Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: RsvJ8Y8KlJ0e5nrfNlg3nouApRRnl197ur2eaMlN1C8=
Subject key identifier: E9:64:1B:78:C2:C7:14:73:1E:DA:38:13:D7:C3:38:5C:5A:59:11:B1
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01A0CE91D8A24661227FD343874B2F11241E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 12E1
Signing time: Wed 23 Sep 2026 14:00:59 +0000
Manifest this update: Wed 23 Sep 2026 14:00:59 +0000
Manifest next update: Thu 24 Sep 2026 14:00:59 +0000
Files and hashes: 1: 6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa (hash: 2S27aehbfJcrJNKLthId4Hl3jXo5Nbp62N40ke4PF/Q=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: s9vTTD93FuI3EC2hoFoCuOqWW/5ySaw9DqWXcSNXy/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:d8:a2:46:61:22:7f:d3:43:87:4b:2f:11:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Sep 23 14:00:59 2026 GMT
Not After : Sep 24 14:00:59 2026 GMT
Subject: CN=e9641b78c2c714731eda3813d7c3385c5a5911b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:43:c9:3f:45:35:10:9f:91:e8:14:93:e2:
a6:9e:b9:72:7d:a3:49:e4:98:2d:fd:24:87:ef:14:
8e:2b:bb:00:89:8c:a9:34:e4:bc:7b:24:62:dc:1b:
f2:f3:e9:a3:5c:d4:d2:2e:f9:c8:a8:c2:6c:1a:52:
40:3b:72:7e:6a:e1:ca:b7:d7:86:ef:88:88:81:a3:
a9:39:79:45:8b:ff:1e:b9:e5:8e:64:2f:8b:15:ee:
ad:d2:12:2f:6b:91:ce:a1:21:82:03:6a:82:90:40:
68:3d:c0:68:92:6e:d4:ec:4c:e3:2a:8e:96:7c:09:
c1:b6:ba:07:6b:1f:49:50:da:63:27:4b:0e:cf:30:
4f:5a:74:db:13:67:4b:42:a4:d7:54:e4:1d:82:65:
39:fd:2d:10:dd:ea:11:a5:b6:65:58:b3:96:be:66:
3a:53:42:e7:3f:d7:6a:3c:29:b3:af:69:bf:8d:01:
99:d8:2a:95:ac:02:89:b6:e7:70:b0:1a:0c:d6:b6:
be:2e:dc:94:7f:51:e5:33:7f:af:84:d9:9f:2b:d1:
31:4a:b3:87:c3:e2:a9:a7:67:aa:11:4c:f9:31:f6:
66:df:99:06:b0:ad:cc:19:4b:bf:ac:c9:4e:a7:1d:
be:88:9f:de:2f:5b:20:7d:1b:2c:3c:48:20:60:5f:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:1B:78:C2:C7:14:73:1E:DA:38:13:D7:C3:38:5C:5A:59:11:B1
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1b:c3:4d:6d:d3:12:ef:36:a5:26:45:86:18:92:e6:fe:b3:
80:5f:8e:d4:a9:66:f0:6f:56:d2:13:39:f6:76:ca:d3:1c:a0:
58:8c:98:11:73:9a:44:ab:2b:0f:3a:fb:39:0c:bd:6e:0e:4e:
51:64:be:ea:5c:d2:d8:f9:aa:d8:04:17:e6:b2:4e:d4:16:60:
aa:ba:8f:f1:89:e0:d6:0f:9e:0d:be:f3:5e:be:bb:df:fc:a9:
1f:08:00:57:21:5b:08:14:5a:9b:ce:44:c0:53:45:72:8a:19:
f6:6d:94:33:de:fb:7c:ce:8b:c1:e5:03:98:f7:0a:8f:cc:1f:
59:67:6b:a2:4b:1e:ad:c6:38:f8:78:5a:ea:fe:f5:c7:f1:c9:
0b:59:dd:ce:e4:e1:e2:d1:46:ee:05:fc:f2:75:d0:92:76:ec:
3f:11:72:df:96:f8:f0:6e:f8:3e:b6:d9:59:37:8d:ca:b6:e2:
45:a6:9c:c2:b5:48:09:91:cc:fa:e0:89:c9:1c:ab:e2:7a:45:
50:a6:69:1c:04:bb:13:62:5e:fe:85:f4:97:e7:ae:07:98:3a:
95:d8:79:c9:cb:4b:83:5a:90:6b:f5:4f:7c:0a:29:4d:70:91:
00:e4:27:8a:58:d4:af:f7:8f:2f:85:31:94:ec:03:09:b4:c7:
ff:0d:49:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkdiiRmEif9NDh0svESQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0
ZWI4N2UwHhcNMjYwOTIzMTQwMDU5WhcNMjYwOTI0MTQwMDU5WjAzMTEwLwYDVQQD
EyhlOTY0MWI3OGMyYzcxNDczMWVkYTM4MTNkN2MzMzg1YzVhNTkxMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40hDyT9FNRCfkegUk+KmnrlyfaNJ
5Jgt/SSH7xSOK7sAiYypNOS8eyRi3Bvy8+mjXNTSLvnIqMJsGlJAO3J+auHKt9eG
74iIgaOpOXlFi/8eueWOZC+LFe6t0hIva5HOoSGCA2qCkEBoPcBokm7U7EzjKo6W
fAnBtroHax9JUNpjJ0sOzzBPWnTbE2dLQqTXVOQdgmU5/S0Q3eoRpbZlWLOWvmY6
U0LnP9dqPCmzr2m/jQGZ2CqVrAKJtudwsBoM1ra+LtyUf1HlM3+vhNmfK9ExSrOH
w+Kpp2eqEUz5MfZm35kGsK3MGUu/rMlOpx2+iJ/eL1sgfRssPEggYF+nlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlkG3jCxxRzHto4E9fDOFxaWRGxMB8GA1UdIwQY
MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt
OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz
LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhvDTW3T
Eu82pSZFhhiS5v6zgF+O1Klm8G9W0hM59nbK0xygWIyYEXOaRKsrDzr7OQy9bg5O
UWS+6lzS2Pmq2AQX5rJO1BZgqrqP8Yng1g+eDb7zXr673/ypHwgAVyFbCBRam85E
wFNFcooZ9m2UM977fM6LweUDmPcKj8wfWWdroksercY4+Hha6v71x/HJC1ndzuTh
4tFG7gX88nXQknbsPxFy35b48G74PrbZWTeNyrbiRaacwrVICZHM+uCJyRyr4npF
UKZpHAS7E2Je/oX0l+euB5g6ldh5yctLg1qQa/VPfAopTXCRAOQniljUr/ePL4Ux
lOwDCbTH/w1JmA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:16 2026 by rpki-client