Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: bQJtrQc9oLrCPNSkoUCp15MCBDPH4GfmRPcb6DbRD30=
Subject key identifier: D8:51:7A:DB:83:DE:75:0A:FB:90:58:DA:29:42:A8:BF:E1:AC:D9:37
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 01A100235F2F47EAE1B264D6795B58DCB66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 06A7
Signing time: Sat 03 Oct 2026 05:01:20 +0000
Manifest this update: Sat 03 Oct 2026 05:01:20 +0000
Manifest next update: Sun 04 Oct 2026 05:01:20 +0000
Files and hashes: 1: T_p7BFSEu2MaqBtsnhljtCR6GqY.roa (hash: FbyU0CKxDGTVudOk7Dftp/zF2aSEdUuIHth2Lxh5jb0=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: iNr74jt5z+wAsCNhg8a4yn9Og6A8fOxgaZkttuBuNlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:5f:2f:47:ea:e1:b2:64:d6:79:5b:58:dc:b6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Oct 3 05:01:20 2026 GMT
Not After : Oct 4 05:01:20 2026 GMT
Subject: CN=d8517adb83de750afb9058da2942a8bfe1acd937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:17:0c:ff:43:cb:dc:d0:e1:6f:9a:8f:2a:
38:ab:90:72:34:dd:7f:e1:9b:14:94:5e:17:2a:5e:
9d:cf:b4:42:ab:da:78:c2:98:f8:2c:93:6d:73:f3:
19:81:0a:87:02:85:2e:87:5b:90:1d:c5:3c:ff:5d:
bc:aa:c5:fb:82:8c:1f:3d:37:ac:ac:b0:62:91:25:
e6:94:4e:8e:44:eb:68:20:09:09:14:4f:2f:40:13:
00:1b:23:0d:60:6e:a9:17:d4:7f:93:4a:05:5e:6b:
cf:42:e6:43:2d:96:f5:10:bd:48:87:de:d3:c6:46:
ea:09:16:10:4f:83:df:c8:7d:c7:25:72:09:13:be:
f9:c6:2d:45:a9:f2:cd:30:45:f9:04:58:27:fa:1c:
0c:c5:9c:21:d6:e5:d8:b5:70:85:8d:c8:a8:ad:8b:
34:d7:6a:b3:28:63:bc:f1:63:79:0c:ee:d9:92:f3:
6f:31:5d:fc:bf:e9:58:e7:bb:46:b9:78:9c:c5:13:
38:03:70:15:e2:64:dd:8d:c7:c1:fb:3e:c1:8d:17:
19:49:03:cc:27:b2:53:54:31:74:de:fb:c9:93:9b:
2a:08:9f:fe:23:43:3e:e2:cf:fc:28:d7:cc:c9:dd:
91:e2:0b:58:39:19:7e:c7:e1:2a:d4:3c:27:ee:45:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:7A:DB:83:DE:75:0A:FB:90:58:DA:29:42:A8:BF:E1:AC:D9:37
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:69:c4:66:f3:8f:c7:53:92:0c:60:7d:85:f9:a6:26:bd:4d:
cd:27:1d:69:89:28:70:0d:cf:ea:de:cd:7c:2a:d1:d8:d1:55:
52:dd:ef:bc:2e:48:8a:49:f8:70:0f:65:56:f6:dd:6f:50:79:
24:62:93:58:cb:01:1c:5b:76:5a:a2:e6:f5:cf:b1:5b:ed:a2:
df:c4:22:b5:3e:ee:5d:0f:69:66:d6:47:3e:f5:6d:fe:e3:0b:
e2:ff:e3:d7:9d:13:43:7e:4d:51:a5:bc:ab:98:c7:09:a5:6d:
75:1a:c5:e8:f6:ad:8b:17:bb:e9:f6:c5:96:03:15:db:2f:71:
54:99:87:cd:bc:1f:c8:a5:15:3c:89:30:ea:36:4e:a3:53:2d:
7a:04:4a:e1:e6:f7:86:e7:58:b3:54:72:01:81:c9:3b:70:ca:
67:19:f5:0f:50:98:07:77:7a:1c:d7:73:65:62:7f:1a:ef:3b:
1d:6d:3a:66:61:e8:f4:f9:50:80:6b:6f:2a:0d:0b:d8:94:5e:
0d:44:ae:5f:98:9c:aa:af:de:92:a4:1d:92:26:a1:a3:b5:89:
55:44:b1:4c:d1:53:3c:fe:67:3a:a7:1f:5e:68:2f:d7:80:ae:
5e:4b:fb:80:62:4a:c5:bb:20:35:05:04:9f:75:6f:24:9f:7d:
41:e3:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:42:38 2026 by rpki-client