Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: TRaxbtPp1XTaCHF068BxpeA/0OGKbeidYvGZwwSPTCY=
Subject key identifier: 07:EC:EE:1C:4D:B3:34:3C:87:CF:46:A0:D5:D0:88:5B:85:8B:FD:CF
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 019D27E039FAC5A07C351DA43894EAD589C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0F04
Signing time: Thu 26 Mar 2026 02:01:39 +0000
Manifest this update: Thu 26 Mar 2026 02:01:39 +0000
Manifest next update: Fri 27 Mar 2026 02:01:39 +0000
Files and hashes: 1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: m3YI4pBO8mqwNrAZ93N+wIz4FnLgaZp/8A1s5/Q5lE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:39:fa:c5:a0:7c:35:1d:a4:38:94:ea:d5:89:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Mar 26 02:01:39 2026 GMT
Not After : Mar 27 02:01:39 2026 GMT
Subject: CN=07ecee1c4db3343c87cf46a0d5d0885b858bfdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:46:95:f1:06:b9:05:c0:4a:97:96:2d:89:3b:
04:49:2b:45:ab:5d:ae:ec:aa:62:14:56:b0:88:6e:
cd:dc:bd:1d:9c:47:88:1c:17:b9:fb:05:f2:88:de:
ae:00:0d:e3:29:37:12:52:60:ae:48:cc:17:03:40:
e4:5c:47:ca:d9:71:57:24:5f:4c:db:f4:86:9f:89:
d5:8a:08:73:50:ee:60:92:6a:15:68:fe:5a:eb:4a:
48:44:d8:df:e2:92:55:62:e4:e4:0d:d1:89:ae:51:
0c:fb:42:43:7f:de:39:4f:7f:df:fc:2b:84:06:2a:
a0:96:5a:6f:58:15:45:ba:66:09:6a:ad:4c:d4:9e:
b2:e4:fe:eb:21:59:37:49:a6:cb:7a:15:49:3c:af:
a8:54:17:ad:6c:3a:56:59:69:85:ac:49:6b:11:5d:
5f:70:60:46:51:59:fc:40:18:60:2d:f6:64:85:76:
1a:44:9d:9c:5f:d2:5c:9d:7a:b8:17:31:b0:40:f5:
bb:3d:40:be:41:cd:cb:d1:a7:5b:91:b7:cc:bf:9f:
3c:21:e4:32:fd:c7:71:44:d8:3f:4a:5a:08:4c:e2:
b6:8d:16:35:0e:ec:a2:51:23:de:7d:d2:98:34:ed:
f8:ef:c3:18:6d:ec:1b:41:79:66:23:74:e9:2b:0c:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:EE:1C:4D:B3:34:3C:87:CF:46:A0:D5:D0:88:5B:85:8B:FD:CF
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:c8:6c:97:a7:e0:32:43:b7:cd:be:aa:88:64:10:f1:d2:
a9:84:a4:5c:46:26:54:fc:94:7c:60:29:27:8a:0e:5a:f8:fb:
2e:78:dc:39:d8:82:57:f6:0a:34:a4:7f:a2:70:f3:3d:44:b9:
32:52:5e:f7:7b:49:98:bd:e2:b5:5c:bb:ad:3b:4d:0f:1b:cf:
fb:08:4c:81:12:72:80:ae:aa:ac:d8:77:8c:7c:31:8f:ab:0f:
2b:ce:47:75:8e:9d:9b:8a:b7:87:af:77:6e:c8:b7:d1:bf:6c:
2b:6f:9b:3d:82:ef:48:43:99:54:dd:9b:15:6c:0e:3e:41:38:
3d:14:f0:6f:3c:7e:a5:fb:45:49:ce:90:a1:d6:fc:24:01:43:
ca:75:9a:e3:39:6d:ac:7f:69:9c:87:c1:3b:98:d4:0c:72:71:
3c:cb:b1:33:5c:74:3b:dc:e0:92:cb:74:59:33:c8:72:b5:27:
78:2c:9c:c3:37:c3:e9:99:2f:29:cf:77:96:79:98:3d:be:0e:
52:a5:dc:9e:ee:04:28:89:c4:79:f3:d6:27:69:03:62:38:93:
97:7b:64:f3:60:e4:c2:87:5b:47:33:94:1c:3c:72:fb:3d:56:
76:9c:fd:0d:cb:71:cc:a0:1a:c3:a0:1c:f8:a3:07:a9:74:ff:
61:0c:35:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Dn6xaB8NR2kOJTq1YnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjYwMzI2MDIwMTM5WhcNMjYwMzI3MDIwMTM5WjAzMTEwLwYDVQQD
EygwN2VjZWUxYzRkYjMzNDNjODdjZjQ2YTBkNWQwODg1Yjg1OGJmZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EaV8Qa5BcBKl5YtiTsESStFq12u
7KpiFFawiG7N3L0dnEeIHBe5+wXyiN6uAA3jKTcSUmCuSMwXA0DkXEfK2XFXJF9M
2/SGn4nVighzUO5gkmoVaP5a60pIRNjf4pJVYuTkDdGJrlEM+0JDf945T3/f/CuE
BiqgllpvWBVFumYJaq1M1J6y5P7rIVk3SabLehVJPK+oVBetbDpWWWmFrElrEV1f
cGBGUVn8QBhgLfZkhXYaRJ2cX9JcnXq4FzGwQPW7PUC+Qc3L0adbkbfMv588IeQy
/cdxRNg/SloITOK2jRY1DuyiUSPefdKYNO3478MYbewbQXlmI3TpKwxRwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfs7hxNszQ8h89GoNXQiFuFi/3PMB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcnIbJen
4DJDt82+qohkEPHSqYSkXEYmVPyUfGApJ4oOWvj7LnjcOdiCV/YKNKR/onDzPUS5
MlJe93tJmL3itVy7rTtNDxvP+whMgRJygK6qrNh3jHwxj6sPK85HdY6dm4q3h693
bsi30b9sK2+bPYLvSEOZVN2bFWwOPkE4PRTwbzx+pftFSc6Qodb8JAFDynWa4zlt
rH9pnIfBO5jUDHJxPMuxM1x0O9zgkst0WTPIcrUneCycwzfD6ZkvKc93lnmYPb4O
UqXcnu4EKInEefPWJ2kDYjiTl3tk82DkwodbRzOUHDxy+z1Wdpz9DctxzKAaw6Ac
+KMHqXT/YQw1Zw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:24 2026 by rpki-client