Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: QWowbVr0K+LXIpmSe1h6Gq++I5DPoqq5nzYrMQ+Gw3M=
Subject key identifier: 84:33:C5:EB:71:4F:C7:25:49:02:2D:73:F7:5C:27:A4:1A:44:60:27
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 019CABA1E0AC634156DE87855AE63D24D624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 0469
Signing time: Sun 01 Mar 2026 23:00:38 +0000
Manifest this update: Sun 01 Mar 2026 23:00:38 +0000
Manifest next update: Mon 02 Mar 2026 23:00:38 +0000
Files and hashes: 1: T_p7BFSEu2MaqBtsnhljtCR6GqY.roa (hash: FbyU0CKxDGTVudOk7Dftp/zF2aSEdUuIHth2Lxh5jb0=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: v3bQiTyzgtSFF5AggX2k+ALIShtZCZrOz/sJwhJcGIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e0:ac:63:41:56:de:87:85:5a:e6:3d:24:d6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Mar 1 23:00:38 2026 GMT
Not After : Mar 2 23:00:38 2026 GMT
Subject: CN=8433c5eb714fc72549022d73f75c27a41a446027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:44:e1:94:42:f9:02:0d:74:50:3e:ab:2f:
d7:a2:fc:a1:b0:6e:d3:5b:4b:de:0f:d2:fc:00:1e:
9a:58:a6:e7:b6:05:4f:7c:7e:b1:28:ff:fc:09:0d:
0f:62:73:b7:7a:42:24:5d:11:d6:2d:2f:68:e3:36:
66:43:13:f1:db:c2:86:d0:a6:20:37:61:b7:f5:b9:
87:a2:54:8a:1a:95:6f:69:60:a8:5c:79:5a:aa:bf:
99:7f:f9:a9:c2:f5:7b:b2:ba:aa:79:96:3d:0a:58:
df:03:a4:d8:8c:54:36:8c:46:af:87:48:09:a9:71:
a6:ee:3a:22:d5:bd:0e:17:d3:49:ee:1f:6d:a4:cc:
ab:e7:dd:40:b7:51:a3:71:ad:b3:c8:ae:9e:4d:3e:
30:a6:79:1b:a5:a2:66:7b:09:03:e3:c6:26:55:e7:
e3:b7:1b:11:b6:ab:9b:1c:53:12:7e:88:f0:e5:b1:
f5:90:8c:b4:b5:01:72:49:23:0e:a4:4d:4c:7d:c3:
f9:75:be:61:15:16:eb:43:90:59:62:87:b8:3b:c6:
7b:c6:2d:55:c4:d0:24:28:73:dd:53:92:c0:5a:10:
07:6f:f6:f3:f3:06:41:01:ca:4a:9e:e0:e9:af:16:
79:d4:05:1c:df:3f:a6:e6:32:c4:0d:3a:43:fe:fa:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:C5:EB:71:4F:C7:25:49:02:2D:73:F7:5C:27:A4:1A:44:60:27
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:75:48:62:88:78:41:43:12:ff:88:0e:41:4d:64:6b:b9:
b6:58:8f:3b:9f:53:e0:b9:e1:b5:4c:35:35:bc:1d:62:40:0f:
9d:67:a3:e9:6f:9c:c1:a2:97:25:98:de:9f:fd:61:51:2a:c5:
0e:b8:bb:c7:ff:05:e5:30:00:9f:6c:92:60:6d:04:31:38:e4:
04:fa:19:61:e2:b6:cd:be:a1:9d:18:69:d4:93:4a:fc:97:7c:
9c:9c:82:cb:40:c7:71:7d:0d:32:9b:92:f3:4b:ea:27:9f:26:
bf:22:12:98:f9:3c:8d:18:f3:40:e0:22:9f:eb:4b:e6:80:76:
3f:b8:d5:c1:12:1b:95:0d:c5:96:9f:56:ea:9c:ad:d2:cc:16:
83:c7:09:d2:2f:69:cb:ad:df:7e:ef:f3:7a:86:c3:9f:f5:fe:
e2:49:ab:35:e4:6f:7d:bc:f3:68:bd:5e:3a:f2:27:9c:e2:4d:
e5:e2:41:67:4d:05:ee:b7:7c:0a:e9:5d:32:8d:6f:eb:db:50:
a1:68:ae:5e:20:1c:73:a9:6b:55:69:31:b6:6f:5d:70:6a:bd:
6b:75:dc:69:01:1b:e9:98:41:28:d8:e3:a2:3f:13:b4:59:1e:
2f:6b:3d:2c:32:53:87:81:5e:ae:ec:39:c9:f6:af:2b:4f:f1:
60:12:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:19 2026 by rpki-client