Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
File: Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft (raw, json)
Hash identifier: PmP97kks6rgWdU2Ilm25VyRgk/Sozc3Xd4D8BYc4FTE=
Subject key identifier: B3:2F:47:B0:D0:A4:BC:FD:0F:3E:5C:47:73:5A:67:66:8A:29:57:77
Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
Certificate issuer: /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Certificate serial: 019D999939A0FFE1D2CB6EF5407BD69B390B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
Manifest number: 0B7F
Signing time: Fri 17 Apr 2026 04:00:48 +0000
Manifest this update: Fri 17 Apr 2026 04:00:48 +0000
Manifest next update: Sat 18 Apr 2026 04:00:48 +0000
Files and hashes: 1: Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl (hash: 4Z8vSES9MkV5mBHTCG7kWgiya9ZIakAF6TaQ2bVDIuA=)
2: gsWrUBeqM0EhY9FS-NajkLZ-rCk.roa (hash: zszGjcbEnjBUQ9kcf+iql7NUu5G/jl0U+3CAhbnB8b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:39:a0:ff:e1:d2:cb:6e:f5:40:7b:d6:9b:39:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d
Validity
Not Before: Apr 17 04:00:48 2026 GMT
Not After : Apr 18 04:00:48 2026 GMT
Subject: CN=b32f47b0d0a4bcfd0f3e5c47735a67668a295777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a3:ca:15:6e:e9:0c:0b:b4:24:f8:7c:36:7d:
f6:50:0e:60:fa:21:11:ee:f7:38:c3:33:ae:7b:1e:
6d:91:a5:ed:96:78:d5:99:1e:0a:e5:c9:fd:9f:e6:
cf:6b:77:59:28:8a:e4:3c:00:59:b7:5d:76:95:62:
1d:b7:48:c2:42:17:7b:5b:21:1d:c2:ac:61:53:b8:
96:d8:d9:ae:0a:e9:39:75:86:00:6f:c5:e0:af:c7:
dc:66:71:4f:7f:aa:ff:a0:33:b2:68:22:4e:9a:fd:
1e:38:58:f8:f7:91:20:da:51:5d:49:dc:81:09:11:
b1:f7:6a:df:e4:3e:85:54:4f:9a:34:d2:34:69:56:
dc:38:0c:66:c4:8a:b8:22:9e:e2:ee:38:ab:80:ea:
9d:c1:bd:8c:1d:ee:44:2b:5f:5a:d9:c2:48:72:ea:
e0:24:e6:4c:86:6a:9c:43:e1:53:12:44:29:d5:5b:
55:89:bf:43:cb:e8:cd:3b:50:14:3b:00:ab:47:4f:
b0:fc:73:3d:e1:3c:ab:ea:74:7c:83:e7:e3:d5:df:
99:83:9d:d1:81:0e:fc:07:ca:58:fe:40:f1:0d:cf:
cf:b8:51:da:7b:10:a5:b3:d7:05:44:2d:89:3b:fe:
b2:d2:ac:9f:df:b7:26:6d:44:b7:bc:06:34:55:fd:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:47:B0:D0:A4:BC:FD:0F:3E:5C:47:73:5A:67:66:8A:29:57:77
X509v3 Authority Key Identifier:
keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:97:b2:b0:09:df:16:28:82:70:34:23:9d:4f:4e:a9:df:0c:
69:7d:a8:86:01:16:4b:2e:59:db:51:24:bc:c3:a8:d0:42:ee:
a8:6a:26:09:30:ad:65:98:1c:95:4f:27:ca:0f:a0:cd:97:0d:
41:58:d1:a8:00:d4:32:40:11:4a:97:43:f7:f5:0b:d7:40:52:
9a:41:42:b6:d2:bd:2e:1d:44:9d:6c:b2:db:90:17:bf:ba:8b:
56:a8:b4:d0:2f:59:a1:ce:3b:43:af:38:c8:ed:eb:22:b9:7d:
63:f6:83:71:e4:ed:6b:ac:6a:73:32:a6:cd:bc:d8:60:c2:95:
d9:fc:4f:c1:53:92:27:fc:e4:d5:b4:18:f3:8d:56:3b:fe:ae:
65:94:f1:bd:eb:f4:83:0b:67:89:2a:96:3e:47:25:fc:c9:df:
aa:26:e9:98:52:85:b7:a4:0a:9a:bc:d5:ab:08:17:85:b9:25:
de:d4:b8:d4:b7:8b:86:5a:4c:06:79:94:2d:43:36:63:8b:80:
4a:7e:00:23:39:87:e4:43:70:b7:af:9a:63:14:64:aa:db:fe:
05:a8:30:b2:56:41:32:2d:eb:65:2d:61:0a:13:12:ed:bc:93:
a4:a1:27:e9:bc:54:75:00:63:06:a4:53:fe:90:dd:cc:53:f2:
53:e4:21:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:28 2026 by rpki-client