Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
File: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft (raw, json)
Hash identifier: /+HnzNDqAdEiq7tbBmPLb5xAMEue+7hGcLd6529W2E8=
Subject key identifier: 24:07:71:DD:95:6E:F8:C6:36:26:5D:46:94:AA:46:6E:4A:89:E1:FB
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Certificate issuer: /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial: 019CAA582F0D5862D1E701F8512A2B23C720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
Manifest number: 0A11
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 86QdkgX0ZT7S4DNuuHjrGFCh0xA.roa (hash: /zwRSRtTHoD1Z/LaEwVytkEcz+iBaapPIdZRoSCcCHI=)
2: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl (hash: /MWoppokeMzxfeZR0gLYegkOx5R39Fiq0f32hiqU244=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2f:0d:58:62:d1:e7:01:f8:51:2a:2b:23:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=240771dd956ef8c636265d4694aa466e4a89e1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:22:c0:db:58:20:20:e6:d5:d4:af:63:98:
3b:d8:3e:84:ab:1a:81:cc:3d:87:7d:5e:d5:b4:77:
f0:12:25:3e:01:2d:f6:f3:c3:59:f2:06:ca:05:3c:
93:72:5a:39:8f:3a:31:2d:e9:ee:7d:3e:de:a4:71:
d6:96:2b:04:bb:0f:1b:d9:c1:78:26:13:32:c6:b4:
b7:70:3b:4f:c2:aa:0f:23:36:31:a7:5b:a0:b2:08:
c0:ae:d8:8c:6b:df:6c:b4:cf:33:ed:cc:37:7d:40:
9f:53:67:a8:c4:e5:47:01:73:00:29:69:f5:c4:e5:
1e:cc:c6:26:44:28:cb:de:ad:86:75:46:b3:13:23:
b0:57:fd:7b:91:fc:97:2b:94:a2:85:1a:60:9d:7c:
35:ab:f9:50:cf:d9:95:b7:aa:78:4b:59:04:f4:63:
14:1f:d2:f8:c2:91:d1:7a:0e:7f:f6:29:7d:af:5b:
99:ae:73:7f:00:83:98:b5:fb:a2:ad:fc:e3:04:eb:
65:0a:90:44:ea:c4:cc:1d:4f:c6:df:63:eb:cc:52:
d3:3b:04:08:f4:93:e1:8d:3d:9b:f6:e5:ab:70:6c:
a3:99:32:9d:4f:65:d9:47:d0:07:c9:ff:c2:87:a6:
fe:e4:82:c2:c9:50:3c:d1:88:1d:48:da:dd:e7:8d:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:71:DD:95:6E:F8:C6:36:26:5D:46:94:AA:46:6E:4A:89:E1:FB
X509v3 Authority Key Identifier:
keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:37:1d:f3:69:37:eb:ef:08:64:66:8a:c8:53:88:cd:42:36:
8a:59:d8:50:1d:e2:ea:db:70:ce:ed:df:4f:a2:f1:5c:80:f3:
e1:f2:8e:fa:78:02:03:61:fc:9e:9a:93:55:c9:0e:bc:d0:a9:
8c:df:9d:f4:e8:ff:99:c8:33:60:76:5c:bd:13:ea:6b:b1:8d:
52:40:8c:9b:0b:ad:22:a4:95:51:d1:0f:45:f3:97:76:55:ec:
2a:64:87:fe:f8:7f:44:fd:0c:f9:5e:29:0a:69:71:cb:2e:8b:
08:70:99:b2:05:82:2d:8e:f8:eb:b7:f4:f5:99:10:d8:f6:e4:
69:7d:fb:c1:6f:cc:66:94:0a:75:79:f9:cc:5c:f2:d8:41:5d:
93:df:68:9f:34:2d:b7:ee:c5:93:60:3f:b5:a5:b7:aa:5b:65:
fb:f9:5b:fb:8f:6f:16:c5:be:1a:1a:d9:e0:9c:e9:1f:40:9b:
62:52:4c:3b:86:82:71:44:9e:1c:7d:2f:25:b1:22:1a:a1:7a:
81:93:53:09:f1:f5:89:d6:9a:5d:b6:77:66:6f:de:11:e3:43:
9f:a4:4d:04:61:f7:3a:cc:82:b5:dc:9d:f4:30:b0:29:3f:fe:
6e:16:37:50:94:07:d2:f6:3a:6d:2a:4e:d6:ab:4d:c8:5c:68:
ca:1a:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:37 2026 by rpki-client