Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: AEpYlHMojOE7qmWqmR7qIIUEhtAnX7Q546IZ8tNTiik=
Subject key identifier: 10:5F:01:5B:B0:5F:2E:0F:FD:9F:B5:25:8F:1F:E2:BC:2E:59:8C:24
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019D27DF63335679F6DE4D117B8D2469E75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 10FC
Signing time: Thu 26 Mar 2026 02:00:44 +0000
Manifest this update: Thu 26 Mar 2026 02:00:44 +0000
Manifest next update: Fri 27 Mar 2026 02:00:44 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: IYNLh2Oc2pP0v4nvVgUQ3Qw/Lz8PCCqboIip6qZj9QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:63:33:56:79:f6:de:4d:11:7b:8d:24:69:e7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Mar 26 02:00:44 2026 GMT
Not After : Mar 27 02:00:44 2026 GMT
Subject: CN=105f015bb05f2e0ffd9fb5258f1fe2bc2e598c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:68:26:1d:4f:b9:b9:1f:66:16:99:e1:1b:9f:
a1:31:b7:09:d7:5f:05:7e:82:dc:9c:0a:e6:cd:ec:
03:50:24:b5:92:65:99:62:7e:2c:3d:49:d5:97:f2:
29:94:63:a1:7f:6e:bd:32:3d:8f:b9:67:13:b2:33:
b0:20:5e:29:6f:0e:29:1a:17:b6:73:ca:a0:b7:c2:
55:56:2e:e1:a7:cf:82:f6:fc:4f:59:56:32:0d:ee:
60:08:91:b6:b4:86:12:57:08:cb:dc:b0:7d:fb:9c:
fc:7a:a7:6a:f9:30:01:d2:dc:3b:45:2a:bc:36:c7:
fd:01:55:10:39:f6:cd:b7:c9:38:a4:90:b0:d1:5e:
04:2d:58:8b:61:e9:9b:e9:3c:3a:ba:39:30:43:5f:
97:fe:5a:71:c1:e2:25:9c:d1:5c:62:b1:0c:7b:e5:
46:87:b1:4e:0c:14:ec:ff:67:40:de:ed:87:aa:c8:
01:3e:a7:88:79:29:36:3d:89:68:e6:70:87:6b:02:
47:79:3e:90:16:d0:41:8b:ce:d4:49:6e:52:61:71:
e4:a2:de:3f:fd:a9:4c:c8:58:a8:a8:c2:c7:99:0a:
1e:f0:c8:54:93:3a:b6:b5:e0:35:93:2c:ec:cb:b6:
25:7c:2b:79:1d:9d:aa:1e:c6:12:42:57:7f:b2:b5:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:01:5B:B0:5F:2E:0F:FD:9F:B5:25:8F:1F:E2:BC:2E:59:8C:24
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:92:a2:d2:03:a3:a0:37:36:be:6e:94:6d:67:6e:10:42:01:
e0:1c:47:2f:ff:90:7c:37:d3:fc:09:10:dc:d0:04:c3:60:54:
c5:ec:a4:f3:b4:b3:f2:c8:44:5e:ee:55:fa:6b:1b:42:b2:18:
f0:36:b6:39:56:25:c7:d6:f0:2f:93:c1:42:3f:0b:c6:5a:af:
dc:e8:a5:ff:37:86:a1:e0:be:dd:6a:c5:f7:58:a8:9c:4f:37:
27:e1:07:a1:19:22:a1:dc:7e:d2:35:0f:4b:b3:83:e4:f0:a7:
bd:0d:0a:75:db:85:c2:f5:00:97:ea:2d:79:f9:dc:c0:ba:ee:
6c:e0:81:3a:60:a6:b6:47:c6:32:a4:52:40:0c:ad:81:10:b5:
c4:37:f1:5d:4e:a3:7f:0e:4e:55:4d:fa:c5:78:96:06:f2:7b:
2a:76:46:3e:bc:07:95:9b:c2:be:5b:18:c3:7c:36:4f:26:b2:
7d:67:71:87:10:99:d4:7b:34:e2:c2:44:e8:d8:75:5e:39:45:
81:9e:47:fc:9d:79:8b:fc:da:4b:a9:fc:e9:07:c4:0f:7d:d7:
3c:16:ce:51:c6:3a:0a:17:6e:52:5d:d3:ab:e6:b7:8e:3b:69:
28:ca:06:02:65:d4:97:44:dd:c8:76:61:79:1f:82:46:31:5f:
cb:47:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:10 2026 by rpki-client