Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier: 9hkKiYhSaw5ISBe+L52u4/lVPSSCH1jXfajEfdXkBFM=
Subject key identifier: D5:80:81:2F:94:0B:4C:DA:CA:76:33:BC:70:68:EF:34:3C:73:68:EC
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 01A00138383EEBD0058055D7629F15FE0327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 17:00:56 +0000
Manifest this update: Fri 14 Aug 2026 17:00:56 +0000
Manifest next update: Sat 15 Aug 2026 17:00:56 +0000
Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: +mtJ3v1bEILId/kh5WCKZbWwYfAssW3djtOxPx8DVKo=)
2: C4dhhSdCne6HfKBYrO0fMDCR52U.roa (hash: uDVsLBMCBkiLe3jkQqb41lNCpW9vDxKBn3Ey847tq5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:38:3e:eb:d0:05:80:55:d7:62:9f:15:fe:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Aug 14 17:00:56 2026 GMT
Not After : Aug 15 17:00:56 2026 GMT
Subject: CN=d580812f940b4cdaca7633bc7068ef343c7368ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:c7:f4:d6:af:ea:9a:d0:10:69:20:c8:eb:
32:2b:5f:29:92:46:fd:4e:5c:11:1b:fe:84:63:f7:
81:2b:b5:2b:1d:8a:f9:63:81:9d:bf:4d:05:f5:f7:
8b:46:0b:25:da:b5:7a:ac:0c:f3:56:68:3e:4e:fe:
2d:ea:6c:69:2d:1d:9f:ec:e6:f2:c8:f1:89:e3:4c:
40:e7:94:a3:1c:c4:2d:88:1f:45:9a:2a:d2:36:2f:
ec:af:60:3d:e5:09:c3:b3:99:9d:9b:09:09:bd:7f:
de:f3:6e:e4:5d:a8:1a:e0:17:d8:dd:f6:4a:e2:2f:
65:59:32:a9:84:c7:e1:b0:8a:ee:19:cc:1e:18:0d:
b7:3d:e5:95:d5:7f:ea:32:c8:c4:5a:b3:e0:52:de:
d5:4f:f1:8a:43:60:70:b5:eb:e4:d3:3a:f4:9b:cc:
d1:cb:ec:bb:47:38:14:d2:a3:e7:76:db:a0:19:a9:
b5:d6:6f:81:bd:16:eb:84:40:b9:b9:09:de:d2:fe:
db:c3:e8:0c:ce:c5:27:1b:96:92:d3:9d:73:9d:cb:
fc:19:1e:68:f2:37:9f:89:01:69:88:6d:64:ad:cf:
9c:16:63:e0:47:a3:4d:93:24:4f:17:43:88:c1:dd:
d5:89:76:67:90:e8:0c:19:23:be:69:72:dc:70:f0:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:81:2F:94:0B:4C:DA:CA:76:33:BC:70:68:EF:34:3C:73:68:EC
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:83:d1:e4:9f:bb:43:d5:d0:ca:38:19:84:df:87:31:48:f0:
3c:61:3b:21:65:cc:a7:9a:7b:6b:03:9b:95:8e:e6:da:bf:03:
ca:d2:c1:d1:24:5f:db:0d:23:8c:eb:70:e9:c4:ed:6b:81:6b:
6b:d9:37:06:ea:d5:4d:9d:6a:73:0c:a3:40:f5:96:41:a2:6c:
11:92:79:ab:0e:44:8f:e9:a2:3f:36:a4:ee:be:32:69:ed:b1:
6e:89:b8:31:01:dd:62:21:dd:49:cf:b1:ee:43:50:bf:0e:4f:
ac:ee:d8:1e:6e:9c:e5:74:bd:2f:1f:cf:d7:4a:05:ef:a2:76:
48:e6:a4:5f:88:89:be:68:c8:ed:b4:ed:83:bd:b1:29:4c:78:
5c:ac:76:a6:1e:16:8a:66:2f:b8:76:5b:37:85:5e:ac:ed:36:
b4:49:97:35:73:57:c4:e5:ff:02:a8:2b:85:50:b1:bd:e2:6e:
86:46:bc:75:68:37:43:8a:7d:73:c0:57:f7:e1:59:12:0c:03:
5e:9e:67:26:70:55:cc:ff:27:7f:01:72:cf:55:bb:a5:fe:3b:
3e:4c:96:99:6e:0d:8c:6f:16:4e:3d:d1:03:88:29:da:3b:9e:
33:1c:62:00:09:7d:4d:be:1f:20:58:28:3f:62:7d:95:b9:17:
71:a6:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:05 2026 by rpki-client