Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: OrGk50/WjvChFv7ZfFjCVKcyqnGKg68Nh4v3A58Uiiw=
Subject key identifier: AA:03:6E:89:E2:37:31:0A:F6:0C:A7:5F:F6:29:E3:19:23:49:1B:7A
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 019D265F2A4C2C982D4881F79AA9FBB24AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 01E8
Signing time: Wed 25 Mar 2026 19:01:04 +0000
Manifest this update: Wed 25 Mar 2026 19:01:04 +0000
Manifest next update: Thu 26 Mar 2026 19:01:04 +0000
Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: 6Zkg0gJJ+t3VRBCjEkBiUZ8neaiLNUe/ujzQFKId5XY=)
2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:2a:4c:2c:98:2d:48:81:f7:9a:a9:fb:b2:4a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Mar 25 19:01:04 2026 GMT
Not After : Mar 26 19:01:04 2026 GMT
Subject: CN=aa036e89e237310af60ca75ff629e31923491b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:88:91:8a:f6:f4:03:4b:f8:7c:aa:fa:ce:
dd:27:13:41:32:a7:c8:de:e3:cb:a5:20:92:25:c8:
04:8b:37:2d:d3:d2:2a:7c:3b:98:31:aa:a8:49:62:
50:f4:00:5f:02:2d:8b:c8:3b:42:3c:6c:ec:e4:d5:
75:8b:4d:31:4b:68:4a:49:c1:46:34:de:f3:31:6f:
c4:0c:20:2f:a9:03:19:99:1e:c7:27:c3:d0:09:04:
d5:d5:97:e3:c8:83:4d:4b:b7:a0:b7:91:ff:76:24:
7c:05:a4:37:b0:77:c2:5a:df:e2:51:3e:ac:8f:6d:
54:0a:c7:8b:8e:46:bf:fb:84:1a:c9:22:88:d4:28:
64:02:84:0b:bd:0e:7d:20:55:42:89:4a:4b:1d:67:
b9:3e:74:d3:da:2b:59:fc:9c:db:7f:9c:3d:45:a3:
26:83:f9:6d:11:2f:f2:ec:cf:6b:39:44:a0:20:5f:
8e:55:54:a7:bd:33:f6:df:cb:5c:c4:22:ca:55:c5:
ad:2b:ac:ab:5d:55:fd:06:de:7a:c5:5f:f5:59:8f:
58:05:81:73:70:18:56:86:98:4b:3f:ea:f5:ff:2f:
1a:89:32:93:be:bd:80:67:7e:e1:6b:f8:11:33:ad:
7c:5d:d1:08:ff:47:b7:4a:f0:6b:20:f7:ea:40:d0:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:6E:89:E2:37:31:0A:F6:0C:A7:5F:F6:29:E3:19:23:49:1B:7A
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e7:dc:7c:3c:b9:cc:a0:99:a0:3b:e4:c9:a7:d3:f5:c2:ef:
91:64:d5:17:d3:16:d4:eb:98:46:bd:8a:01:5a:a8:79:72:c2:
e0:85:be:69:51:b7:53:7b:b3:1d:ed:4d:69:91:2a:bc:dc:19:
ae:21:d1:59:45:15:ea:76:de:fc:ae:fe:1c:17:fa:f9:5a:0d:
67:1f:c7:15:b5:55:da:2e:07:7f:88:9e:00:58:8d:e7:f6:f8:
89:c2:27:27:4c:aa:e5:47:34:5c:ad:02:b2:7b:38:3e:47:c5:
60:7c:db:d3:3b:07:8d:23:4d:29:5b:e9:5c:67:08:3d:09:07:
e9:1e:f2:c5:40:0a:7d:8f:18:f6:48:b5:5e:dd:9c:04:1d:37:
28:dc:68:12:0b:22:21:9b:9f:8f:8e:8e:39:63:c1:69:51:42:
0d:2f:f1:d3:6b:07:ca:3c:65:53:81:d3:c4:1b:ed:4c:9c:2f:
db:e2:8b:e9:6e:95:98:04:41:e0:8f:7d:66:89:fe:12:f9:b0:
c3:3e:c9:34:ac:95:99:ca:42:ab:d8:ec:34:ca:68:20:9d:4a:
dd:84:96:2d:5a:44:b3:7f:c0:9f:a9:72:69:65:c7:d6:08:64:
ba:2c:d6:90:94:ba:2b:1c:55:9b:4e:b5:e6:8c:fa:82:45:d4:
92:8d:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:57 2026 by rpki-client