Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: 2mv3JFi1EbGQbl1LC7RoiOw1/KzjOmvcpTWgdRAdyDw=
Subject key identifier: 12:55:94:B9:0C:C0:D1:EA:20:87:F9:97:53:A7:D8:48:8E:ED:21:58
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019F91DAC637957EEEBA5F76F04FDF1CCA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 123C
Signing time: Fri 24 Jul 2026 02:01:01 +0000
Manifest this update: Fri 24 Jul 2026 02:01:01 +0000
Manifest next update: Sat 25 Jul 2026 02:01:01 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: opQxo+IRpFWU4mOzDBkAqevFt1J5kli9ej0SrsK7So8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c6:37:95:7e:ee:ba:5f:76:f0:4f:df:1c:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jul 24 02:01:01 2026 GMT
Not After : Jul 25 02:01:01 2026 GMT
Subject: CN=125594b90cc0d1ea2087f99753a7d8488eed2158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:b9:a5:3a:5e:01:8e:16:9f:a9:d6:c0:cb:
a7:d6:ae:27:6e:cb:4b:99:2a:96:4a:d6:b9:2f:f7:
b4:14:2d:c9:0c:ff:74:7f:99:05:25:78:0e:4d:1f:
19:40:f9:e3:9d:1d:fa:78:cf:bf:56:a2:90:32:eb:
ca:29:1c:dc:e7:55:72:ca:a5:80:79:cf:46:6d:c6:
7c:97:98:53:fe:c2:b6:78:17:ff:3d:42:2c:79:35:
cc:f9:7a:5c:d4:2e:ac:f2:db:18:02:9b:3a:cb:55:
2d:21:d2:17:0c:3f:33:87:c6:57:37:cb:a7:b7:56:
74:8c:0b:50:c0:1c:8c:9b:2e:da:6d:7d:ef:9f:e1:
f6:5e:46:de:6e:c4:89:5c:5f:c9:72:ed:1e:b7:06:
ec:5d:83:4d:79:30:23:99:c7:74:dd:bb:96:8c:db:
3e:8c:d0:20:cd:f4:fe:b3:b1:1a:de:d9:09:2f:b6:
42:c9:97:1c:12:00:17:22:4a:f0:71:e4:9f:2c:3d:
73:7a:7a:03:ed:7e:30:9c:4a:a5:09:25:09:3e:27:
af:1c:90:49:02:26:27:38:3e:56:b7:ec:25:11:20:
02:00:c3:60:20:aa:f3:4f:8b:5f:8f:5f:48:8b:52:
62:69:13:fd:99:03:6f:f9:72:08:c4:0f:93:81:9a:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:94:B9:0C:C0:D1:EA:20:87:F9:97:53:A7:D8:48:8E:ED:21:58
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:d7:a5:e7:c4:0c:bf:5d:74:ba:8d:5d:a5:35:18:65:b4:
ba:40:14:39:73:05:7d:0b:5c:a0:0b:f6:4f:77:d4:93:49:90:
44:fc:d7:90:13:b4:14:19:1e:b8:26:a4:e6:9f:45:51:39:13:
9b:ac:bc:d1:24:24:11:3d:e8:bc:77:dc:a8:83:2a:e8:84:d6:
12:c6:d8:e2:1b:0f:d8:9f:6f:66:fb:c9:62:c1:0d:15:80:c2:
6e:6a:17:5a:dc:7d:e6:a9:e7:28:9f:4b:24:48:d4:c9:4f:3e:
8f:d4:f8:05:cc:00:ff:eb:e9:ea:41:3c:18:2a:bd:78:7e:10:
3c:b9:6a:9c:27:c5:64:5b:0c:a2:d8:92:20:4e:82:13:9b:ee:
13:50:37:78:17:16:e4:af:e1:92:ee:1e:ff:20:1f:9c:74:c0:
1b:22:d7:e7:53:68:81:6d:86:0b:f2:b4:3a:83:26:3f:eb:7b:
72:d1:45:36:27:ff:b1:a7:7a:1a:a2:49:a1:e4:19:98:08:77:
4d:f8:62:07:e0:66:d3:0d:68:63:56:f5:6f:9b:a9:3e:ad:29:
0b:56:ea:18:d2:61:2f:15:a8:35:48:76:83:8a:9d:d9:3d:3d:
cd:e4:d8:f5:4a:67:0b:5c:d9:54:2e:2d:98:ce:1c:b3:f5:b7:
89:76:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:21 2026 by rpki-client