Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: 6PWRe0KgYIzNgLsFckHsO8Q0N4o87nab39wXxR2Gq8w=
Subject key identifier: 4E:7A:56:EF:E9:E6:98:A2:B6:01:D4:CA:68:F7:EB:D4:B1:04:44:36
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 019E1BD892AD023D02CB1E6117E3036C20B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0E7D
Signing time: Tue 12 May 2026 11:00:38 +0000
Manifest this update: Tue 12 May 2026 11:00:38 +0000
Manifest next update: Wed 13 May 2026 11:00:38 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: kMm9HnYWwj3z3G7CKcPbrkQ7Sjakht53Nr/RpJ8T5HA=)
2: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (hash: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:92:ad:02:3d:02:cb:1e:61:17:e3:03:6c:20:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: May 12 11:00:38 2026 GMT
Not After : May 13 11:00:38 2026 GMT
Subject: CN=4e7a56efe9e698a2b601d4ca68f7ebd4b1044436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:1d:5e:6b:68:93:56:27:0b:04:e7:66:6c:
d2:be:1e:10:90:ad:1e:b8:cd:0f:b3:f5:74:bb:c3:
ff:03:e3:37:20:fb:95:e5:36:aa:35:a0:4e:19:15:
e8:02:2d:5b:58:29:d0:8c:89:63:2b:69:d9:1a:77:
8e:c6:87:ca:c5:fc:bf:2a:dd:1f:ce:55:bf:af:c6:
79:c0:4e:60:4a:16:e6:9d:bc:b2:64:55:a8:ff:ce:
ca:0c:be:b0:21:cb:cc:1a:49:70:7d:08:eb:ad:b9:
c0:c5:c0:8d:c9:1a:64:d5:10:59:14:84:44:5f:8d:
7a:3d:a6:ee:93:d8:66:55:c6:c2:a6:76:15:6f:2b:
d4:34:5b:02:3e:ba:98:40:40:92:58:25:46:3c:e5:
03:c6:fc:f9:c9:c8:24:cd:f4:30:79:4d:e7:de:45:
01:1e:62:6a:cf:fc:c5:e3:de:30:91:60:81:0b:d1:
a3:74:52:78:7d:88:5c:c4:b5:21:0e:90:f7:db:9c:
3a:ab:5b:24:e2:12:87:4c:e9:2c:d6:85:0d:e7:8b:
3d:4b:1f:9b:13:39:be:6a:b3:b7:9c:b5:9a:1a:93:
c7:9e:87:f4:e0:b2:5d:28:f8:c9:0d:7d:2e:60:63:
3c:27:c5:a9:22:31:27:70:5e:4b:43:42:a6:cb:5d:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:56:EF:E9:E6:98:A2:B6:01:D4:CA:68:F7:EB:D4:B1:04:44:36
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:e9:dd:84:04:43:9c:de:6d:e2:0b:35:c9:7e:a4:01:5f:
c2:5d:98:26:a5:1e:bf:9f:a2:69:03:0b:fa:aa:7c:5e:26:35:
ff:d8:57:9b:47:49:4b:8d:62:63:64:dd:fd:70:b2:ff:96:1c:
31:69:19:3e:ec:76:53:f1:10:62:ee:0c:20:fb:5d:9b:73:fc:
01:aa:b7:68:b2:99:1a:c5:2e:c5:b0:f1:96:8d:f8:8c:fb:77:
7e:ee:0d:d3:c5:50:aa:48:90:0b:e0:28:ac:7f:79:f5:86:e8:
ac:c0:22:1f:88:fc:d1:21:f0:40:30:38:22:65:dd:ce:ae:4c:
8f:97:67:b3:ba:c8:fe:25:e6:04:29:f9:3a:45:4f:34:f1:3d:
62:f1:e7:0b:90:cd:48:9c:9b:4e:76:1c:d0:00:c1:dd:37:72:
b3:5d:21:63:81:a5:23:c6:5c:3d:13:5e:92:5d:40:01:70:5f:
89:ba:f3:b6:f9:ec:b0:b7:95:e1:c0:91:7c:da:f7:06:0f:c1:
e6:cd:42:64:f5:c4:12:2e:2b:ca:fa:c8:9e:54:a8:39:f8:fe:
bc:14:47:23:47:ac:26:a8:53:d2:96:58:20:18:71:5b:ed:68:
51:30:74:9f:28:91:98:da:78:c3:02:a1:fa:c6:69:2c:e9:93:
30:74:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:54 2026 by rpki-client