Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: BNw5NZ18rg/kc4kcxqGpH/a3/gG3Cv9KgEDCeiGVxac=
Subject key identifier: 57:2B:25:35:CA:81:0A:04:7A:2A:05:9F:AE:BD:8B:3B:25:5B:55:21
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 01A08A55DCAD422C4DF38CC8E37F34D11A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 066A
Signing time: Thu 10 Sep 2026 08:01:17 +0000
Manifest this update: Thu 10 Sep 2026 08:01:17 +0000
Manifest next update: Fri 11 Sep 2026 08:01:17 +0000
Files and hashes: 1: T_p7BFSEu2MaqBtsnhljtCR6GqY.roa (hash: FbyU0CKxDGTVudOk7Dftp/zF2aSEdUuIHth2Lxh5jb0=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: 2TrTT7wStK7oNmVPO8GG1gWn37wXN1bIJowlWCngVy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:dc:ad:42:2c:4d:f3:8c:c8:e3:7f:34:d1:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Sep 10 08:01:17 2026 GMT
Not After : Sep 11 08:01:17 2026 GMT
Subject: CN=572b2535ca810a047a2a059faebd8b3b255b5521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bd:d3:e7:7c:8e:da:97:27:3b:da:45:1a:45:
06:fe:9a:82:f7:33:68:3c:44:3f:4b:d4:bb:23:9c:
c0:52:86:29:e3:99:1e:17:db:4a:e4:00:c8:d2:5a:
59:a0:9a:99:c0:0b:f2:05:c8:de:d9:07:13:7a:c4:
07:0a:b5:15:b6:1b:ba:2c:45:5c:5b:a3:50:1c:f7:
1b:5b:82:a6:b6:9b:e0:b2:da:3d:12:ef:5d:e5:1a:
46:21:ed:53:f9:46:1d:68:5e:c2:85:50:7d:df:92:
37:7d:be:8c:ec:74:bb:80:c7:8a:6d:be:65:fe:62:
6a:42:c2:9c:0d:96:7a:e5:ea:92:4d:ed:92:83:2c:
7e:a1:c1:e4:a2:44:33:82:c9:ba:4c:23:4e:68:e8:
ec:25:ba:ac:fe:b1:ec:f1:d4:eb:b1:0e:5a:ac:6c:
49:47:d1:ca:4b:0e:72:24:18:e1:37:81:ef:03:84:
2e:5f:3a:4c:a4:99:c8:c3:24:d6:87:a1:e3:ad:4b:
a6:ac:af:7a:04:15:fb:c0:07:28:6f:6b:64:ab:a4:
a3:bc:16:89:18:5a:fd:32:c0:1c:3a:8d:3f:90:d5:
71:6c:fe:4e:da:d8:32:22:12:59:14:89:c1:a7:41:
82:ac:a0:21:16:77:23:ae:61:4e:20:e3:f4:2c:c5:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:25:35:CA:81:0A:04:7A:2A:05:9F:AE:BD:8B:3B:25:5B:55:21
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:79:e7:4c:cd:57:98:5f:89:c1:46:63:41:9a:d0:4b:4b:4d:
51:36:37:9d:d0:43:0f:a1:cc:87:4d:bd:24:fe:29:13:bc:6a:
3c:ff:ae:c7:48:fc:62:47:ea:02:13:9d:dd:f9:8c:c4:f4:ce:
d6:ef:1d:ff:4f:6d:8b:66:fe:8c:02:21:a4:55:57:c5:7e:d0:
8c:33:c2:e0:92:90:6a:ea:be:2f:95:5f:a1:c9:7d:08:d9:7e:
34:3e:cd:25:40:ff:84:8d:11:62:dd:a7:2d:ec:2d:63:94:d6:
f5:97:bd:35:b8:ea:1c:66:5b:2e:2a:e7:99:76:74:21:dc:c6:
4b:45:ad:b5:2e:bb:a9:3d:c8:23:aa:d0:c5:3a:98:3c:e8:77:
0e:aa:4e:70:47:21:e9:c8:b1:16:a6:56:41:88:f1:7a:c2:f3:
c1:56:2b:d1:be:2e:c1:b5:f1:83:8e:12:72:85:42:f8:c6:7c:
f5:bf:b4:22:18:00:ed:cb:f6:8e:58:b6:59:82:64:47:61:95:
cb:82:7c:51:0e:c9:6d:b4:63:89:1d:8e:6d:fb:ff:8d:be:ce:
bd:b0:83:3a:4c:67:8a:b7:5e:d5:c1:b2:0c:f9:e4:e2:b1:a0:
2e:47:cf:bc:4f:38:97:e2:58:69:cb:ef:95:0a:d7:0f:2f:27:
ab:b6:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:48 2026 by rpki-client