Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
File: UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft (raw, json)
Hash identifier: mSC+lzUx3/dERRzH8wpXBz5Xf+RLlpP6soYncD2MI3Q=
Subject key identifier: C2:D8:C8:F2:23:CF:16:44:C9:5C:9D:E2:FA:CE:60:08:BC:E7:E8:76
Authority key identifier: 50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
Certificate issuer: /CN=501039756ccf31f64a883443e1f1732834d2b8b2
Certificate serial: 019D38D30698E74E6F892977F166C2118B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
Manifest number: 0BF3
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl (hash: 5Fa1opTp3pz/vCANyAzvxhRuRYUV3w+ExrUHemWLnFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:06:98:e7:4e:6f:89:29:77:f1:66:c2:11:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501039756ccf31f64a883443e1f1732834d2b8b2
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=c2d8c8f223cf1644c95c9de2face6008bce7e876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:58:4d:04:2e:52:1e:ba:7a:e9:8a:56:89:
3e:f2:d1:49:ae:af:6a:e5:2c:cd:d8:b0:51:d5:15:
7a:cc:5a:27:a3:cd:de:8e:ed:70:a0:03:ab:61:7f:
2f:d2:23:94:ee:0b:62:9a:f8:c0:97:30:0b:ea:bb:
84:61:2e:72:bd:2a:6f:c9:47:80:67:98:eb:aa:48:
11:22:89:8d:cf:8b:c6:04:2f:ab:46:9e:8c:bd:79:
29:1f:81:60:06:67:36:ee:85:18:53:fa:f5:31:6b:
ea:35:b5:4c:2a:b6:62:73:11:5d:fa:b0:87:70:ed:
2e:44:95:41:65:41:d2:fc:5e:07:f9:19:77:48:9e:
61:f2:2c:15:ff:e3:d7:14:25:74:5e:b6:ca:03:5b:
52:85:b7:64:70:cc:47:c2:e5:de:4a:19:55:5f:1f:
68:6b:1a:52:66:69:67:a3:42:f6:9b:2e:42:6a:ca:
d4:95:14:8c:74:c0:8d:5a:3a:52:49:77:34:cb:a5:
54:ae:07:80:66:42:07:1e:b6:9a:1c:8f:c2:87:cd:
8b:7f:8d:18:f6:ad:88:f7:7f:ee:ef:43:5f:bc:f4:
2d:83:a7:30:ab:97:f4:9b:b7:a3:d7:9a:7b:4f:76:
c7:4a:0b:3b:a2:18:4b:36:53:e7:b5:30:0e:f0:56:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:C8:F2:23:CF:16:44:C9:5C:9D:E2:FA:CE:60:08:BC:E7:E8:76
X509v3 Authority Key Identifier:
keyid:50:10:39:75:6C:CF:31:F6:4A:88:34:43:E1:F1:73:28:34:D2:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBA5dWzPMfZKiDRD4fFzKDTSuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0a719c-9ab9-49d9-acf0-cda26c36062a/1/UBA5dWzPMfZKiDRD4fFzKDTSuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ac:ae:e1:d8:a5:f5:e7:92:a4:62:b5:5a:6c:35:8c:d9:f8:
20:b3:d1:0d:b5:8e:04:cf:1a:f0:8a:bd:bf:6a:34:f3:2c:a7:
6e:33:21:c3:da:90:c7:66:21:f7:aa:95:4f:e4:dd:0b:8a:90:
a9:9f:1d:11:ce:66:d4:b9:ae:f0:a4:ed:bc:79:96:76:f6:39:
d4:79:33:d7:ff:d9:05:77:21:45:db:78:75:75:79:0e:0e:39:
81:df:af:c1:30:81:f9:dc:6b:27:06:19:e8:89:7d:86:cf:43:
37:0c:1f:9e:80:ef:cf:4d:51:66:2c:dc:48:2b:54:71:76:14:
4e:54:af:e4:97:41:8f:a5:be:69:35:08:35:6c:d3:d8:26:3c:
d5:62:f3:86:93:91:cc:ef:03:3c:35:f6:53:1b:30:b3:20:4f:
2f:a7:fc:a2:e4:18:b0:20:0d:fb:c5:69:d1:f6:8b:7a:b3:08:
ef:bf:cf:d9:76:60:ba:56:bc:7f:14:37:8a:4a:4c:ec:6f:10:
c8:b2:27:60:18:dc:b6:01:7c:f8:ee:fa:3a:d6:d6:36:85:92:
79:80:05:9e:44:cc:73:6b:e5:39:87:87:60:aa:1c:92:68:c4:
aa:23:aa:4f:c1:b0:e7:9c:21:9e:47:76:76:3c:90:30:8b:0d:
f9:cc:5b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040waY505viSl38WbCEYuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTAzOTc1NmNjZjMxZjY0YTg4MzQ0M2UxZjE3MzI4MzRk
MmI4YjIwHhcNMjYwMzI5MDkwMDQ2WhcNMjYwMzMwMDkwMDQ2WjAzMTEwLwYDVQQD
EyhjMmQ4YzhmMjIzY2YxNjQ0Yzk1YzlkZTJmYWNlNjAwOGJjZTdlODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLtYTQQuUh66eumKVok+8tFJrq9q
5SzN2LBR1RV6zFono83eju1woAOrYX8v0iOU7gtimvjAlzAL6ruEYS5yvSpvyUeA
Z5jrqkgRIomNz4vGBC+rRp6MvXkpH4FgBmc27oUYU/r1MWvqNbVMKrZicxFd+rCH
cO0uRJVBZUHS/F4H+Rl3SJ5h8iwV/+PXFCV0XrbKA1tShbdkcMxHwuXeShlVXx9o
axpSZmlno0L2my5CasrUlRSMdMCNWjpSSXc0y6VUrgeAZkIHHraaHI/Ch82Lf40Y
9q2I93/u70NfvPQtg6cwq5f0m7ej15p7T3bHSgs7ohhLNlPntTAO8FZgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLYyPIjzxZEyVyd4vrOYAi85+h2MB8GA1UdIwQY
MBaAFFAQOXVszzH2Sog0Q+Hxcyg00riyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAt
Y2RhMjZjMzYwNjJhLzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wYTcxOWMtOWFiOS00OWQ5LWFjZjAtY2RhMjZjMzYwNjJh
LzEvVUJBNWRXelBNZlpLaURSRDRmRnpLRFRTdUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqyu4dil
9eeSpGK1Wmw1jNn4ILPRDbWOBM8a8Iq9v2o08yynbjMhw9qQx2Yh96qVT+TdC4qQ
qZ8dEc5m1Lmu8KTtvHmWdvY51Hkz1//ZBXchRdt4dXV5Dg45gd+vwTCB+dxrJwYZ
6Il9hs9DNwwfnoDvz01RZizcSCtUcXYUTlSv5JdBj6W+aTUINWzT2CY81WLzhpOR
zO8DPDX2UxswsyBPL6f8ouQYsCAN+8Vp0faLerMI77/P2XZgula8fxQ3ikpM7G8Q
yLInYBjctgF8+O76OtbWNoWSeYAFnkTMc2vlOYeHYKockmjEqiOqT8Gw55whnkd2
djyQMIsN+cxbsQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:51 2026 by rpki-client