Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: QeAcD83q/N9T6p8OzFI+ILZIv+WW4WnnDTPzPp8VF7Q=
Subject key identifier: CB:A3:78:1D:DB:03:EB:27:09:2F:23:BA:80:24:FF:0E:F4:98:50:58
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 01A0C1B1D71375B2FC4A09984DF3FCEC0095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0FDC
Signing time: Mon 21 Sep 2026 02:00:52 +0000
Manifest this update: Mon 21 Sep 2026 02:00:52 +0000
Manifest next update: Tue 22 Sep 2026 02:00:52 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: DSQWYEWT8EIK80fC5RsgWK4AFVpy+ZDuF/ylmo/iJZc=)
2: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (hash: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:d7:13:75:b2:fc:4a:09:98:4d:f3:fc:ec:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Sep 21 02:00:52 2026 GMT
Not After : Sep 22 02:00:52 2026 GMT
Subject: CN=cba3781ddb03eb27092f23ba8024ff0ef4985058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:d2:75:4b:86:f6:4b:27:2d:41:7d:bf:3a:
07:e6:93:6b:47:77:b7:e7:67:1f:b0:3a:29:b8:81:
d4:39:20:5f:af:2f:5a:2d:fc:7d:af:32:a3:51:1d:
0c:02:e7:18:66:97:7b:74:59:bd:7f:fb:61:26:b7:
93:f5:1a:a8:92:e3:fb:44:3f:50:a1:de:4a:6c:90:
7a:3c:41:ca:45:69:45:74:fc:a8:68:1b:79:4e:09:
a9:3c:03:b3:5b:44:6b:47:d0:7e:30:78:ee:c7:51:
c2:fb:52:67:89:32:0a:ad:b5:bd:36:36:3e:61:50:
97:be:2c:bc:78:a9:56:dc:85:b9:8b:1a:e1:af:e7:
f4:02:0a:35:b3:56:47:75:65:6e:26:b7:ab:63:94:
9a:84:9f:bd:5d:8a:ab:0c:7b:85:39:4b:f9:25:d7:
95:a2:2d:60:da:0a:c3:87:f7:af:a2:08:3a:0e:87:
bc:19:3e:7e:78:1f:30:b6:aa:85:7c:fc:98:59:b9:
20:4c:55:e5:72:b8:32:ed:d4:0c:0f:c5:c8:cc:e6:
dc:9d:a3:a2:7d:14:e7:59:08:0a:ee:eb:0d:99:2a:
b2:58:6a:40:a1:ec:7d:38:35:72:93:75:47:96:42:
b3:fb:58:88:00:44:e6:eb:3d:d7:2f:75:2f:5d:0b:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:78:1D:DB:03:EB:27:09:2F:23:BA:80:24:FF:0E:F4:98:50:58
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:05:24:d0:5a:16:2f:6e:a3:ab:4e:bc:79:4c:19:50:6d:7f:
e8:7e:aa:38:31:21:85:f3:80:d9:e6:00:73:18:c6:be:11:94:
2c:cf:25:48:5d:fb:14:ef:bf:fb:d3:77:f1:af:d2:24:06:ba:
fd:8b:5e:94:2f:ad:d1:f0:d3:bd:9e:ba:e2:c0:82:37:1e:85:
65:54:8c:b1:1b:ed:55:5b:b5:5a:61:2d:56:81:bb:8e:0c:99:
f1:ef:65:a1:fd:db:9e:ab:cb:82:be:b4:35:49:e8:35:54:30:
8a:6d:15:6a:bc:b8:33:22:a6:fc:12:a1:25:6e:44:cc:3e:34:
87:dc:e0:d7:f1:b3:19:20:29:81:99:6d:9e:d6:d3:8d:b0:a4:
fe:75:d3:3c:8d:91:6d:37:34:90:ae:b4:59:0d:2f:72:b3:bd:
fb:6d:80:96:1b:cc:3b:37:71:3f:32:f3:2b:be:5d:a3:13:59:
53:3b:06:4c:47:74:6e:58:1f:b8:86:22:8e:81:35:36:f2:65:
4d:87:46:fb:65:1f:9a:83:99:41:4a:29:d8:d8:0f:98:9f:00:
00:1d:ea:4e:b9:9e:1b:90:c7:c3:11:e1:e3:2a:af:c5:0a:f9:
57:0d:30:f3:83:a1:76:7a:6b:1b:29:52:c0:c1:db:ad:70:03:
b8:a0:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:23:12 2026 by rpki-client