Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: NvkTCsqdFjtyN289OCaFAAbesd09RRnLy7gyevcNUZI=
Subject key identifier: 7A:18:50:D9:6C:3C:8A:2F:45:0E:56:0E:BF:A6:48:EE:C5:13:B6:3A
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 019CAD599CFADB265B75C0BB1A3CE6E97DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 02ED
Signing time: Mon 02 Mar 2026 07:00:57 +0000
Manifest this update: Mon 02 Mar 2026 07:00:57 +0000
Manifest next update: Tue 03 Mar 2026 07:00:57 +0000
Files and hashes: 1: 7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa (hash: gulW2Fam69TrlFiG88xoJ7S5EpFW5hwd8HZdAINgZRw=)
2: 8EkWCJKlGUuYCmtpF6giWaBabGQ.roa (hash: Sqr1KDT12n1Gb1flLKRN7KU4X7Bc8YqBHnVl5nyK2K4=)
3: MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa (hash: Fko89UG8aEMvOTWbfyMIqaGd+GLcrLD58QG0NMQTI3w=)
4: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: zqwtCsfKnK4wqNdK9Kz4ZPdyVogR7AE+RucqjEvdiYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:9c:fa:db:26:5b:75:c0:bb:1a:3c:e6:e9:7d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Mar 2 07:00:57 2026 GMT
Not After : Mar 3 07:00:57 2026 GMT
Subject: CN=7a1850d96c3c8a2f450e560ebfa648eec513b63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:03:81:a7:15:66:74:30:dd:8d:ef:c5:ba:
9e:96:96:05:44:e8:ea:3c:93:7f:2e:5f:a0:72:d3:
d8:c2:59:61:18:13:ff:e3:34:3d:0a:1b:ff:d9:af:
50:9b:6d:80:d8:f6:41:0e:1b:b4:f9:b9:64:71:fc:
e7:1c:90:e3:92:ae:74:c2:b1:f7:fd:03:5d:70:f1:
85:ae:35:61:95:40:f4:a7:ee:c0:8f:72:40:f1:21:
48:6a:94:00:74:76:64:cf:df:53:1d:f0:2c:16:26:
c0:bd:97:df:59:a5:f2:bc:78:58:29:46:92:39:64:
d8:fb:91:46:91:85:61:39:ad:da:84:e9:99:11:1e:
70:fb:33:26:61:8c:ce:8b:e9:db:32:44:ee:1e:6f:
90:7c:ca:de:31:7c:6a:8d:1c:98:f6:42:dc:45:73:
ca:ec:77:83:ac:fe:83:1e:20:9a:3a:ce:c7:ad:3f:
e2:51:8f:db:dd:a9:25:b6:a6:1b:ba:ad:c0:92:c8:
5d:03:e0:85:ae:32:5f:b8:f4:e9:db:9f:a4:59:51:
10:46:7b:80:0d:17:62:b5:38:5d:3a:af:7f:36:98:
21:f2:5d:16:19:35:79:3c:6b:b2:1a:ad:04:54:ab:
be:02:44:9a:99:85:e8:a1:d2:cb:05:34:2b:6b:b8:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:18:50:D9:6C:3C:8A:2F:45:0E:56:0E:BF:A6:48:EE:C5:13:B6:3A
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0c:17:59:5b:7c:ac:af:96:7a:20:10:d7:f8:cf:58:1f:5a:
08:a3:b5:04:3a:0e:62:80:20:5c:34:6d:8c:42:a7:aa:2a:8d:
e8:74:e4:e0:02:aa:68:32:26:ed:a2:8d:91:3b:a1:e1:c8:8a:
d7:f7:da:51:37:c7:de:dc:52:99:d3:10:b8:84:b3:ca:70:ca:
a6:40:01:ac:76:1a:18:ad:92:4d:c9:4f:d2:52:af:77:24:bd:
73:0a:1a:1d:d3:f1:0e:d2:2d:c2:54:97:1d:be:c2:fb:96:eb:
0f:94:31:95:e5:f7:9b:77:41:77:9f:42:26:c2:9b:53:33:30:
14:b1:ad:cb:08:7e:f3:ee:f0:d7:eb:52:af:2a:c2:27:bd:3d:
38:fe:8b:3e:de:97:c7:73:77:99:58:08:11:7d:6f:2e:8c:45:
12:de:0e:b2:88:4a:12:96:2f:1c:ce:c7:a1:79:79:29:79:70:
a3:1a:81:81:49:d6:a3:8d:40:d8:f3:8b:65:7d:31:89:3c:7f:
c8:11:60:69:4a:c5:e3:12:a0:ee:e8:f6:e3:74:61:17:61:a7:
bc:65:81:17:b4:f4:29:8b:f7:05:5f:1f:65:84:7f:56:79:17:
bd:81:ad:01:fa:4f:0f:ed:b7:34:71:da:da:8c:78:d7:65:f9:
69:e4:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:06 2026 by rpki-client