Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier: ZnPR4c7WK+VwTt311p4QHi+hE6XT+kNW3U08cuHRo24=
Subject key identifier: C3:8E:5C:F6:ED:EE:E5:94:03:63:58:ED:0A:F6:3B:05:6B:AC:12:34
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 019CA9EB24FA914B9E9D80D18CBD0EA8B6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number: 0BB3
Signing time: Sun 01 Mar 2026 15:01:25 +0000
Manifest this update: Sun 01 Mar 2026 15:01:25 +0000
Manifest next update: Mon 02 Mar 2026 15:01:25 +0000
Files and hashes: 1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: ipI6X8c+Pt4/qwP/Cxs2m1ISfeeYIYlRrw88otayW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:24:fa:91:4b:9e:9d:80:d1:8c:bd:0e:a8:b6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Mar 1 15:01:25 2026 GMT
Not After : Mar 2 15:01:25 2026 GMT
Subject: CN=c38e5cf6edeee594036358ed0af63b056bac1234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:8f:7c:48:3e:17:80:3a:e8:00:10:75:67:
cc:76:af:30:f6:a3:09:1f:a3:30:96:3c:de:39:c5:
6d:e9:8f:09:90:44:cd:29:3c:4b:bd:cf:d5:3d:2b:
75:b4:a3:bf:7a:20:4b:3d:82:23:3a:0b:86:9d:ad:
53:93:2a:18:c5:2f:5c:00:9f:86:f4:d7:78:c0:04:
3e:02:60:1c:0d:8f:0b:e6:06:d2:dc:bb:95:ca:87:
0c:2c:fc:f5:f6:01:19:84:ef:24:81:40:61:72:86:
fe:1c:67:6d:5c:54:21:03:4e:9f:0d:c5:21:df:99:
01:a4:06:07:94:5e:4b:b9:ad:bf:8c:fb:c2:cc:b2:
60:8e:e5:ee:e5:82:ad:79:b4:a8:0e:9d:03:87:99:
90:12:de:ea:d8:f7:b0:e2:ff:20:ed:f9:48:40:bb:
14:b1:e5:af:7a:73:27:cb:7f:b3:fe:11:3d:3f:e7:
27:ef:43:3f:d3:b3:c2:c0:04:00:d5:27:eb:2e:33:
0c:17:b9:41:80:67:5b:80:d1:4c:d4:2f:39:ba:e5:
9a:47:c3:ed:17:8e:bd:07:cc:f6:0a:cc:1a:63:82:
7a:cf:d8:47:23:32:ea:cf:dc:ff:5c:cc:79:0a:8f:
78:7b:ff:c0:93:6d:bb:75:61:f5:ed:2a:ee:31:9b:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:5C:F6:ED:EE:E5:94:03:63:58:ED:0A:F6:3B:05:6B:AC:12:34
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:d6:f5:af:b2:c7:dc:6d:1c:1e:ba:d2:86:5f:36:16:f4:
21:7c:27:56:e6:81:db:f6:eb:63:1a:9f:f2:9d:77:69:f2:f9:
15:7d:98:09:94:9a:97:b9:fa:ea:39:99:57:24:62:3c:24:71:
1a:74:43:9e:a3:1e:b8:08:7d:5b:fa:d4:44:6d:5f:2b:48:44:
a9:72:aa:1c:2e:42:f0:35:65:d7:d8:5a:c0:ab:df:7a:39:d3:
89:f9:46:39:36:2e:b4:5c:41:a2:c9:f6:53:0f:74:79:2d:85:
24:3e:6a:72:71:65:a1:d5:82:db:c0:03:3c:9f:ab:c1:b4:44:
f6:28:33:0e:ff:e9:aa:96:b5:87:10:4b:04:85:53:6f:7e:77:
15:23:0c:d4:13:87:7e:07:9b:fd:47:55:83:25:28:b3:5d:b9:
01:c5:70:f8:9d:f7:be:6f:3d:1d:14:b0:56:a8:c3:6e:62:26:
24:4d:82:84:88:2f:70:ff:75:c4:65:b2:35:82:fd:b9:28:1c:
f5:c9:84:aa:e7:bf:df:06:9e:94:f4:b0:d4:64:0c:43:1b:da:
29:68:f6:c1:7a:ab:c7:8b:44:35:a8:2e:ea:34:d6:3b:d9:98:
e2:be:07:97:08:6c:0e:1d:50:fa:15:15:33:1e:36:01:a9:e3:
52:35:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:57 2026 by rpki-client