Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: YW0WvSy3jWemkQWWlg+ug4C5Xv6rfKP6vfTQiyumQg0=
Subject key identifier: 4A:71:FB:45:5A:F1:D7:66:8E:6C:75:E8:0A:FD:6E:19:4C:92:AF:68
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 01A15BF9D3375E7D3B35B3682489BEAAF1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 0416
Signing time: Wed 21 Oct 2026 01:01:01 +0000
Manifest this update: Wed 21 Oct 2026 01:01:01 +0000
Manifest next update: Thu 22 Oct 2026 01:01:01 +0000
Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: //Cedanvka0r7cLD1vULOJPCG7EpASdiOdExuDOuVwI=)
2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:f9:d3:37:5e:7d:3b:35:b3:68:24:89:be:aa:f1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Oct 21 01:01:01 2026 GMT
Not After : Oct 22 01:01:01 2026 GMT
Subject: CN=4a71fb455af1d7668e6c75e80afd6e194c92af68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:6c:32:f7:0a:39:ef:94:a9:ce:92:af:b0:
af:b2:d2:1d:70:a8:18:a4:ab:bd:51:2f:10:5c:db:
21:51:6d:a4:fd:50:b0:b2:58:6b:18:5b:13:83:81:
71:ae:db:a9:cc:ee:78:ed:ad:cd:68:1c:5e:93:d8:
77:9d:90:3e:d1:e9:46:97:c2:6f:0d:07:8f:d8:a3:
15:4f:23:34:43:ee:bf:61:d0:bf:32:ae:4e:ff:d8:
a2:c8:3b:82:14:d2:06:f2:71:f3:a8:66:2d:c8:61:
60:43:aa:66:d7:24:fe:83:3d:f3:1d:ad:1b:af:e2:
5d:1c:2b:d1:49:13:09:f1:b7:ea:27:df:f5:ca:b3:
64:3c:8c:f7:57:6c:f6:01:97:35:ad:bc:85:f5:54:
a3:c4:84:4f:2c:75:66:e4:eb:62:7b:a5:f8:43:e7:
dc:6d:eb:3e:27:cd:2a:8f:f8:44:51:68:d7:d1:ce:
f1:c5:38:59:5c:bf:f7:c2:33:65:a3:66:e0:8e:ce:
87:73:6e:48:ca:13:c5:7d:52:91:bc:16:f2:fe:d8:
b3:7d:5f:50:d1:6d:b0:82:b8:34:d9:f6:cc:47:8b:
fb:05:8a:d2:f0:6d:74:14:85:4a:27:63:5b:72:19:
74:ca:20:c8:5d:87:c1:66:d0:8b:81:7e:cf:8f:ee:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:FB:45:5A:F1:D7:66:8E:6C:75:E8:0A:FD:6E:19:4C:92:AF:68
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:58:3f:b7:bf:75:98:2e:01:62:e5:8b:ce:3f:0c:c6:bf:
39:94:33:fa:d9:43:16:94:7e:e8:f0:b0:b4:85:1b:7c:b0:70:
7d:c2:b3:57:7e:76:e3:c2:1b:29:a1:54:61:e2:b5:2d:67:da:
7c:98:d6:48:94:5f:76:f3:29:89:8a:c1:22:0e:73:43:23:a1:
da:d2:bc:bf:6b:9d:99:e5:12:c8:c5:c9:89:3b:4e:1d:0d:4a:
e2:13:31:35:fd:63:db:8a:72:5f:0c:85:f4:04:1e:71:52:05:
4a:d0:9c:69:8b:cb:9a:3e:e5:d2:bd:61:3a:dc:9e:45:d4:53:
e2:de:d6:c3:c3:e9:99:17:33:64:6c:29:9f:ce:54:d5:b5:af:
54:40:2a:04:0a:ca:00:45:26:04:32:ee:49:ec:20:2a:ad:a4:
33:7c:91:28:7c:53:11:63:11:fc:94:cd:ff:f0:7c:2f:7e:c3:
a5:8e:8a:b0:22:2a:5c:fc:63:55:42:d6:b4:b1:73:a0:d4:7a:
9f:03:8e:a6:66:91:4f:ac:28:82:ca:8c:01:9f:90:6e:25:09:
5b:99:e2:70:55:bc:32:7a:89:1c:8f:65:11:e1:62:fa:78:ba:
41:f8:b3:e0:66:b6:24:d7:14:c2:2b:dc:89:71:e8:d2:57:96:
8e:5e:56:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFb+dM3Xn07NbNoJIm+qvHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNDZlZTQ3NTkyNzA0ODA0NWEyZDY2Y2ZiMWM5MjllZGYx
YzU3NzkwHhcNMjYxMDIxMDEwMTAxWhcNMjYxMDIyMDEwMTAxWjAzMTEwLwYDVQQD
Eyg0YTcxZmI0NTVhZjFkNzY2OGU2Yzc1ZTgwYWZkNmUxOTRjOTJhZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6psMvcKOe+Uqc6Sr7CvstIdcKgY
pKu9US8QXNshUW2k/VCwslhrGFsTg4FxrtupzO547a3NaBxek9h3nZA+0elGl8Jv
DQeP2KMVTyM0Q+6/YdC/Mq5O/9iiyDuCFNIG8nHzqGYtyGFgQ6pm1yT+gz3zHa0b
r+JdHCvRSRMJ8bfqJ9/1yrNkPIz3V2z2AZc1rbyF9VSjxIRPLHVm5Otie6X4Q+fc
bes+J80qj/hEUWjX0c7xxThZXL/3wjNlo2bgjs6Hc25IyhPFfVKRvBby/tizfV9Q
0W2wgrg02fbMR4v7BYrS8G10FIVKJ2Nbchl0yiDIXYfBZtCLgX7Pj+7XVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpx+0Va8ddmjmx16Ar9bhlMkq9oMB8GA1UdIwQY
MBaAFP1G7kdZJwSARaLWbPsckp7fHFd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAt
MjFmMTVlYWY1ZWUwLzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAtMjFmMTVlYWY1ZWUw
LzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmRYP7e/
dZguAWLli84/DMa/OZQz+tlDFpR+6PCwtIUbfLBwfcKzV35248IbKaFUYeK1LWfa
fJjWSJRfdvMpiYrBIg5zQyOh2tK8v2udmeUSyMXJiTtOHQ1K4hMxNf1j24pyXwyF
9AQecVIFStCcaYvLmj7l0r1hOtyeRdRT4t7Ww8PpmRczZGwpn85U1bWvVEAqBArK
AEUmBDLuSewgKq2kM3yRKHxTEWMR/JTN//B8L37DpY6KsCIqXPxjVULWtLFzoNR6
nwOOpmaRT6wogsqMAZ+QbiUJW5nicFW8MnqJHI9lEeFi+ni6Qfiz4Ga2JNcUwivc
iXHo0leWjl5W/A==
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:12:37 2026 by rpki-client