Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: TA2vIiNzcVUdBoBtvV5k7O1TeZPSC1zoMN63d83wJpY=
Subject key identifier: CE:ED:2A:3B:94:83:49:95:BC:77:B0:25:A5:76:40:9E:0E:47:FE:8D
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 019CAC46BF294D7682152E64DE58176AB30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0EC4
Signing time: Mon 02 Mar 2026 02:00:43 +0000
Manifest this update: Mon 02 Mar 2026 02:00:43 +0000
Manifest next update: Tue 03 Mar 2026 02:00:43 +0000
Files and hashes: 1: aVdPfU4dss32Ry8yMEI__necPPw.roa (hash: dEwEWAPf2LGlFYLBWr0q6EXerCJ3GpMpvQYiCO1t82Q=)
2: i_2ZzMu3wvr5fPJXtrh3ZZ0VWPY.roa (hash: Pv2BiLhGzzZYh+rTS0GF7L9S2emxKMywXwopnvCEbWo=)
3: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: IXCQ0gM5RtMLMgrKzLZNGW4K2lje804CwjY/+8WU4G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bf:29:4d:76:82:15:2e:64:de:58:17:6a:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Mar 2 02:00:43 2026 GMT
Not After : Mar 3 02:00:43 2026 GMT
Subject: CN=ceed2a3b94834995bc77b025a576409e0e47fe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:a2:f8:cd:4c:48:ac:67:a9:ee:5a:4c:86:
41:8b:84:9f:4e:40:20:1a:53:3b:55:75:95:54:f3:
f3:55:e7:33:f9:ff:95:62:53:6e:23:cb:74:89:bb:
2e:a1:81:a9:1a:73:56:31:a0:e8:45:0c:ff:b8:21:
25:5a:46:53:47:eb:23:d2:7f:64:85:b0:c2:12:99:
2d:7b:7c:a4:68:ce:6b:3c:da:7a:da:68:51:0c:75:
32:fa:bb:03:3c:d3:d6:8a:59:24:c2:95:c0:c6:06:
ae:2b:cb:01:cf:07:3c:23:5b:51:48:61:6d:e5:f7:
19:96:2f:94:e3:99:92:3a:5b:f8:54:53:f5:c7:13:
61:e7:43:61:c7:e5:f5:6d:d8:b1:58:10:93:5e:c7:
cc:2a:03:60:ef:62:14:0a:76:91:bd:1f:d9:db:c4:
4f:09:69:21:2f:e9:1a:77:09:61:03:0a:d7:23:8d:
66:2a:e4:60:4d:9a:db:89:58:fb:2a:cb:82:a3:6f:
45:96:15:2e:1d:26:34:ab:e1:92:12:3c:6e:c1:fb:
36:68:7a:d6:3a:e3:74:2c:5a:dd:ad:71:61:8a:db:
4e:83:ad:b1:7c:ff:51:99:38:ab:39:94:33:a6:05:
c8:44:d1:24:9a:b0:a9:78:e5:be:9b:ca:2e:ff:56:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:2A:3B:94:83:49:95:BC:77:B0:25:A5:76:40:9E:0E:47:FE:8D
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:26:43:6b:a9:5a:de:b7:c1:b3:c1:8b:1c:38:16:dd:eb:95:
8f:45:e5:a0:12:65:49:78:f7:35:a2:11:92:c7:16:bc:f7:09:
52:82:df:b8:42:a6:24:76:71:fe:89:ea:29:9b:04:7f:51:03:
25:45:12:65:ad:da:ab:bd:14:99:bd:f7:25:3e:85:83:65:40:
f4:7e:fc:19:05:6c:94:e8:97:43:8d:9f:8a:dd:ae:1e:b7:0a:
cc:cc:8f:b8:5b:22:da:05:4b:e3:f6:12:ba:77:d1:aa:14:f5:
18:62:d1:a6:dd:bd:d8:26:33:b0:ec:0a:fb:f1:77:fb:07:95:
73:a5:d0:2a:df:95:80:aa:a4:cd:f0:1e:ed:71:1e:da:38:7a:
1e:fd:f1:dc:7e:29:19:56:84:1a:cb:cc:24:8b:39:6c:db:b5:
76:44:3f:2e:37:df:ea:d5:f0:4c:04:c0:7b:f3:31:77:d3:18:
ed:5c:74:00:8b:c8:2d:de:21:d8:16:fe:90:3d:36:a0:82:74:
bd:f9:e9:4f:15:cf:20:21:d7:b9:72:11:a5:5a:ff:ed:1e:bf:
df:f1:2d:e8:f6:d2:cc:df:12:51:ee:2e:b2:bf:53:62:f5:42:
4f:07:03:54:5f:8b:30:51:52:79:bb:89:55:ab:9f:09:b3:dc:
66:20:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:18 2026 by rpki-client