Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: 838HiIKoOeBc2aXGEpHwPWhrdILRVZarbgc+AgDOB1A=
Subject key identifier: 44:CA:A7:E9:57:C9:8A:A5:78:A6:03:C7:5B:C3:2E:D1:FD:4C:00:96
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 01A0F3435A0993A67218DB390B43F22DEDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 10FB
Signing time: Wed 30 Sep 2026 17:01:12 +0000
Manifest this update: Wed 30 Sep 2026 17:01:12 +0000
Manifest next update: Thu 01 Oct 2026 17:01:12 +0000
Files and hashes: 1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: nb0cPzkAuy/x42A2Upz8RyTlRTPwEWltNS5nYPjra9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:5a:09:93:a6:72:18:db:39:0b:43:f2:2d:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Sep 30 17:01:12 2026 GMT
Not After : Oct 1 17:01:12 2026 GMT
Subject: CN=44caa7e957c98aa578a603c75bc32ed1fd4c0096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:0a:ef:59:b5:03:d2:a9:0f:0c:9a:a4:59:
b1:61:f2:e3:ee:8b:5d:80:f6:73:cf:56:c5:fd:39:
7d:90:cf:d3:a3:91:b3:51:0c:d8:8f:2f:3c:44:12:
43:53:da:a9:04:23:72:5c:3e:79:34:e8:58:21:ab:
e5:83:07:75:2e:13:bf:ca:ea:1e:32:95:a3:37:2b:
ed:19:0b:f1:28:80:cb:42:be:ac:3f:e5:b4:16:c2:
41:ed:cf:03:95:14:9a:89:22:5a:4a:64:98:ad:c5:
79:57:1d:dd:c7:6d:09:c5:da:99:cc:90:06:47:99:
df:c1:43:36:9c:ab:68:22:66:ef:82:56:7c:eb:c2:
03:5a:c3:33:d8:cc:27:db:6a:9e:db:ff:d0:35:07:
06:d8:1d:a4:2c:c2:59:57:d3:44:68:fc:19:67:45:
0c:55:cc:32:25:fc:8f:af:7c:db:0e:31:6b:81:bd:
52:89:96:83:78:8e:c0:ee:d7:18:54:42:81:17:cd:
83:18:23:97:07:4a:10:0a:3a:a2:4d:fd:9c:d6:60:
de:e9:5f:39:59:c7:52:0b:4b:eb:93:26:54:fe:08:
3f:38:fd:fb:ba:88:1b:aa:c5:28:0d:53:5a:20:73:
09:04:17:2e:ed:ee:e5:20:c2:8a:51:e4:64:5e:2e:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:A7:E9:57:C9:8A:A5:78:A6:03:C7:5B:C3:2E:D1:FD:4C:00:96
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:68:eb:57:71:c9:a9:ce:3b:f2:d8:5a:db:e3:fb:7c:5e:29:
0b:1f:4e:e1:fb:09:d0:3a:5b:33:16:bd:81:48:41:f2:8e:94:
83:c3:85:ab:8b:a3:ba:3a:a7:98:fe:53:60:7c:98:b0:28:55:
90:4b:52:05:6e:82:fc:d7:bf:28:c7:6a:16:f5:e4:8e:32:e8:
a5:ad:a3:3d:87:a2:39:93:d9:1e:06:e0:73:39:5d:97:1c:70:
32:6f:9d:06:15:56:33:07:40:11:e5:5c:83:12:31:fb:78:ec:
ce:0a:9f:d0:de:ce:af:13:bd:b1:e5:58:90:59:cb:ac:c7:4b:
9d:76:38:d0:1a:97:97:50:cf:f3:5f:88:73:1f:78:dc:98:46:
87:aa:3f:c4:6c:7e:c1:36:a9:45:a0:b5:9f:e7:86:75:b7:8d:
c6:49:59:cb:79:40:16:38:7a:ca:90:b5:82:52:a1:18:15:a3:
6c:3e:69:8c:e7:80:e0:81:a4:f9:5f:a1:ed:d0:f0:97:19:de:
86:33:6f:c0:7f:ae:20:a8:8f:b3:15:b0:fb:97:3f:26:bb:0f:
f4:fb:99:c6:e6:85:1f:25:68:40:6f:c4:0f:0b:63:28:2f:1f:
93:11:13:58:2c:13:88:8a:74:5b:d6:cd:ec:f6:a7:83:72:50:
fe:7c:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:45:06 2026 by rpki-client