Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: nc2q/zT0toKCrWnOBTp/iMXvPgWNm73Z5PBvKxt1O3s=
Subject key identifier: F3:85:94:F7:06:A6:90:76:C8:B0:9F:2F:99:F7:25:63:17:D5:C0:BF
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 019CACEBC4EABB68EDDE0957E7ED167FE50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0DBF
Signing time: Mon 02 Mar 2026 05:00:58 +0000
Manifest this update: Mon 02 Mar 2026 05:00:58 +0000
Manifest next update: Tue 03 Mar 2026 05:00:58 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: KU3uHo5Yk93yM6bwJX6UVNr+DSkIAQBwoZD9+Zu2wRk=)
2: kNgf3cgYhHD6RKubUEMvHEUFCrE.roa (hash: PN84y3FzjcGiYzNbl+qqLm6SXgIlky9llo5IO82GJto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c4:ea:bb:68:ed:de:09:57:e7:ed:16:7f:e5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Mar 2 05:00:58 2026 GMT
Not After : Mar 3 05:00:58 2026 GMT
Subject: CN=f38594f706a69076c8b09f2f99f7256317d5c0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:ce:78:6a:ec:71:5f:77:a6:a2:6a:ae:0c:
53:b2:f9:b9:51:fd:4f:1e:9e:ef:e7:e5:d5:72:88:
bc:bc:62:fb:bb:aa:3f:fc:3a:98:c0:f8:aa:61:9c:
4b:57:ff:5b:1d:a3:f2:00:b6:fa:87:6e:f1:b0:3a:
8c:b5:11:41:e7:77:82:61:a0:62:f3:32:9a:67:fb:
49:64:08:30:e3:d7:dc:95:fc:10:e8:ad:56:af:7d:
40:41:e9:68:24:60:db:ee:f3:ef:b4:27:c4:19:01:
e9:7d:3e:7f:9f:3e:08:5e:78:ec:4e:5b:62:76:cd:
60:89:e5:6b:5e:b0:d3:49:6b:3d:7d:b5:ba:10:3a:
dc:f2:4a:b2:18:b0:22:ff:48:b6:d6:eb:27:e5:17:
7b:a8:fd:91:fb:5e:ab:1f:25:31:15:18:4f:6a:10:
a7:ae:a6:ac:2f:de:da:46:91:cb:dc:ed:b8:ab:2e:
e7:b2:7f:f1:00:4a:2f:74:21:9e:09:15:8d:fa:3d:
89:ac:3c:d2:01:44:cd:78:d5:cc:0a:15:cb:a1:e7:
db:98:4d:15:be:c1:94:0c:d1:5d:8b:23:18:48:04:
7c:68:78:92:48:e7:bd:df:a6:b3:ff:a5:dd:49:50:
74:f1:72:f5:3a:1f:19:c9:07:03:26:06:4e:02:4e:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:85:94:F7:06:A6:90:76:C8:B0:9F:2F:99:F7:25:63:17:D5:C0:BF
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:f7:20:44:05:00:1a:9a:a6:fa:9c:85:93:38:cd:a1:7c:
84:66:52:a3:16:73:39:aa:15:6e:12:be:c1:3f:2d:28:67:32:
2b:dc:6c:c8:9c:85:49:e4:16:fa:11:87:ad:29:1a:4f:a4:0e:
a4:c4:9d:a0:ac:bc:88:0c:92:bd:d2:cc:91:d6:7a:46:70:12:
5b:6c:be:8e:28:d9:94:bb:fa:92:a9:1d:ba:cc:48:b4:53:9f:
15:d7:ba:6c:16:96:5d:f4:49:94:6b:1e:d6:9d:8d:e4:5d:d7:
ae:8c:e8:c1:5f:57:5a:c2:0d:a2:66:60:d9:2e:c2:67:51:32:
7d:df:59:02:ed:93:03:4a:53:68:40:b0:db:3b:68:9d:fa:bc:
c3:7a:bf:f4:67:4d:cd:29:0e:e1:9d:56:35:61:d2:bb:5e:38:
05:dd:27:18:11:68:e9:b2:a5:a8:60:ca:85:91:b8:07:75:a0:
88:cb:0a:3a:c1:5f:18:10:7c:2a:18:79:19:7c:14:58:8d:0d:
d1:70:87:98:9e:52:33:3f:32:eb:ee:9c:ba:5f:40:01:e4:06:
ae:0a:5a:fd:b7:16:6a:6e:8b:e8:ad:2f:31:30:d3:46:0f:f1:
c2:d4:48:0c:e4:d9:eb:69:5f:60:94:e9:06:b3:a1:15:2f:05:
cc:06:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:53 2026 by rpki-client