Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: LoIkf66P48s85bhMAdH8XcvCoTHlPS3yIBBg3H0JSjU=
Subject key identifier: 35:97:91:F1:57:43:19:8B:37:D4:F8:96:DC:C0:7A:29:64:43:37:8D
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019E1D22AA66B9E21BE52C0FEEA99B2E483A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 117B
Signing time: Tue 12 May 2026 17:01:11 +0000
Manifest this update: Tue 12 May 2026 17:01:11 +0000
Manifest next update: Wed 13 May 2026 17:01:11 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: Qjpp0+U0OGW7u5terVY6li3Iqh/ykIOZLmiO4Tkkzh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:aa:66:b9:e2:1b:e5:2c:0f:ee:a9:9b:2e:48:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: May 12 17:01:11 2026 GMT
Not After : May 13 17:01:11 2026 GMT
Subject: CN=359791f15743198b37d4f896dcc07a296443378d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:f6:84:6c:eb:c4:5f:1e:7d:b3:ef:36:16:
a7:45:42:5b:c1:ee:69:3a:4e:af:83:37:58:5b:58:
62:ea:7d:97:c4:4e:bf:89:55:bb:52:f0:d7:0d:4a:
c5:7a:06:fb:41:bb:dc:19:4c:eb:a6:45:d1:bc:e2:
68:16:14:10:11:fd:28:cc:50:39:77:b6:a3:a4:55:
8b:ed:77:fd:75:8b:48:fd:c1:4f:64:a2:90:44:67:
ba:84:5b:e0:c7:85:60:3d:c7:72:25:d8:44:3a:c7:
95:94:12:a7:ef:af:e1:25:e2:90:f0:52:70:52:aa:
c3:c1:41:14:51:5b:ee:dc:e8:da:67:0e:d6:5b:4f:
06:df:e8:b3:13:2b:d5:ce:dd:10:52:2f:9a:1a:b2:
f4:e7:39:19:c0:46:c3:3b:ae:c9:13:3e:dd:aa:99:
3d:e5:73:70:f4:2c:b3:d0:50:a4:3f:72:14:8c:0d:
a2:82:f7:4d:8a:78:f0:97:2d:d1:16:db:f4:87:29:
a9:62:a4:47:d1:7b:36:3d:4b:ce:0a:89:53:53:cc:
3f:78:d5:4d:cd:cf:d9:52:bc:84:ed:8d:75:47:64:
6c:00:25:f2:6a:66:9c:64:73:ea:73:fd:7b:37:18:
06:30:33:fb:ea:62:62:8c:ba:f7:d4:e9:76:c0:52:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:91:F1:57:43:19:8B:37:D4:F8:96:DC:C0:7A:29:64:43:37:8D
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:17:92:07:e3:6c:ef:90:b1:a2:f1:d1:44:8c:dd:20:ca:20:
ba:b1:57:a3:5b:5c:b9:53:de:cf:15:af:00:57:b3:0f:4c:1d:
01:8a:92:d6:88:cf:8b:36:4e:67:66:d5:7b:dc:25:3c:85:5b:
13:bf:3d:f2:e5:97:3f:cd:ba:27:97:ec:3d:5b:67:e3:d3:3a:
41:71:0e:c9:84:89:4e:18:9a:f8:88:4f:bb:8a:1b:48:73:22:
40:f6:17:6a:9f:0c:b6:e0:e5:ef:87:60:61:a1:d4:aa:7a:5e:
21:d9:ea:04:8d:17:e8:4a:80:a4:ed:e4:2d:59:8b:68:6a:96:
65:2d:44:44:1b:01:0a:2e:8a:7b:e0:1d:5b:8d:5e:7c:c1:df:
7b:39:bc:43:d6:29:5c:76:73:a9:3a:ae:5d:8d:df:a4:36:e8:
44:98:24:66:5e:5f:4f:7c:eb:37:0c:c8:a8:78:76:8f:1d:df:
1d:35:04:f1:17:56:43:ba:84:50:37:cc:8a:76:38:49:77:1f:
ff:a5:f4:d7:dd:53:47:64:31:94:e8:2f:4f:a3:27:2f:18:c2:
a4:8a:15:40:d0:e7:8b:fd:b2:f5:a9:91:41:90:48:84:71:24:
97:9e:27:e9:41:96:8e:2c:9c:3b:21:75:b2:0c:84:ec:ad:0a:
7e:c6:9f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIqpmueIb5SwP7qmbLkg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YzM2MzNhY2JmNjNjMmVjYjEwMjA1YjliOTI1ODBhYmI0
ZWI4N2UwHhcNMjYwNTEyMTcwMTExWhcNMjYwNTEzMTcwMTExWjAzMTEwLwYDVQQD
EygzNTk3OTFmMTU3NDMxOThiMzdkNGY4OTZkY2MwN2EyOTY0NDMzNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSr2hGzrxF8efbPvNhanRUJbwe5p
Ok6vgzdYW1hi6n2XxE6/iVW7UvDXDUrFegb7QbvcGUzrpkXRvOJoFhQQEf0ozFA5
d7ajpFWL7Xf9dYtI/cFPZKKQRGe6hFvgx4VgPcdyJdhEOseVlBKn76/hJeKQ8FJw
UqrDwUEUUVvu3OjaZw7WW08G3+izEyvVzt0QUi+aGrL05zkZwEbDO67JEz7dqpk9
5XNw9Cyz0FCkP3IUjA2igvdNinjwly3RFtv0hympYqRH0Xs2PUvOColTU8w/eNVN
zc/ZUryE7Y11R2RsACXyamacZHPqc/17NxgGMDP76mJijLr31Ol2wFKztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWXkfFXQxmLN9T4ltzAeilkQzeNMB8GA1UdIwQY
MBaAFLnDYzrL9jwuyxAgW5uSWAq7Trh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUt
OTllY2E1NjUxMDIzLzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wY2QyZjMtMGY2YS00ZWFhLTk4NDUtOTllY2E1NjUxMDIz
LzEvdWNOak9zdjJQQzdMRUNCYm01SllDcnRPdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAheSB+Ns
75CxovHRRIzdIMogurFXo1tcuVPezxWvAFezD0wdAYqS1ojPizZOZ2bVe9wlPIVb
E7898uWXP826J5fsPVtn49M6QXEOyYSJThia+IhPu4obSHMiQPYXap8MtuDl74dg
YaHUqnpeIdnqBI0X6EqApO3kLVmLaGqWZS1ERBsBCi6Ke+AdW41efMHfezm8Q9Yp
XHZzqTquXY3fpDboRJgkZl5fT3zrNwzIqHh2jx3fHTUE8RdWQ7qEUDfMinY4SXcf
/6X0191TR2QxlOgvT6MnLxjCpIoVQNDni/2y9amRQZBIhHEkl54n6UGWjiycOyF1
sgyE7K0KfsafGg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:57:07 2026 by rpki-client