Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: zVdXv/7wa+AMRBMPEuN8h7cLbvnuPY9U5ge1aF68MbY=
Subject key identifier: E8:A7:84:4A:47:37:DB:7E:9C:96:FC:A4:08:32:A8:C6:C5:D0:53:64
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 019F1453ED8393E2C915491E2E6FAA4AFB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 1003
Signing time: Mon 29 Jun 2026 17:01:12 +0000
Manifest this update: Mon 29 Jun 2026 17:01:12 +0000
Manifest next update: Tue 30 Jun 2026 17:01:12 +0000
Files and hashes: 1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: 0jDaII6c6FZIfQFOc8IGBWzPeIpyM6LMjlRew2W23Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:ed:83:93:e2:c9:15:49:1e:2e:6f:aa:4a:fb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jun 29 17:01:12 2026 GMT
Not After : Jun 30 17:01:12 2026 GMT
Subject: CN=e8a7844a4737db7e9c96fca40832a8c6c5d05364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:6b:06:e8:bd:a1:79:d0:a4:73:f3:bc:d3:
ef:d6:b7:27:cb:e0:67:0d:c3:e3:47:7d:f1:71:63:
36:01:d7:60:7e:c5:08:5b:62:7b:8d:4c:9b:c0:dc:
1f:4e:ba:d8:cd:41:14:70:62:59:1f:11:11:2d:9d:
9e:20:85:9c:27:80:54:a4:20:e7:0d:70:0f:33:02:
f7:f3:e3:f2:e4:9a:29:86:4d:f9:68:e4:d8:23:46:
f6:12:db:b8:52:00:0b:25:15:d5:f6:1e:35:a9:70:
ca:09:a5:68:bc:fe:da:0c:e6:b8:0c:4f:de:a7:1b:
b7:a6:1a:48:21:bf:e7:1b:40:a0:86:91:57:e1:d3:
35:b5:b3:17:36:23:b2:d1:41:ca:98:11:87:c9:3f:
49:5a:10:a2:11:48:40:93:66:76:e4:9b:84:de:1a:
b3:d0:5f:f9:60:f3:95:5c:8b:c0:e6:33:18:1d:4d:
5a:ca:39:35:25:f4:23:ca:b9:59:e7:64:c4:8d:53:
07:ab:44:f2:c3:e5:cd:79:ba:9c:50:c9:2d:36:2f:
71:86:dd:e7:43:82:f2:24:5d:99:02:ff:2a:6b:fe:
9a:00:98:20:ba:bb:cb:86:4f:9e:20:4c:08:e8:bb:
24:de:77:75:0b:63:86:a5:90:43:d3:ff:79:29:d3:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:84:4A:47:37:DB:7E:9C:96:FC:A4:08:32:A8:C6:C5:D0:53:64
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2d:0c:24:44:ca:1e:9c:f1:87:a7:78:8a:71:c9:f2:fc:ef:
44:9e:b9:4d:d0:93:23:37:a8:20:4b:9b:31:ab:de:5e:1f:70:
78:fa:04:3b:4f:fc:80:e6:ab:5d:22:7b:a3:52:97:26:d2:ef:
86:28:54:d6:9f:ee:39:38:26:a1:df:ab:57:5c:99:47:2d:1b:
5b:e7:5e:32:e4:c4:14:39:ce:c5:e1:8c:02:58:77:46:9c:2a:
8d:f9:40:7c:6a:a6:e8:38:87:77:77:94:5c:0b:09:7f:6f:17:
b6:af:b0:97:a9:93:dd:fe:90:78:b7:a1:21:18:a3:d5:d5:ee:
05:5c:b7:c7:f7:a7:95:34:22:10:1b:1f:36:1b:2a:69:f5:4f:
d7:c9:12:0c:eb:79:8b:9a:6c:46:cf:a0:f8:3a:90:c2:af:4d:
a7:f6:89:49:93:42:44:d9:9a:0e:a0:fe:fd:db:17:ca:bf:08:
f7:b7:cd:33:a4:56:84:c1:43:22:4f:59:e9:46:71:3f:0a:4d:
5f:b7:f7:e4:81:26:0e:63:f6:14:8c:66:1b:3c:38:8f:01:d2:
c3:0c:4b:5e:12:e2:dd:50:ea:41:6e:23:a1:15:af:f2:e5:55:
32:63:cc:91:48:17:fe:0f:0f:7a:66:77:6a:05:ad:83:48:9c:
33:b3:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:34:56 2026 by rpki-client