Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: 6dDNJzQGG9P0vRf3eINrzs5l6nLWTX/J5BcPDzlpCqI=
Subject key identifier: 02:3D:80:AE:CC:35:C0:49:40:47:82:42:07:86:23:4C:DB:C8:AB:96
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01A1DEDE549C7DDB327ECC48892BC45B9FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 136E
Signing time: Sun 15 Nov 2026 11:01:14 +0000
Manifest this update: Sun 15 Nov 2026 11:01:14 +0000
Manifest next update: Mon 16 Nov 2026 11:01:14 +0000
Files and hashes: 1: 6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa (hash: 2S27aehbfJcrJNKLthId4Hl3jXo5Nbp62N40ke4PF/Q=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: IApdW2OqUy45G6QHzlEfhazzDhciSMDaeaVwjtPjXrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:54:9c:7d:db:32:7e:cc:48:89:2b:c4:5b:9f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Nov 15 11:01:14 2026 GMT
Not After : Nov 16 11:01:14 2026 GMT
Subject: CN=023d80aecc35c049404782420786234cdbc8ab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:b2:3d:1d:2e:c3:3c:59:89:63:3c:c3:2a:
ae:c3:6a:26:b5:79:7c:b7:0c:bf:f8:33:16:25:cf:
4e:68:95:a5:e1:50:0a:62:55:1c:d0:ce:da:c1:03:
29:4b:21:5b:70:cb:f5:d6:1c:7c:09:b2:14:d8:f4:
22:0d:61:97:1a:01:22:d5:14:a4:fc:b0:e8:cf:18:
0a:4f:3b:58:9f:db:46:1d:df:bc:52:0b:3c:a9:2c:
09:49:a0:51:0d:33:99:36:ad:0a:0e:77:94:47:35:
2e:cd:2f:eb:0a:1e:c5:c0:7a:89:91:4e:16:06:93:
8f:7a:2b:7b:fb:5e:67:58:bc:56:3f:57:af:0b:87:
a5:79:05:02:e0:58:cb:32:8d:d8:38:eb:84:46:59:
b2:4e:d4:3e:3b:16:70:0a:fb:0b:aa:6f:37:ea:be:
6d:49:df:97:e9:3e:22:59:1d:7f:a4:94:7e:f2:9d:
f4:a5:4d:2a:89:67:48:a3:ef:de:a3:b1:5d:05:97:
58:28:31:fb:bb:12:82:f7:59:dd:a5:96:46:55:e8:
92:92:3e:1e:7d:2a:5a:fd:dc:a7:ea:8a:a8:af:81:
2f:2d:42:6c:55:20:f2:df:5a:05:26:e5:22:eb:6e:
21:c3:35:65:82:91:7d:f7:6b:91:d5:a3:ce:fd:7a:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:80:AE:CC:35:C0:49:40:47:82:42:07:86:23:4C:DB:C8:AB:96
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:62:59:8e:cc:62:af:90:9f:02:df:7b:6f:54:d6:fb:e9:
fe:89:30:3e:b6:ac:14:be:43:53:52:4a:2a:8d:65:e3:62:f5:
ca:73:df:50:67:eb:e6:68:c6:8f:c9:31:58:d7:79:77:81:87:
b9:46:cf:b4:c8:5a:bc:cf:80:29:0a:d0:74:02:3f:b4:33:eb:
7e:7b:ad:66:07:59:ec:c3:37:44:98:62:da:0d:50:3f:dc:14:
fb:7d:56:cf:60:d5:7d:ec:bb:7e:3b:d4:30:2d:cc:a7:a2:75:
60:c6:68:9d:16:32:99:02:b3:7c:f6:0f:1c:71:95:39:dd:04:
82:34:8f:0e:a0:20:39:67:85:57:08:de:92:6a:22:c9:da:83:
53:4e:88:ec:46:ec:ff:1b:e4:ae:2e:c0:47:88:77:9c:95:a9:
64:13:aa:d0:cb:b0:83:52:16:e6:18:6a:58:ee:3d:7f:8f:4a:
5a:e1:f2:dc:dd:a5:9d:9c:d3:08:c4:81:34:9d:06:9e:55:20:
ac:71:00:1a:8b:be:08:ca:3d:d1:64:47:a7:a2:25:82:ba:38:
8d:d6:5f:ae:57:9a:a3:bd:f3:98:95:6e:36:4a:34:8f:30:d1:
04:68:b8:f8:90:66:a3:c1:53:7f:53:18:9d:f8:12:9d:29:78:
4d:56:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:42:41 2026 by rpki-client