Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier: Be471TRFHDcdCjMU2AVA4ZthbCG26hREo6ivo1dBRo0=
Subject key identifier: 90:1B:C2:54:5D:58:6B:6E:E6:11:7A:86:50:3A:8C:3F:D2:B5:80:D3
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019F927EDDB059A6D4EDE03CE9FA4C8589A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number: 12ED
Signing time: Fri 24 Jul 2026 05:00:15 +0000
Manifest this update: Fri 24 Jul 2026 05:00:15 +0000
Manifest next update: Sat 25 Jul 2026 05:00:15 +0000
Files and hashes: 1: 8B0Xvmidug3oJBFQNiVZ03LjllY.roa (hash: P1kj5JyGbpjO7k/9XiZFP26S2h0cS9e/Ah5VKAIZkgI=)
2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
3: lkqdEp6LwoeInW4-nbYEOMBruSw.roa (hash: LFD9MHEpAP74xMJWDo+tJr71CtFOG7i1RauaAjnGFMU=)
4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: 3J4NXb4AiP5OdBGUSUM8TxGkIQPjR2wi4k7wt5uXwqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:dd:b0:59:a6:d4:ed:e0:3c:e9:fa:4c:85:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jul 24 05:00:15 2026 GMT
Not After : Jul 25 05:00:15 2026 GMT
Subject: CN=901bc2545d586b6ee6117a86503a8c3fd2b580d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:9f:7f:0a:94:ee:a3:d8:7f:c5:57:ba:e3:
cb:4a:a1:58:77:a9:bf:18:ab:cd:67:dd:01:9a:9e:
29:e5:61:36:10:3c:7e:56:fa:5f:20:f0:b4:dd:ab:
86:2e:df:15:ac:56:19:a2:eb:53:4d:4b:3e:13:a2:
8f:74:83:30:e0:38:19:35:ac:57:95:4c:a8:0f:82:
c6:6e:3a:7d:dc:47:38:6a:38:08:18:32:29:6f:58:
3f:51:f7:33:bf:c1:ea:22:bd:28:d9:4c:9a:58:1b:
fa:7e:21:1d:9b:2b:3d:6e:ea:2b:3e:00:5c:49:81:
7d:ba:30:ae:ec:7d:c3:63:5f:25:53:aa:b4:43:59:
24:d9:25:f8:6b:a8:a9:6c:c1:70:db:e1:03:05:05:
84:dd:31:a0:5b:7e:fe:b0:53:58:e1:f1:51:93:ed:
d9:d9:ad:3d:38:d3:99:56:da:e2:6f:6c:a9:3f:c0:
55:81:d2:b2:4a:15:18:1a:67:ac:4a:8d:5e:b2:7f:
79:41:2d:44:9e:f0:21:ed:d3:a8:79:5f:8e:5f:e8:
52:e2:51:b2:92:f9:50:70:bb:3d:17:9f:91:aa:00:
9a:80:2f:01:c0:bc:4c:73:77:e0:38:a8:b0:41:9e:
bc:1b:45:14:32:6e:5d:d5:a5:cb:5a:2a:59:79:d0:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:C2:54:5D:58:6B:6E:E6:11:7A:86:50:3A:8C:3F:D2:B5:80:D3
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:5b:a0:27:0e:48:4c:d0:a1:cd:25:2b:d1:e7:02:c1:f6:
d5:ba:cd:e1:da:b4:1b:ab:4a:bc:70:30:79:2a:1d:2b:63:63:
d5:01:29:b4:c5:00:38:ae:15:59:6a:cd:ee:f1:3b:cb:23:8f:
4d:f8:55:ac:a9:0d:03:e5:4a:30:f6:a7:f6:42:4e:8b:69:13:
3c:78:48:d7:7c:5e:4e:a8:5d:06:dd:5c:d3:a5:a5:7b:39:b1:
14:31:de:38:b6:4c:63:57:31:2f:21:d2:09:3b:87:16:25:c0:
77:6e:5b:10:fb:f0:cd:6c:84:10:7f:9a:2d:ee:4a:7a:24:65:
48:fe:08:1b:34:c6:3f:db:6d:41:e4:88:87:84:c8:17:80:5c:
08:2c:bc:77:4e:f5:a6:f2:47:b2:c2:29:a1:07:b9:99:7b:21:
57:c6:4b:a6:0a:67:a6:07:0b:b1:63:71:7e:9b:6b:0c:c9:f7:
f7:c9:a9:a9:94:36:38:ee:70:75:59:74:d1:3a:e6:bc:8c:f7:
b5:38:93:2a:6e:40:62:dc:d2:33:5e:c3:c3:44:df:8b:c1:cf:
a5:20:b9:0d:ce:78:10:e6:33:d0:fb:38:d0:1d:ee:b9:f4:38:
c7:21:ff:ee:52:23:03:ce:b0:9d:14:28:01:b2:61:b3:08:9f:
73:a5:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:09 2026 by rpki-client