Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: lfOH1j2O5bMclQHfQYptAIdHoBS+w8BGecSSXHlKqRs=
Subject key identifier: 7A:20:28:D3:EF:AB:0C:45:7C:A7:E5:A6:9D:7D:92:26:A5:E0:1F:BF
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 019D39E57C01FC91475233C8CE71C69E1A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0E08
Signing time: Sun 29 Mar 2026 14:00:33 +0000
Manifest this update: Sun 29 Mar 2026 14:00:33 +0000
Manifest next update: Mon 30 Mar 2026 14:00:33 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: k2V0EnUAsFSZQPABZANN7ZAiuoQv7ppBtQNeslgpK38=)
2: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (hash: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:7c:01:fc:91:47:52:33:c8:ce:71:c6:9e:1a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Mar 29 14:00:33 2026 GMT
Not After : Mar 30 14:00:33 2026 GMT
Subject: CN=7a2028d3efab0c457ca7e5a69d7d9226a5e01fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:ba:d6:b8:4e:21:91:ee:e7:c1:ba:1b:60:
fd:f0:12:cd:da:c3:4c:64:22:d9:55:60:85:81:09:
7c:b9:ef:7e:d8:be:ed:b8:0a:c9:17:49:64:d7:e3:
f5:e9:99:6e:49:23:6c:4a:cd:62:c8:01:df:3b:c5:
d8:4b:d2:86:cf:e8:3a:c6:ec:bf:3c:8a:68:57:08:
f3:a8:eb:aa:62:95:38:08:b8:90:1e:8c:17:2c:65:
e4:01:21:4a:56:9a:33:d7:3b:dd:0a:70:ee:87:80:
43:2b:6c:57:52:5d:2c:6c:b1:33:68:5a:52:d5:9a:
22:90:05:8f:5b:43:5c:d9:7d:86:af:cd:ac:4f:3a:
83:07:7c:fe:34:72:ed:8c:40:a4:8a:06:3f:18:88:
d5:aa:72:a8:c7:ab:6f:78:e9:6a:8e:94:48:a2:d8:
0c:54:1d:58:0f:89:2f:4b:28:1c:f3:f2:c8:dd:fe:
66:29:bc:75:4e:ca:9e:35:51:7c:7f:d8:bb:3e:0a:
ce:b1:c7:84:98:78:bf:58:72:61:b3:75:cd:e3:07:
12:af:24:34:b0:37:4e:38:51:db:28:e1:fc:85:ec:
aa:d7:f8:e8:5c:c0:38:b6:20:58:b5:5e:f7:1d:72:
03:2a:ff:53:a3:e9:9c:2e:27:73:45:c1:e4:7b:e6:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:28:D3:EF:AB:0C:45:7C:A7:E5:A6:9D:7D:92:26:A5:E0:1F:BF
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:15:72:50:2b:70:a4:0a:0b:b0:b3:bd:3b:e4:74:1d:20:bd:
d7:de:ab:68:97:2a:16:26:39:70:11:a3:cf:12:86:c9:f3:50:
88:67:51:70:a8:b2:cc:f9:e6:ab:46:69:48:1a:ab:61:9e:ad:
07:ed:c7:b1:37:12:3f:25:30:21:c1:fc:4e:68:b8:2b:81:4e:
2a:2c:db:b0:f1:1f:93:88:4e:f5:ef:62:f1:1b:08:43:78:4a:
d6:77:67:d8:c9:3b:4f:ce:34:3f:e8:e5:3a:f8:b8:6a:8e:ff:
d4:14:54:11:97:b8:85:c8:4d:5e:88:0b:47:eb:1e:99:b9:f7:
8e:4d:26:25:21:4c:85:06:f9:1f:24:6f:99:23:8a:84:00:4e:
3d:36:f0:29:fa:b5:67:df:d0:0c:b6:6a:3a:87:c8:c1:c5:51:
7f:63:c2:80:0a:a9:61:50:74:f0:85:a7:fd:45:b6:3f:39:8a:
91:59:ca:7c:72:29:bb:fc:1c:52:dc:fb:b9:14:99:50:07:ec:
3b:72:65:68:33:ea:0e:00:78:3f:73:cd:89:b3:79:31:e6:cf:
6b:03:65:77:4b:50:66:65:f1:7d:6f:bb:d3:5c:b7:59:9c:27:
5a:91:e5:69:bc:c6:10:d0:cd:99:af:a3:60:13:2a:06:40:f5:
dd:d2:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:45 2026 by rpki-client