Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File: Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier: djSNuGQrXl7pEl/agBEPFc4tw+Ji3Zu1nAAQQjLJ1h8=
Subject key identifier: 8F:F9:70:B1:D6:12:D8:8B:1B:D6:CA:7E:A2:B7:6D:C8:F2:84:82:C5
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer: /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial: 019CAA21A20191D16EBA39FA771A1719391A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number: 0B03
Signing time: Sun 01 Mar 2026 16:00:56 +0000
Manifest this update: Sun 01 Mar 2026 16:00:56 +0000
Manifest next update: Mon 02 Mar 2026 16:00:56 +0000
Files and hashes: 1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: Ed9fmRC3StQDHeuuT2r/gfSXZRa9fwiAHx1UFJ7oiIw=)
2: gsWrUBeqM0EhY9FS-NajkLZ-rCk.roa (hash: zszGjcbEnjBUQ9kcf+iql7NUu5G/jl0U+3CAhbnB8b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a2:01:91:d1:6e:ba:39:fa:77:1a:17:19:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Validity
Not Before: Mar 1 16:00:56 2026 GMT
Not After : Mar 2 16:00:56 2026 GMT
Subject: CN=8ff970b1d612d88b1bd6ca7ea2b76dc8f28482c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:7a:72:29:cc:13:6f:68:e9:f9:5e:71:56:
52:80:78:b9:b3:5e:84:b9:95:ac:aa:b8:08:ae:9b:
53:1f:d7:dd:46:ac:48:bd:3a:da:fb:9b:2c:eb:37:
a4:2e:62:72:b0:3c:ce:db:8c:f3:ad:b8:45:98:34:
00:73:d2:7a:26:0d:80:52:33:2e:7f:ad:46:3c:ec:
bc:38:0b:96:5a:6c:d4:b5:5a:38:39:ff:2d:1c:5a:
60:ff:e3:fc:10:93:3c:84:6e:e4:54:f5:48:d9:80:
b0:d1:d3:6b:dd:12:bc:cc:e2:aa:f9:00:4f:90:7f:
5b:61:b1:a2:70:17:8b:7e:ea:3d:fc:a8:4b:48:a8:
77:cc:6f:19:8c:8b:b7:6a:41:bd:eb:d7:d3:d9:5d:
d2:7a:3a:6c:a2:51:29:c2:7b:e7:29:d2:b4:a4:7c:
94:c2:bb:6e:ec:0c:5d:0b:45:70:d0:8b:32:8b:37:
63:58:15:26:eb:12:f5:ba:82:83:18:d6:63:f9:60:
77:57:71:be:0d:dc:6e:48:85:bc:1c:dc:6b:c4:6f:
f5:19:c7:f2:08:96:60:94:e8:0d:e4:c4:45:c4:f4:
72:d4:f6:1c:07:51:a4:1d:c7:ae:f8:5b:1c:7d:68:
9d:63:a5:56:08:ce:0e:3a:15:dd:f8:db:af:a6:6a:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:70:B1:D6:12:D8:8B:1B:D6:CA:7E:A2:B7:6D:C8:F2:84:82:C5
X509v3 Authority Key Identifier:
keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c2:75:a4:49:0e:0e:37:80:8e:35:7b:05:9f:ef:59:0f:98:
28:77:e1:bf:00:93:39:5b:f6:0e:5f:a0:30:71:4c:58:c7:8d:
d5:b7:74:64:b6:f2:c3:e1:7b:c5:13:df:45:78:f6:0f:80:56:
57:b9:3a:e9:31:4f:5e:ed:a4:cf:2e:25:d9:b1:e1:e4:49:3a:
9f:7c:5b:91:47:ca:a4:e1:31:12:64:5d:5d:70:2a:3c:19:da:
c7:ac:14:c1:29:ff:60:e4:e9:e4:8b:7f:b4:2f:50:cf:48:db:
65:43:f6:30:64:ec:b6:73:36:37:69:a3:7d:1e:6f:8e:99:ac:
3d:71:d3:1f:1e:f3:0e:3e:1d:a0:0b:ad:bb:fa:7f:ca:48:2c:
2d:17:00:df:09:17:70:96:97:a3:c7:80:cd:2d:4b:21:b9:5d:
92:ff:d8:ce:3a:e0:1d:02:ad:74:1f:95:ff:8d:bc:5a:35:f3:
39:26:b6:ff:63:81:68:ae:b0:9c:c6:6e:4f:1d:71:88:66:10:
31:b1:5a:69:46:e7:f3:2e:f8:46:99:cd:a7:48:b5:09:3b:29:
7f:e4:83:54:0b:4f:19:bb:fd:1e:20:ef:2b:ac:3c:36:ba:82:
fd:b8:20:73:76:de:45:50:3b:b9:f0:cb:69:ab:92:d2:f5:d5:
f6:ee:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:06 2026 by rpki-client