
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier: EwvXU5Ver2F2EHLHqhNGLOCFxRxQc7RoWuOaP66Nk9A=
Subject key identifier: 3C:3F:3E:02:B3:B0:7C:FE:51:AB:93:4F:4B:4C:E1:04:1A:57:08:A4
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 019A72CA535A4A2EC356045CD1BF32946EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: GomX8jaNzMFc5eAe4UuDx+VD+dfJ1uTHTw+qaVc+qaI=)
2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:53:5a:4a:2e:c3:56:04:5c:d1:bf:32:94:6e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=3c3f3e02b3b07cfe51ab934f4b4ce1041a5708a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:3a:7b:c8:fa:a5:4b:b9:cb:f0:15:23:81:
50:73:52:3f:92:9e:9e:9a:ce:16:fe:16:83:70:6a:
28:c7:80:38:96:a6:97:92:8e:bd:9d:ee:e0:e7:f5:
b2:65:d6:fd:40:f8:d2:c4:15:e5:18:c3:f8:b6:90:
2a:87:ba:ee:6c:34:dc:0d:93:52:8c:67:b5:c6:0d:
d4:23:3d:7b:75:a6:e6:8a:8d:ef:91:e0:a8:5a:f6:
80:d5:92:42:c6:f6:1e:2e:30:bd:0d:3e:8c:3a:ce:
f6:cf:d6:6c:c5:ea:16:d4:4d:3c:79:6c:fb:7e:d7:
f9:ac:93:57:0d:d9:75:a2:76:32:55:e0:78:3b:2e:
dd:9a:f8:43:13:ed:cb:94:2e:df:ae:9c:08:e4:aa:
9a:34:0e:50:a1:bb:62:d6:b0:d5:64:94:b9:b3:d9:
04:a7:7f:20:cd:2f:46:d8:93:47:f7:84:e7:b4:88:
81:6e:ae:27:7f:3a:e8:e8:a4:9c:09:08:b7:cf:a1:
5d:bd:99:20:2c:73:37:1c:9e:42:0b:f5:55:2e:89:
17:da:10:00:b1:1a:22:e8:70:12:b8:2b:d5:ab:dc:
f3:21:35:ee:d1:96:40:50:e3:4a:b9:d6:6e:d1:47:
6c:8d:ff:dc:ba:4c:9f:fc:1a:2c:7f:9a:bf:f5:89:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:3E:02:B3:B0:7C:FE:51:AB:93:4F:4B:4C:E1:04:1A:57:08:A4
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e4:cd:02:4a:8a:88:cd:dd:44:49:60:a3:d8:5a:10:b2:34:
99:3e:a4:a5:44:4f:07:fa:51:71:4d:00:7d:80:d5:4b:0e:b8:
18:ea:04:1e:62:f7:f5:a3:2a:40:b5:7d:94:b8:b4:60:d2:53:
94:7f:cc:22:e3:bb:96:43:98:a7:ac:d4:50:21:e2:7f:18:f9:
81:1c:1f:6a:cd:78:43:d2:60:d4:43:e8:22:df:3c:75:b1:43:
c7:fc:ca:44:5d:cb:ad:4e:e9:80:18:6c:91:61:18:75:bd:03:
36:1f:48:85:fc:28:dc:d7:35:a1:98:3d:0c:6e:f2:18:3e:19:
c1:32:cd:97:4c:1b:8e:33:c4:88:d3:95:bd:da:4d:ea:d5:f7:
95:e5:3b:b0:c3:18:4c:35:54:40:9f:a0:ff:16:04:15:81:1d:
68:b6:48:2a:2a:c6:f3:7d:b8:a9:f9:fc:3c:1c:bc:b6:0c:80:
51:06:36:7f:44:27:22:12:e5:ad:8a:6b:71:96:03:cf:3d:90:
41:c4:43:3d:ba:08:dd:e8:86:fc:49:b1:ae:ef:90:0e:a2:1e:
86:92:65:91:41:89:5b:08:89:59:1d:b9:f3:a6:3b:0e:d7:88:
fe:d8:a6:5c:26:ba:14:fa:81:d3:75:6b:d5:0e:2e:9c:2b:ec:
79:25:f7:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylNaSi7DVgRc0b8ylG7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDZlMjQ0MzBkYmE4OWJkY2UyMmM2YmYzMjgxOGNiZGU2
YmJjYTAwHhcNMjUxMTExMTIwMDUzWhcNMjUxMTEyMTIwMDUzWjAzMTEwLwYDVQQD
EygzYzNmM2UwMmIzYjA3Y2ZlNTFhYjkzNGY0YjRjZTEwNDFhNTcwOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRA6e8j6pUu5y/AVI4FQc1I/kp6e
ms4W/haDcGoox4A4lqaXko69ne7g5/WyZdb9QPjSxBXlGMP4tpAqh7rubDTcDZNS
jGe1xg3UIz17dabmio3vkeCoWvaA1ZJCxvYeLjC9DT6MOs72z9ZsxeoW1E08eWz7
ftf5rJNXDdl1onYyVeB4Oy7dmvhDE+3LlC7frpwI5KqaNA5Qobti1rDVZJS5s9kE
p38gzS9G2JNH94TntIiBbq4nfzro6KScCQi3z6FdvZkgLHM3HJ5CC/VVLokX2hAA
sRoi6HASuCvVq9zzITXu0ZZAUONKudZu0Udsjf/cukyf/Bosf5q/9YnUqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw/PgKzsHz+UauTT0tM4QQaVwikMB8GA1UdIwQY
MBaAFNVG4kQw26ib3OIsa/MoGMvea7ygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjkt
ZDA2Y2ZhMjI2YzY0LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjktZDA2Y2ZhMjI2YzY0
LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+TNAkqK
iM3dRElgo9haELI0mT6kpURPB/pRcU0AfYDVSw64GOoEHmL39aMqQLV9lLi0YNJT
lH/MIuO7lkOYp6zUUCHifxj5gRwfas14Q9Jg1EPoIt88dbFDx/zKRF3LrU7pgBhs
kWEYdb0DNh9Ihfwo3Nc1oZg9DG7yGD4ZwTLNl0wbjjPEiNOVvdpN6tX3leU7sMMY
TDVUQJ+g/xYEFYEdaLZIKirG8324qfn8PBy8tgyAUQY2f0QnIhLlrYprcZYDzz2Q
QcRDPboI3eiG/Emxru+QDqIehpJlkUGJWwiJWR2586Y7DteI/timXCa6FPqB03Vr
1Q4unCvseSX3LA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:03 2025 by rpki-client