Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier: mkvP5I3iczqT2k6+Bpg7ZaK7B96agQs1o8JqrEaRcEU=
Subject key identifier: 0D:4A:A6:CA:5C:0F:14:5B:F3:8A:1D:95:38:E6:ED:B1:DF:45:F5:FA
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019D104558729A07F1F80BEBC6E24E546C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number: 119D
Signing time: Sat 21 Mar 2026 12:01:13 +0000
Manifest this update: Sat 21 Mar 2026 12:01:13 +0000
Manifest next update: Sun 22 Mar 2026 12:01:13 +0000
Files and hashes: 1: 7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa (hash: ELHzePk+eTFwUV0lzyfOvVlVrH0Oe68AnbgtcOo/mUI=)
2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
3: eSb5SaQiTFGxJv1r1Rg9Zwy6k48.roa (hash: 3gfCITmerObL4KZJwGEUq8/MM5Wu7GSAZmrfKVP18TY=)
4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: VY3k78Y60NePWHONiVUk1+allQbza2YffqsrpzgKKzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:45:58:72:9a:07:f1:f8:0b:eb:c6:e2:4e:54:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Mar 21 12:01:13 2026 GMT
Not After : Mar 22 12:01:13 2026 GMT
Subject: CN=0d4aa6ca5c0f145bf38a1d9538e6edb1df45f5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:70:00:17:88:02:f1:ef:e8:c1:2f:1b:7d:
6c:1c:a6:a1:e9:01:96:2f:7a:7e:81:7b:4c:2f:4d:
96:61:52:5f:b9:37:58:b9:60:d0:45:77:de:98:aa:
fa:d0:20:56:5c:ec:b6:cf:07:fe:36:ff:57:9c:36:
c4:e2:35:3d:23:46:f5:96:3f:c8:ad:fb:14:b7:fb:
d4:c3:19:10:4e:d0:05:c2:d6:0d:86:92:34:0a:e8:
c9:65:0d:8c:60:06:2d:c7:1d:ea:19:c0:a7:31:6c:
2c:3c:cb:8a:6a:80:b1:71:37:d0:15:b4:68:69:da:
c7:4c:6e:c1:27:23:4b:a6:bb:2e:c2:9a:6e:89:39:
90:62:90:ba:14:a3:fc:76:e5:e9:54:31:44:12:c7:
80:a0:e2:07:1a:84:c8:8d:7f:bd:74:fb:ab:f6:a9:
24:ee:22:1e:47:a6:b2:c6:91:83:db:7f:cb:90:2f:
5c:96:fb:d6:a9:f4:b5:a4:3c:5b:07:da:b5:08:b6:
e7:75:93:1a:c0:86:55:86:40:e3:5c:1b:9e:f3:8a:
ac:65:b9:2e:c5:43:c9:21:da:32:e8:a3:03:e5:2a:
84:47:13:df:ec:85:67:3f:fa:a1:9b:a5:5d:7b:5d:
52:83:d3:bf:0c:30:32:4a:8c:31:b1:70:5a:8c:e8:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:A6:CA:5C:0F:14:5B:F3:8A:1D:95:38:E6:ED:B1:DF:45:F5:FA
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:33:ec:5f:24:00:0a:5b:7c:da:b1:0e:1b:dd:98:c8:b1:db:
d1:58:61:34:fc:a9:7d:06:e5:e1:ea:9e:a9:72:39:b5:60:8f:
f6:49:2a:7d:2a:49:3c:c8:aa:f7:3d:ed:72:2e:d3:cd:e4:93:
18:e9:c9:eb:c0:a8:d3:b6:b0:2c:02:fb:b4:3b:0b:d6:58:e2:
67:ec:f1:a1:19:df:6d:20:c0:48:07:22:e2:92:59:13:d3:eb:
ce:93:c1:6a:f1:43:49:41:10:c1:7b:d9:75:e1:8a:25:d6:4e:
88:c1:29:ff:e9:25:af:23:b1:db:68:ef:b8:c7:76:48:b3:a5:
94:f5:f1:72:cf:36:c2:41:14:20:ee:69:c7:69:cd:f2:5c:4a:
f7:32:06:1a:dd:54:72:ae:b5:21:79:ec:59:e0:96:f8:65:d7:
51:95:dd:14:c0:6a:a5:b6:8d:62:43:e0:dd:81:7a:e2:75:cc:
f4:62:51:df:00:d9:c9:30:6f:9b:41:4c:a5:8a:b5:d6:29:9f:
67:fe:5b:9f:e4:35:5b:b7:13:ea:e0:dd:80:be:64:88:43:ac:
a0:98:65:54:30:e4:cb:e5:2a:97:61:4b:d7:c3:f0:4e:a2:16:
8f:4f:35:90:04:fd:25:9c:d3:d8:26:1f:8f:86:c3:76:fd:1d:
73:ef:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 19:21:27 2026 by rpki-client