3:e8:a1:9c:05:60:76:d3:49:7b:
55:20:53:ae:a1:83:e1:f2:ad:66:9a:a9:58:0a:17:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:2E:FE:F2:5D:E7:87:D8:55:C1:CD:37:7C:68:EE:8B:38:C0:F8
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e8:7c:17:bb:6b:a4:58:f1:f2:fa:90:32:b6:cf:3c:b2:74:
4f:f0:2b:c8:a4:09:5a:bd:87:40:40:b6:35:e1:d3:f0:24:da:
69:f6:ad:ff:d9:01:77:52:5b:bc:de:81:eb:f8:60:78:03:64:
28:5f:5f:48:3e:33:87:06:84:b0:5c:c1:11:9c:d7:6a:c0:5c:
b9:76:8d:f1:8c:26:bb:70:ae:41:1b:78:37:d5:8b:dc:f3:b7:
e6:7f:12:c6:68:62:9f:ad:dd:6b:ed:18:be:2d:ef:9c:20:9f:
69:08:3d:3a:b7:05:ce:66:47:fb:1b:44:95:08:81:97:7c:f9:
8d:65:de:c3:75:4a:ac:25:c7:2b:06:de:43:61:6a:c8:63:7e:
e5:09:05:85:4d:6e:56:c9:5d:55:02:fe:70:3d:82:22:9a:75:
9f:e0:97:e6:c0:52:e0:ba:36:74:27:e1:4d:e4:c8:65:a5:77:
65:f5:bd:50:72:ef:ac:6f:dd:20:ab:f1:9e:43:20:52:4e:d4:
14:0c:90:cd:5f:5f:0c:3c:24:92:69:78:c7:af:91:c6:a7:23:
bd:33:53:a0:76:98:6c:94:a8:3c:9a:40:74:1d:61:ad:60:71:
0c:76:9d:de:de:53:6e:27:1f:e1:3d:39:4f:90:ca:20:14:86:
39:3a:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:21:14 2026 by rpki-client