Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier: nmy2B0PszB7RG40ys4VqodJJkm/VKW1V7h1eCUvTne8=
Subject key identifier: 61:08:3F:53:9A:D2:02:F8:0B:E2:42:5E:7F:66:C7:7E:F9:C7:71:6D
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 019D292914B3B4434ADEA8DD767AD97BE90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:00:51 +0000
Manifest this update: Thu 26 Mar 2026 08:00:51 +0000
Manifest next update: Fri 27 Mar 2026 08:00:51 +0000
Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: qDDoDbPqAqL/dabbLBvvgSTOr8qDv+87pz65nBUV40E=)
2: C4dhhSdCne6HfKBYrO0fMDCR52U.roa (hash: uDVsLBMCBkiLe3jkQqb41lNCpW9vDxKBn3Ey847tq5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:14:b3:b4:43:4a:de:a8:dd:76:7a:d9:7b:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Mar 26 08:00:51 2026 GMT
Not After : Mar 27 08:00:51 2026 GMT
Subject: CN=61083f539ad202f80be2425e7f66c77ef9c7716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:8d:04:9c:db:1f:86:68:8a:3b:e1:79:1c:
46:42:4e:b8:6c:87:f0:f5:80:69:5b:c7:63:d6:9c:
aa:ef:5a:4c:8a:d8:e3:c3:60:ef:3c:9a:24:a6:18:
f1:af:87:1f:ac:83:2f:58:47:03:31:45:6a:ab:f5:
fb:f7:35:17:64:46:e9:8a:73:fb:de:c7:1b:c6:10:
7e:85:57:8d:14:c9:d1:7a:92:2f:83:87:90:de:a6:
15:99:bd:40:b8:77:3e:1d:ec:64:f6:53:bb:f1:ec:
a6:1d:c6:f9:66:b4:5e:87:72:a1:d8:27:82:db:e8:
07:d2:ee:7d:6b:e1:a3:1a:e6:6c:f6:d5:66:cf:40:
eb:d3:4f:26:c8:32:f5:e5:70:b4:3d:6d:73:8b:49:
a3:8b:ae:9a:c4:2f:89:0b:36:c7:a6:23:14:03:f1:
20:86:2b:30:81:55:36:7c:7f:cd:67:85:e3:1f:45:
83:e6:59:82:84:a7:5f:a8:46:2e:b6:37:bf:75:10:
36:11:2c:cc:51:1b:d2:af:79:26:e2:3a:18:4b:5f:
b4:8a:c8:3c:74:8f:c5:30:99:71:cd:17:bf:e0:ec:
fb:40:86:61:e6:22:1a:aa:51:d6:00:5c:b4:b4:fe:
72:0c:3a:dd:2e:9c:9f:b3:e9:93:97:61:da:3c:15:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:3F:53:9A:D2:02:F8:0B:E2:42:5E:7F:66:C7:7E:F9:C7:71:6D
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:0c:ee:e1:6d:7c:9f:13:20:22:72:ec:d1:43:1f:fb:ff:
40:b2:9c:26:30:3f:10:10:5d:a3:71:cc:cf:2f:7b:c8:4c:d9:
05:40:b8:74:f0:6e:e9:84:32:5f:b7:cf:0c:8c:3b:dc:fc:37:
17:20:82:8f:42:13:66:e9:28:06:c8:6c:e7:07:41:14:b0:58:
18:68:2a:dc:26:25:02:d5:4a:1c:56:eb:04:09:ed:98:8b:2d:
5c:23:6b:98:42:fa:73:52:b2:a3:db:14:01:1c:f8:5d:74:1f:
bf:bc:87:3c:76:c8:1c:32:69:57:3b:2a:b2:cd:3a:79:db:b4:
13:7c:28:ab:ab:c2:f2:ed:7a:80:c2:2b:68:6c:3d:b1:6a:db:
da:2d:11:ab:7d:bc:ec:92:ac:80:d8:b3:a6:7f:8e:d8:36:35:
7c:aa:3f:f5:a1:76:f1:8e:73:9a:03:e9:9f:19:63:da:2f:57:
52:db:cf:c9:06:03:91:92:cc:42:27:5f:41:d9:fc:a9:09:33:
1f:de:bf:c0:fe:89:6d:5a:bf:cb:d5:d2:c7:54:c6:51:4c:d2:
fc:b5:8f:86:c2:90:31:a3:4d:01:5f:e5:fe:75:5f:78:53:c3:
f3:3b:74:08:8f:10:db:1f:a5:bd:42:c6:6b:04:ec:bf:be:b9:
e6:1f:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:27 2026 by rpki-client