Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: WQ93So2buOhB50p7+cHrWCvM42+3bdPTjbqbEHbjqZ8=
Subject key identifier: 6B:51:6D:43:8E:51:43:D9:FF:50:13:15:94:0A:4D:35:9F:79:5C:47
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 019D37530DF0536712BB707F364CCBA5433E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0F0C
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: F6gwZ4k55/ogrvCw530aIwc6pLbvpw4c0ZSM4MeG7VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0d:f0:53:67:12:bb:70:7f:36:4c:cb:a5:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=6b516d438e5143d9ff501315940a4d359f795c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:2e:7f:b5:67:ef:2a:55:74:2b:8c:8b:80:
cc:98:16:30:c9:56:30:e2:ee:50:74:d5:d7:de:97:
d6:85:af:14:66:8d:af:45:62:f0:24:a6:a0:8c:ee:
d4:f0:5a:fe:dd:16:22:c8:64:41:62:d4:72:5e:98:
b2:68:7b:63:81:e5:b8:84:ca:f4:6f:b2:4a:75:62:
09:8b:d8:01:92:c1:58:7b:e8:72:fc:40:30:7e:49:
07:c3:c3:01:ed:32:5a:67:37:d9:a1:78:68:82:1f:
26:6d:89:25:70:de:b3:c3:0b:f7:2f:ab:0b:25:04:
5d:fb:ce:0c:20:ac:2d:7b:de:07:b2:f7:77:31:52:
c5:48:1d:11:50:8d:4e:a7:26:77:d3:cc:19:ee:8d:
0f:7c:4b:20:49:c9:18:96:b3:64:7a:55:cb:cb:2a:
29:79:4d:a0:1f:c9:4e:03:d5:7e:d2:ef:a1:f7:72:
5b:47:a7:ee:b9:f8:d7:65:54:81:88:48:7f:52:2b:
5f:4f:f7:dc:5f:a8:6d:ee:be:3c:38:68:a5:f9:21:
4d:ee:93:76:78:94:4a:3a:7d:d9:66:67:dc:f2:73:
de:e5:dd:f0:a0:40:d3:6a:e4:e7:1b:a6:ef:b0:f7:
50:37:46:43:2d:51:7f:fa:ca:3e:2d:22:71:6f:54:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:51:6D:43:8E:51:43:D9:FF:50:13:15:94:0A:4D:35:9F:79:5C:47
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:76:34:99:ed:98:e6:37:e1:6c:f3:eb:36:f6:1c:83:68:cd:
45:e5:85:24:fe:1d:62:68:a4:1a:ef:3d:30:2e:46:6c:23:07:
d0:67:27:03:c4:e6:5d:6a:af:b7:b7:2d:11:28:ec:77:cb:27:
6a:9d:75:d2:58:90:08:97:39:0c:36:23:e9:6d:a2:65:9b:82:
50:4d:bc:5f:1e:97:5f:41:07:4e:74:46:64:c5:36:1f:5b:4b:
24:6f:43:fa:53:e1:30:e4:1d:0a:cf:d3:2e:8b:40:9d:c5:f0:
e7:a9:d4:7e:09:9c:b5:1d:fa:7c:a7:79:4e:d8:06:41:ad:a1:
66:e6:6e:ee:1a:f0:67:b5:55:a4:2a:31:bb:6f:da:c9:c2:8d:
ba:c7:7e:61:09:62:bb:af:d7:a3:0c:9d:a6:2d:b5:72:cb:66:
a3:fd:60:fd:79:b0:b1:76:5a:ef:79:c6:14:eb:e8:b2:a0:2e:
c4:3a:1b:8b:20:92:b5:4f:27:c1:d9:a4:b8:8b:b2:1a:fe:c4:
05:7f:26:cb:00:ba:7e:e0:02:6a:e7:3d:c0:b5:83:ea:66:b1:
81:e2:bf:9a:87:8b:cf:e4:ba:f8:89:5d:66:d2:a0:6f:d4:08:
a5:ad:fc:bc:02:32:4d:37:1b:c5:03:cb:ef:f8:9d:3a:ce:a2:
6f:55:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client