Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
File: uBsD4ih1uwcLG3xY6touS7Gqvn8.mft (raw, json)
Hash identifier: vqB5Kl805/i4lCRfKNk9uvYKvteguRUF6RQ9xdCidyA=
Subject key identifier: E4:6F:02:81:7B:D6:89:81:FD:C3:B5:9F:11:F6:FF:DD:9D:9C:79:A1
Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
Certificate issuer: /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Certificate serial: 019D33ACA778FEDF453B5CE89DEEB6F14583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
Manifest number: 165D
Signing time: Sat 28 Mar 2026 09:00:46 +0000
Manifest this update: Sat 28 Mar 2026 09:00:46 +0000
Manifest next update: Sun 29 Mar 2026 09:00:46 +0000
Files and hashes: 1: ehhS-PlShngxUe_B1uzjREBHyds.roa (hash: wXojw0rsAtH+WtMEf5EbeLc9pSbiMo3/LWAM/pzQOy0=)
2: uBsD4ih1uwcLG3xY6touS7Gqvn8.crl (hash: yNBwgIlx7xGwd0O0NGLANJZdrof9LWQow+uFOg59OCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:a7:78:fe:df:45:3b:5c:e8:9d:ee:b6:f1:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Validity
Not Before: Mar 28 09:00:46 2026 GMT
Not After : Mar 29 09:00:46 2026 GMT
Subject: CN=e46f02817bd68981fdc3b59f11f6ffdd9d9c79a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:60:ba:df:4c:0f:35:da:59:c5:cb:8d:59:
c8:6c:dc:fb:30:73:1b:55:5f:92:aa:1e:83:20:76:
3c:b1:7c:5e:1f:30:dd:6c:80:84:c0:c1:20:9f:75:
9f:88:5e:ba:59:26:1b:29:a1:37:6f:b0:5a:96:e7:
b8:62:5d:2c:3f:a4:37:22:6e:4b:9e:1f:c1:a9:79:
2c:db:4e:3a:95:b9:f4:42:7f:47:3a:a5:5e:83:02:
ff:fe:db:dc:b3:7b:5e:8b:52:f1:96:ad:7c:8f:e7:
cc:45:e6:95:4c:34:d1:b4:00:e9:3d:d8:15:4e:1a:
7b:57:8f:d6:22:50:f7:48:f3:00:3b:f8:88:97:ff:
05:e6:fc:23:56:25:50:0b:c3:ab:15:ee:ed:8a:ae:
4e:bf:73:48:ed:59:f7:0f:98:8e:b2:fc:6d:64:ca:
06:22:f3:3f:6b:f5:e8:52:17:27:05:75:02:2d:c1:
61:43:88:8b:34:84:06:8e:d8:ff:d2:a1:31:d7:7a:
2e:55:b8:24:19:6e:8f:08:98:f3:08:df:72:8e:da:
00:8e:ef:28:1d:1f:db:d1:d4:34:6f:c0:84:b3:67:
a4:be:8c:4b:22:2f:8a:95:4a:a4:33:c6:f6:90:0e:
79:fb:47:bd:8c:53:1c:1d:2f:eb:f7:cd:11:f0:ca:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6F:02:81:7B:D6:89:81:FD:C3:B5:9F:11:F6:FF:DD:9D:9C:79:A1
X509v3 Authority Key Identifier:
keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:4b:da:24:86:86:a7:81:11:25:15:6e:ee:a1:ef:11:27:
09:e6:59:14:40:39:31:2b:93:2e:2c:db:4d:86:7b:ca:93:3a:
99:8c:38:3e:37:53:08:61:f3:f3:d4:c3:e7:bb:16:94:77:07:
14:eb:9a:6f:0a:c9:85:19:ca:fa:2d:c6:92:60:07:a9:54:f0:
0d:da:79:79:b2:87:bd:0c:a7:78:ff:61:3e:82:40:34:c1:58:
c9:e1:4a:61:fe:5f:8e:9e:ea:a0:c9:c5:c4:32:5e:99:8e:db:
b2:80:c5:af:25:cd:d0:65:c2:21:6c:2b:ce:6e:9e:59:fc:4c:
6c:98:d7:6f:11:b0:45:b5:df:ae:d0:04:f2:c1:34:86:19:d3:
cb:64:c2:6a:fd:14:b6:fa:6b:31:f2:64:31:6a:eb:d7:de:07:
f5:75:f6:44:61:8b:3e:aa:2c:36:0b:3e:6d:f9:d3:dc:d9:30:
d0:21:4d:e5:04:89:d9:97:1e:ca:69:99:61:e7:d7:cf:6a:16:
a6:28:f8:4a:e6:2e:e6:90:93:a5:35:25:89:00:d8:02:73:c3:
c1:d4:da:53:6d:81:51:c3:2f:1d:55:32:e0:9f:dc:79:a5:39:
3e:76:59:6b:0c:08:8f:aa:7a:36:51:cf:43:cb:72:89:ae:de:
3f:6e:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:08 2026 by rpki-client