Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: HLw+jyNN5zmeBgqvgVbxE41L6MpauPmvQe/woGQVu/k=
Subject key identifier: 35:AE:B7:2E:41:87:6A:9B:DA:7A:6C:08:8D:59:5E:95:06:46:12:EF
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 019E1F10FD777465C8F8B5C903F141BE2D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0F84
Signing time: Wed 13 May 2026 02:01:07 +0000
Manifest this update: Wed 13 May 2026 02:01:07 +0000
Manifest next update: Thu 14 May 2026 02:01:07 +0000
Files and hashes: 1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: 1LW8K3reCuGMx7X+m0WPDchFAZZGfYB6SIFHGUKLSf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:fd:77:74:65:c8:f8:b5:c9:03:f1:41:be:2d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: May 13 02:01:07 2026 GMT
Not After : May 14 02:01:07 2026 GMT
Subject: CN=35aeb72e41876a9bda7a6c088d595e95064612ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:d2:ca:7b:85:c0:ed:ab:4b:f4:73:28:dd:
92:50:66:c6:2b:e9:70:41:f4:93:f7:ea:0e:50:b4:
26:1f:7c:df:98:ee:9b:0a:50:ec:f1:b4:c0:08:07:
d9:23:f2:0a:29:c5:2c:c3:8d:97:3f:d7:43:52:74:
40:72:48:52:8b:d4:f2:5c:cf:fd:86:66:50:19:27:
84:00:f7:08:20:3f:b5:97:66:09:d7:90:f3:54:88:
eb:6e:1a:6b:c8:4a:bd:90:23:2b:bf:44:6b:22:8b:
9e:c8:c5:9a:cf:66:69:e7:81:ae:79:fb:7d:57:2e:
14:85:65:a7:4b:89:db:ce:44:8e:67:8c:de:c0:c1:
9b:f1:f4:61:6f:30:c9:de:14:63:f2:86:d3:3b:a0:
d9:95:62:51:b6:1c:33:72:e6:66:d0:79:bb:80:af:
45:da:6e:d4:36:67:7f:1a:c8:24:d6:1f:94:a0:66:
22:50:78:9c:35:10:e8:81:2a:21:89:fe:a8:e6:a4:
1b:a7:2a:b2:9b:0d:f4:0e:4a:df:41:12:c9:e7:69:
06:06:b8:df:9f:fb:ab:b5:17:65:56:aa:19:af:14:
59:f0:8e:79:3e:5e:71:74:a2:0f:cf:9a:24:a2:76:
95:c3:31:cc:a7:48:f3:3d:56:05:a8:d8:b4:f4:89:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:B7:2E:41:87:6A:9B:DA:7A:6C:08:8D:59:5E:95:06:46:12:EF
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b3:99:c5:da:02:6f:35:eb:da:22:cb:6e:0c:24:aa:fe:cc:
4a:df:4f:d0:4e:95:e4:06:e6:bf:a2:56:6e:75:71:c3:8f:01:
e9:fc:29:0c:96:5e:88:d5:3f:31:d6:3c:86:d6:81:e3:e4:4d:
a3:98:54:85:3f:f8:01:b7:ab:e7:2b:c0:45:6d:b6:7f:c7:3b:
20:a7:63:1c:31:65:6f:82:6f:fe:a6:97:8e:60:a8:b3:bc:62:
e4:07:23:9f:95:63:e4:c8:de:13:4a:a6:10:cb:58:18:99:b5:
52:4f:96:9d:a1:1b:5a:9a:37:78:bc:cc:44:8f:c1:95:4c:07:
17:31:c3:36:f0:2b:5f:3a:1a:a1:e5:9d:a4:ef:32:a7:cf:54:
fc:c7:64:14:a8:8c:04:b6:9b:ec:5e:5d:54:5a:e0:bc:b2:c7:
35:7b:bd:2e:31:3c:f5:21:a5:23:75:f2:41:94:aa:c7:33:3d:
24:3a:e1:03:59:e7:ed:ba:55:6b:b3:95:4d:94:27:ea:2b:60:
e6:d8:7e:7d:cf:a8:74:a8:2c:63:c2:30:fd:2c:55:aa:6c:96:
fa:ce:70:32:e9:34:43:23:cc:6e:89:d0:35:32:b9:30:52:ff:
d0:ce:f5:fa:e9:0a:2e:87:85:f7:23:82:65:36:2e:ed:46:12:
50:7d:06:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEP13dGXI+LXJA/FBvi1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjYwNTEzMDIwMTA3WhcNMjYwNTE0MDIwMTA3WjAzMTEwLwYDVQQD
EygzNWFlYjcyZTQxODc2YTliZGE3YTZjMDg4ZDU5NWU5NTA2NDYxMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztTSynuFwO2rS/RzKN2SUGbGK+lw
QfST9+oOULQmH3zfmO6bClDs8bTACAfZI/IKKcUsw42XP9dDUnRAckhSi9TyXM/9
hmZQGSeEAPcIID+1l2YJ15DzVIjrbhpryEq9kCMrv0RrIoueyMWaz2Zp54Gueft9
Vy4UhWWnS4nbzkSOZ4zewMGb8fRhbzDJ3hRj8obTO6DZlWJRthwzcuZm0Hm7gK9F
2m7UNmd/Gsgk1h+UoGYiUHicNRDogSohif6o5qQbpyqymw30DkrfQRLJ52kGBrjf
n/urtRdlVqoZrxRZ8I55Pl5xdKIPz5okonaVwzHMp0jzPVYFqNi09InrDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWuty5Bh2qb2npsCI1ZXpUGRhLvMB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbOZxdoC
bzXr2iLLbgwkqv7MSt9P0E6V5Abmv6JWbnVxw48B6fwpDJZeiNU/MdY8htaB4+RN
o5hUhT/4Aber5yvARW22f8c7IKdjHDFlb4Jv/qaXjmCos7xi5Acjn5Vj5MjeE0qm
EMtYGJm1Uk+WnaEbWpo3eLzMRI/BlUwHFzHDNvArXzoaoeWdpO8yp89U/MdkFKiM
BLab7F5dVFrgvLLHNXu9LjE89SGlI3XyQZSqxzM9JDrhA1nn7bpVa7OVTZQn6itg
5th+fc+odKgsY8Iw/SxVqmyW+s5wMuk0QyPMbonQNTK5MFL/0M71+ukKLoeF9yOC
ZTYu7UYSUH0GGw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:16:14 2026 by rpki-client