Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File: Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier: 0UaIz/CCiRoTa32VZyV8Bn8rr0lfJ6bXD1DuHx5awoE=
Subject key identifier: E1:61:97:01:0A:8E:03:EE:C3:8B:35:FA:59:6D:07:00:D9:C6:63:A0
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer: /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial: 019D39098273A0FD44B4CED7C38071424D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number: 0B4D
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: NP8gsDqpesTV+Z7Q+gBLnmntiB/5QpBmB/YxlesP5VA=)
2: gsWrUBeqM0EhY9FS-NajkLZ-rCk.roa (hash: zszGjcbEnjBUQ9kcf+iql7NUu5G/jl0U+3CAhbnB8b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:82:73:a0:fd:44:b4:ce:d7:c3:80:71:42:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=e16197010a8e03eec38b35fa596d0700d9c663a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:32:31:ab:f4:3d:3c:e7:6a:3c:00:5a:b8:
d3:7b:86:69:f9:63:df:2b:b0:91:2a:1d:6f:29:92:
09:82:46:bf:f1:9c:23:40:a4:c4:0b:04:b9:29:94:
f9:d3:d7:cc:02:26:83:e4:d7:35:ef:56:a3:2d:b4:
8f:93:92:c1:85:8f:3b:0c:dc:70:65:d6:0c:5d:68:
4d:fc:fc:a0:07:4a:6c:70:4f:d5:c2:e0:e9:d2:0a:
35:c8:1c:3a:92:74:6d:53:2d:3c:ee:32:05:f7:40:
0a:ce:f7:fb:23:2b:fe:c5:ec:30:d2:60:d5:58:05:
9b:37:ee:44:0d:de:80:4f:fd:49:a3:a8:e0:5c:f8:
20:e8:4d:a2:ae:27:eb:de:8b:df:ef:ed:04:ec:87:
3a:59:82:ab:fb:1b:1f:6f:67:cd:d5:1f:7c:10:56:
49:15:a1:41:0f:d5:5c:ee:35:1e:6d:b5:60:03:ca:
74:63:98:68:ce:11:6f:4d:9e:70:06:54:1b:1f:2c:
56:64:d2:43:d0:9a:48:4d:6e:ba:3c:fa:15:6d:29:
26:e3:39:1c:b9:a1:7a:65:1c:34:b7:dc:ad:67:a0:
a2:5e:b6:d0:1a:fa:03:0e:a3:3c:36:2c:ce:fc:ec:
1e:eb:60:4a:fe:c5:3f:57:17:d9:59:a0:d0:71:a1:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:97:01:0A:8E:03:EE:C3:8B:35:FA:59:6D:07:00:D9:C6:63:A0
X509v3 Authority Key Identifier:
keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:05:99:bd:43:ad:d0:fd:fd:78:94:2b:bb:ab:4e:85:35:6e:
4b:99:c5:60:3d:cf:52:d3:18:93:d2:2e:97:0b:e9:7a:fe:13:
1b:65:8a:d0:30:3a:cb:77:e6:e0:ec:21:67:2c:4c:94:1b:39:
58:69:f3:94:6d:fc:06:ab:e0:35:a0:64:a1:3f:b1:88:0e:ef:
ec:e0:15:69:cb:5e:98:54:f9:66:81:dc:0c:0d:eb:de:79:88:
2b:c5:cf:ca:26:e3:ac:ac:61:0c:a1:89:bc:72:5d:e5:ba:f4:
ea:83:d1:0b:67:22:da:e5:13:b1:41:cf:11:7d:d0:dc:7d:d3:
85:4a:4d:bd:85:f9:dc:cf:9a:75:ee:5f:ec:ab:90:98:82:fb:
ce:97:c1:56:d6:86:c8:38:a3:20:0e:af:b2:20:e6:14:04:38:
23:8d:87:90:ef:59:53:ee:a0:27:f9:af:0b:59:8a:30:61:06:
aa:e7:8c:06:11:cb:47:37:05:fb:a8:a5:8d:e2:b6:4c:3b:bf:
b6:3d:e1:f9:26:5f:ec:1c:b3:20:0f:22:6f:07:4a:c7:a3:81:
25:ed:57:b2:ed:70:e1:22:1d:64:58:90:8c:7b:ed:6e:21:9d:
28:e3:92:1c:50:0c:01:ff:7d:67:27:db:a6:3f:4e:de:64:ba:
ae:43:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:50 2026 by rpki-client