Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier: WopLNJm6us8X983zLrTxd+r7asyh1tLfYgtFcEOjRq0=
Subject key identifier: DF:84:5C:34:25:85:0F:C2:3A:CB:92:D6:54:E2:F1:C6:A1:D0:86:1A
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 019D38D2AABD9C8AF97354C4664CCED36DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number: 0BFD
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: KBgLQF9NM0WKGFLysovjyigHGNN33O9WAAbQr3DrSZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:aa:bd:9c:8a:f9:73:54:c4:66:4c:ce:d3:6d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=df845c3425850fc23acb92d654e2f1c6a1d0861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:97:8c:1b:be:e7:f7:dd:ef:a3:2b:ca:d7:
43:a8:1c:f0:d5:6f:64:3b:58:25:10:00:7d:c3:79:
70:60:be:c3:9f:a9:7c:83:57:02:a6:20:d0:a1:13:
e9:64:3f:41:de:d4:dc:6b:8e:b8:93:25:d5:96:e8:
9f:33:b4:3e:3d:1e:10:37:ea:c2:ca:cf:d3:02:94:
ef:82:a1:fe:d7:1b:99:38:cb:51:f3:49:a9:ac:6c:
0e:e8:25:39:f9:38:34:72:bb:f0:90:4f:86:e9:14:
8f:d0:5d:27:fb:48:f2:76:a6:be:e2:6a:da:5e:4f:
a5:fe:31:33:65:c2:79:a4:d9:96:3e:1c:99:13:96:
93:41:b3:ca:08:bc:b7:70:96:23:df:23:d5:50:c6:
df:0a:38:7c:8a:49:d0:5c:af:eb:c7:71:a1:8e:a0:
e8:9d:a2:39:a1:a8:9a:be:72:5a:e4:ec:5c:f1:cd:
d6:49:d6:ed:18:bf:55:77:25:3d:bc:12:a6:8d:f2:
f5:37:31:12:94:30:69:5a:ba:89:fc:ab:f2:9e:44:
27:15:72:7a:d4:15:ac:0b:b8:a4:51:ca:8b:5a:e6:
e4:0c:9d:6f:38:1f:8c:4f:64:5e:8c:8c:74:8b:fc:
e7:d4:8c:5c:61:ce:bd:5f:aa:06:c6:ff:2d:5d:67:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:5C:34:25:85:0F:C2:3A:CB:92:D6:54:E2:F1:C6:A1:D0:86:1A
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:02:2a:57:6b:cb:e0:a3:8a:3e:d0:e8:18:8f:bc:c8:b2:2e:
68:b7:fe:63:c4:b7:ff:bb:9a:bf:a9:6e:34:8d:f4:43:a2:13:
46:5d:b9:07:5a:e8:2e:b0:0f:40:d7:02:f6:26:eb:eb:2a:a9:
a6:c8:ee:e4:6b:3c:2f:5e:56:ee:44:d9:b4:4d:73:71:71:9b:
18:07:2d:1f:5f:f3:3b:8b:21:73:65:d6:0e:9f:7c:ab:b6:57:
76:89:b7:53:c7:19:90:66:25:ac:a2:f7:39:e1:ff:58:f8:1a:
5e:39:a6:cd:6b:b0:56:fd:e4:58:1b:35:67:33:c2:f9:52:fa:
08:33:5e:09:4d:b7:d0:81:8e:79:11:84:bf:b0:b5:8a:b1:86:
a2:fc:9c:cd:60:84:9b:c3:73:4c:2e:a6:3f:5c:9b:ef:f8:ec:
14:49:7f:fe:05:54:dd:c7:be:0e:63:df:79:4d:7f:aa:3c:e2:
9d:86:58:04:32:b7:66:f8:a4:e8:ef:0c:87:21:9b:85:f7:5f:
bb:74:65:6f:35:a2:a6:6a:a9:70:f6:89:86:00:93:8b:1b:46:
f3:9d:ae:7b:28:9e:08:e5:c8:8f:a6:47:f9:29:f0:66:fa:a3:
48:45:68:19:5d:c0:c6:37:bb:9c:1f:61:30:55:36:80:91:62:
18:46:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:25 2026 by rpki-client