
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: dnvqzaO9PcEnxXB8futBlSoZ67WbSjELWVKxQLTFjkc=
Subject key identifier: A0:B2:FC:7D:EA:F9:17:78:5B:E8:E9:4D:91:E5:AB:5B:2B:98:BE:57
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 01A0D3B84B27DB4412CA108B4AF5E52223A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 14:01:05 +0000
Manifest this update: Thu 24 Sep 2026 14:01:05 +0000
Manifest next update: Fri 25 Sep 2026 14:01:05 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: IGjfcZWHjfeTiGdN+MCNGlw0cIq/lf7kMaVP4f9kuNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:4b:27:db:44:12:ca:10:8b:4a:f5:e5:22:23:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Sep 24 14:01:05 2026 GMT
Not After : Sep 25 14:01:05 2026 GMT
Subject: CN=a0b2fc7deaf917785be8e94d91e5ab5b2b98be57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:f0:46:c7:a2:a3:eb:a1:af:c3:a1:5d:69:
bf:48:8a:d4:ba:ad:b4:72:53:c9:e4:dc:26:cd:4b:
13:d0:e3:94:6c:91:2b:d0:d7:f3:ea:3c:c6:35:35:
bf:ce:1e:4c:0e:45:1d:e8:03:38:b3:4d:6a:7b:b9:
b3:3d:81:ca:9f:a0:db:94:24:7d:5b:fe:03:73:86:
d3:7a:ff:6c:d1:30:37:79:33:09:74:d7:18:da:70:
ce:9d:98:6f:53:d9:0f:9b:19:08:f1:3a:9d:85:66:
4c:24:95:0e:cf:fb:67:92:1b:f1:10:86:66:68:7c:
50:72:69:57:d5:6b:3f:54:39:0c:ef:4c:0c:09:ba:
74:84:d5:52:21:52:fc:78:84:44:bb:40:59:a7:8f:
1c:ca:6d:2d:8d:96:c2:07:ad:85:c4:dc:5a:bb:c9:
d3:6d:16:7c:72:03:54:65:24:6b:68:36:6c:06:f1:
17:9c:00:20:47:3b:85:9d:c1:09:4c:c3:aa:98:dc:
c8:91:26:b9:b6:50:df:cc:0e:51:6e:9b:16:a4:84:
61:d8:f4:7f:c9:64:82:93:4e:a7:c8:99:06:43:b9:
a6:41:da:ed:d5:ff:10:af:fa:c0:2e:6c:19:6a:7c:
25:02:0a:bb:d0:2f:72:50:ee:4d:14:52:df:6b:ec:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:FC:7D:EA:F9:17:78:5B:E8:E9:4D:91:E5:AB:5B:2B:98:BE:57
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:34:78:1a:9b:92:7c:7c:1c:12:d2:37:a0:ad:30:67:42:f9:
f4:9a:1c:4d:05:c1:15:81:f1:d3:ff:c2:80:ae:7b:5a:6d:f3:
48:73:3b:c0:6e:7a:16:7e:df:06:41:26:c6:6e:8c:f0:c6:70:
ed:b3:e5:8e:ac:4e:11:80:0c:83:49:6a:db:83:bd:2c:f8:7d:
fd:6e:f8:e1:53:44:80:b0:ee:80:21:07:26:53:47:c3:e4:ed:
d2:be:aa:3b:d3:58:65:50:df:96:df:e0:69:d4:32:20:74:a4:
24:7c:7e:eb:b1:fb:30:07:4b:d7:83:09:14:7c:df:de:0d:40:
ba:69:00:87:fa:e4:9d:b5:46:a8:37:82:47:77:c9:40:9e:02:
33:b8:40:9e:18:5b:a8:c8:15:d3:6c:04:a5:99:c7:70:20:d3:
89:fe:2b:49:97:a5:e8:a9:44:35:65:18:52:5c:4b:31:37:fe:
cf:34:a0:4a:c7:e3:91:e1:04:92:e5:65:30:51:aa:4d:f6:4f:
a9:42:6d:19:ac:d8:8d:dd:4a:7c:b2:02:11:7f:00:37:ac:31:
60:96:f5:65:26:e8:35:00:34:5c:50:99:aa:fa:2c:4c:5d:f3:
f5:1b:18:52:51:cf:68:09:1f:b7:cc:f9:ca:ef:8e:8e:16:d7:
60:be:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:54:52 2026 by rpki-client