Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: EqV/gBw0JFYcdh2gE3mT3y2IHIxb13Sbnafa7+24nbM=
Subject key identifier: E4:86:D0:73:41:84:22:D7:D3:A9:24:46:31:DA:15:14:5A:AF:DB:A5
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 019D28846AE55BA354E9889668439F1E7EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0DFF
Signing time: Thu 26 Mar 2026 05:00:59 +0000
Manifest this update: Thu 26 Mar 2026 05:00:59 +0000
Manifest next update: Fri 27 Mar 2026 05:00:59 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: JQBdJgKf25121sK3iGkmUKC9MkcfUxrx0eqhyKnOCFk=)
2: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (hash: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6a:e5:5b:a3:54:e9:88:96:68:43:9f:1e:7e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Mar 26 05:00:59 2026 GMT
Not After : Mar 27 05:00:59 2026 GMT
Subject: CN=e486d073418422d7d3a9244631da15145aafdba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:4c:b9:d3:c5:a9:d2:00:b6:65:cf:ca:1b:
1e:15:84:53:e5:5c:27:bf:4b:a6:99:89:91:3e:c3:
60:82:14:67:30:48:95:9b:7d:cd:92:1d:7f:94:b9:
b5:fc:5c:4a:2e:18:5f:81:f0:07:09:2f:67:82:dd:
ac:40:29:6a:1c:98:5b:ac:78:6c:c6:b5:ab:48:94:
9e:d2:07:b2:a2:55:97:54:6e:f1:ae:61:86:92:86:
8a:d7:c5:78:05:78:d1:27:87:46:ac:b0:81:df:99:
62:bd:f5:b5:53:27:df:f1:d8:25:79:51:a5:01:d9:
1f:70:0f:ff:0a:78:3e:d3:f0:1d:4f:fa:05:3e:be:
a8:3d:a7:44:2a:2e:28:34:b1:9d:b9:ee:82:b9:67:
82:fa:29:d8:c7:b1:af:79:13:4f:ef:7a:d8:ef:1e:
4c:2d:a7:2f:80:8b:9f:60:8c:73:25:62:59:0f:50:
f1:a8:f1:05:ff:b4:35:78:d7:6f:96:ce:00:21:7d:
60:ac:3e:1c:c3:fa:46:44:ed:bc:0a:02:62:66:78:
ba:be:bc:7a:c9:8e:9b:44:99:a1:7e:e3:39:5d:49:
75:e0:26:5b:ec:a7:d4:75:83:1d:6d:0b:f2:16:35:
5e:d0:cb:7f:fe:06:47:4c:6e:5e:d3:af:68:0d:4c:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:86:D0:73:41:84:22:D7:D3:A9:24:46:31:DA:15:14:5A:AF:DB:A5
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:24:b2:5a:36:e3:64:4a:d0:93:f5:82:d3:dc:8b:83:27:a7:
f3:07:5b:59:5f:61:4b:5d:71:55:a3:bb:38:c6:a0:98:aa:6c:
5a:ce:82:e8:c5:5a:d4:d6:75:2f:33:50:56:87:28:2a:ad:57:
24:f7:e0:44:4a:bf:73:b5:2a:41:22:98:65:94:d4:56:1e:bc:
24:78:56:83:62:84:5d:47:e7:35:9d:58:6c:93:e4:29:f1:29:
d4:93:7c:c2:11:4c:59:0e:5d:da:c8:fc:57:32:b9:e7:68:3a:
42:b8:90:bf:b0:f1:f6:e6:fc:c2:6d:bd:e5:19:12:5e:c5:ad:
97:8d:b3:1d:89:db:e1:9c:f5:c6:d9:4f:39:60:4e:92:72:4e:
eb:8c:61:e0:3a:a1:9b:6c:d9:75:80:09:9e:3c:0c:96:03:a9:
52:ac:9f:65:a0:0d:fb:3c:9b:96:74:f8:5d:68:3c:52:c0:ff:
89:ed:cc:31:7a:8f:ad:d1:a2:8c:ca:bf:4c:6a:63:7c:85:89:
9e:fb:43:4f:25:e0:13:76:87:60:70:4c:b9:2f:37:7f:9e:0d:
3c:0b:5c:a6:4f:0b:ef:df:4b:11:5f:43:19:e5:92:b6:25:12:
85:20:89:46:d8:85:96:bc:90:c3:2c:00:3c:00:55:b9:e1:ee:
6a:5c:27:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:04 2026 by rpki-client