Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: k60inMRZTh/Ii16JH0ILO+ACXfnw6N4iy+kIWfrbQCk=
Subject key identifier: 09:04:B3:EF:1B:BF:86:AB:29:89:A9:CD:4D:F5:EA:A5:46:F9:1E:3D
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 01A10881C89362241F5E3A389C8ECCE26E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 1106
Signing time: Sun 04 Oct 2026 20:01:25 +0000
Manifest this update: Sun 04 Oct 2026 20:01:25 +0000
Manifest next update: Mon 05 Oct 2026 20:01:25 +0000
Files and hashes: 1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: vi7tyTkRK3o0Gx+VK831v/DEmXS/l/VRvX1oMYDAEoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:81:c8:93:62:24:1f:5e:3a:38:9c:8e:cc:e2:6e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Oct 4 20:01:25 2026 GMT
Not After : Oct 5 20:01:25 2026 GMT
Subject: CN=0904b3ef1bbf86ab2989a9cd4df5eaa546f91e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:c3:29:db:05:f2:70:b0:45:c5:23:b8:ac:
72:98:b4:cd:91:a8:6e:6e:4e:c9:41:db:d6:c8:cb:
f5:99:8c:4b:29:f5:cd:50:de:9a:ab:fd:4a:04:1a:
1a:07:74:fb:88:56:6c:f5:98:3a:ac:5e:a5:b4:85:
8d:56:d0:e7:ab:32:88:5c:51:72:37:46:81:bf:da:
42:b3:f0:63:34:9c:fd:d6:c9:e5:35:54:ef:60:29:
72:45:8e:5e:ec:3b:7d:07:25:22:0e:76:99:19:3e:
97:3d:07:95:cf:e4:6a:93:b3:62:ad:a4:a2:f7:8c:
34:77:1e:67:af:85:0e:6e:01:a3:09:04:81:85:f3:
a3:31:9b:90:98:a3:4e:fc:4d:35:21:11:9a:3e:40:
c8:93:5c:74:5a:7c:ef:d4:77:1b:0d:c1:28:cf:6e:
01:34:c7:b1:30:16:be:22:de:e5:e3:81:61:72:bf:
e3:8e:cb:bb:3e:04:49:14:1b:b7:a3:ea:30:dd:a5:
7c:7f:0e:d4:24:bf:e3:f0:a1:29:3e:e1:2b:23:89:
7a:20:78:36:9e:25:2b:7e:f1:54:b1:77:36:45:cb:
a5:a4:24:27:a3:27:c4:31:76:52:b5:74:94:82:35:
b4:43:eb:d8:d7:ac:07:e4:58:1a:b8:12:10:ef:c1:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:B3:EF:1B:BF:86:AB:29:89:A9:CD:4D:F5:EA:A5:46:F9:1E:3D
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d3:ef:05:fa:a5:c6:20:89:ab:36:63:32:4c:29:c4:79:d3:
88:e7:2b:21:94:31:dd:46:14:12:8a:2e:cf:da:93:a8:a2:d3:
2d:31:19:e5:78:4c:45:c4:2a:cf:52:24:56:bc:f0:28:4d:1c:
6e:34:ee:b7:ed:ef:e4:fc:1e:a1:e6:f1:15:0c:2d:b2:c4:fa:
c4:43:3e:6a:a3:6f:6c:1b:89:9f:89:08:d2:c0:55:02:56:b9:
dc:46:ff:09:b3:43:45:fd:e9:1f:4a:76:05:cd:31:16:f9:70:
e5:5e:64:9e:2e:05:96:f3:95:4b:e3:ac:d2:25:5a:0b:89:a9:
cf:ac:9d:5c:a3:d6:6e:a8:11:47:5f:24:b7:80:81:e8:df:eb:
b3:a1:d5:7c:52:13:79:25:47:28:59:71:57:3d:b7:6d:66:4f:
dc:bf:6f:79:75:bb:ea:6c:e8:e0:cb:86:0d:5b:a9:c4:ca:69:
38:1d:eb:90:72:72:32:6a:ca:33:02:5f:37:2b:78:e9:51:1d:
8d:48:31:5d:15:8d:20:af:70:04:de:8d:80:70:f1:32:52:84:
4a:fa:10:fd:1b:ba:e3:e3:e2:4f:21:a9:4a:97:0f:0b:11:62:
22:a6:af:f5:d5:41:0d:50:8d:01:4b:5c:91:60:65:bb:60:1f:
c9:d9:4a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:56:18 2026 by rpki-client