Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: QiKQsA8g09w+DN+1RzR4brg3ilOASWrnqnaplQwt2mg=
Subject key identifier: 49:D4:C5:79:ED:9B:A5:A3:FF:7B:5F:A5:9E:CF:20:51:EA:24:39:81
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 019CBA3A2134FABE88863F1A87DD7B8E7B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 01B0
Signing time: Wed 04 Mar 2026 19:01:37 +0000
Manifest this update: Wed 04 Mar 2026 19:01:37 +0000
Manifest next update: Thu 05 Mar 2026 19:01:37 +0000
Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: pZY4882QvzDmXfeUJqNaV8TELqbiyxDvGKT5+cPKRPc=)
2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:3a:21:34:fa:be:88:86:3f:1a:87:dd:7b:8e:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Mar 4 19:01:37 2026 GMT
Not After : Mar 5 19:01:37 2026 GMT
Subject: CN=49d4c579ed9ba5a3ff7b5fa59ecf2051ea243981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:06:6b:07:7a:e6:3c:9f:97:54:c7:31:0c:
84:05:cb:0a:a1:2a:5a:27:06:c1:f4:c0:55:62:8f:
d2:e2:9e:99:18:58:cd:7c:9c:63:eb:4f:41:ac:f2:
56:48:61:cb:a4:d5:d6:7a:4c:c7:22:20:53:66:bc:
cb:61:72:cc:ee:c4:bf:34:b6:e6:32:3b:08:dd:b5:
96:da:b6:e9:e4:19:9b:42:82:76:d2:c4:5a:58:cc:
a9:af:3c:23:59:90:86:10:30:2e:7c:eb:fe:9b:92:
53:25:0f:b3:91:01:98:17:1d:4d:f4:a2:6b:6f:12:
b7:6c:ee:2d:a1:16:fe:9d:1a:a1:0c:a3:ea:3c:ab:
34:ae:f2:ff:57:31:ca:32:b3:4c:43:55:19:e5:2f:
90:40:12:7c:13:80:27:48:68:f9:3d:5d:cb:39:4f:
f1:65:6a:0e:5f:2d:c7:27:9e:b9:c8:92:49:2b:e0:
1d:e3:a6:c1:cb:16:63:ca:ac:ab:98:38:e6:ee:3c:
57:9f:94:dd:29:eb:ea:6a:55:de:99:24:7d:bc:d2:
f9:93:c9:36:68:ed:2e:5e:8c:6d:a5:5a:64:23:a3:
92:03:4b:ed:ea:cc:0c:c2:ae:f7:fc:66:89:37:b2:
bd:06:03:dc:5c:2b:6a:f2:6c:23:bc:9e:77:4d:9d:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:C5:79:ED:9B:A5:A3:FF:7B:5F:A5:9E:CF:20:51:EA:24:39:81
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:d6:21:15:91:d3:af:0d:34:d6:64:45:fe:97:37:35:56:
32:48:d7:61:f9:e9:fd:58:63:16:dc:11:ce:30:c9:a2:bb:e4:
a0:14:61:e6:93:8f:cf:02:83:8f:9d:5c:37:d4:47:43:a1:89:
81:68:ac:d1:81:3f:4a:70:3c:fc:a3:74:d6:2b:03:cf:19:74:
ab:dd:ed:96:93:22:f2:3a:9e:35:1b:8d:74:b8:6f:b3:2d:25:
7e:b8:9f:e2:70:2b:85:8f:87:f7:55:21:fa:92:c5:ee:86:16:
f4:e9:cf:15:21:c6:02:f5:c4:a7:e8:48:5d:c7:99:db:f3:35:
bd:d2:fa:b1:67:b4:85:f1:a1:40:2e:ee:b8:14:90:09:99:a7:
5c:33:31:f8:34:b8:12:4c:ab:49:a6:40:b3:30:e0:5f:f8:18:
0d:08:b2:24:64:34:a4:7d:dd:9c:53:33:a3:3a:e8:89:c0:36:
fe:de:6f:e4:57:a3:3b:2b:71:d8:97:2d:a5:fe:21:59:52:0f:
c9:0a:1f:3b:74:90:d0:74:63:99:f3:99:6c:e1:16:50:04:3b:
f7:ff:00:62:f1:8a:33:bd:8a:6e:6e:0a:6a:96:b1:35:6b:c8:
49:b0:74:a2:10:6d:14:36:9b:d6:0e:52:49:b7:de:6b:cf:30:
1a:c9:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:42:03 2026 by rpki-client