Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: 5s7S1RJZ5rDsV/x6dPZh+Nm/qCaEr7lRJ+Ql5nfCrIQ=
Subject key identifier: 60:D7:AA:5E:75:FA:D2:FD:FF:72:52:83:56:A6:7D:28:B5:19:17:6C
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 019CAAC655B702CB494068421A193BA14D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 01A8
Signing time: Sun 01 Mar 2026 19:00:50 +0000
Manifest this update: Sun 01 Mar 2026 19:00:50 +0000
Manifest next update: Mon 02 Mar 2026 19:00:50 +0000
Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: xKlVXjKRIFhw8ybbGvtqqmTYJKttGVLvaxhtY8elORo=)
2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:55:b7:02:cb:49:40:68:42:1a:19:3b:a1:4d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Mar 1 19:00:50 2026 GMT
Not After : Mar 2 19:00:50 2026 GMT
Subject: CN=60d7aa5e75fad2fdff72528356a67d28b519176c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:3b:21:8d:ec:9a:28:6a:82:2a:0f:55:c7:
51:dc:8a:06:4d:c2:99:1b:20:bc:02:22:3f:1c:76:
6f:58:a7:0d:a9:7c:a5:4c:b7:84:e6:19:fe:77:e4:
5f:c8:20:18:70:19:c8:45:a5:2f:c9:b5:e2:8a:2e:
e4:37:71:ed:5b:b5:2f:7d:d2:c5:45:98:c4:f3:a1:
58:28:6e:6c:5d:0d:10:43:cc:11:b9:ad:eb:63:a9:
44:be:18:51:04:1f:69:10:f7:72:e9:b0:b3:95:a7:
4d:ba:0c:6d:e8:86:cd:32:12:83:21:48:5d:7e:ad:
59:22:be:3a:71:78:71:e1:ff:f5:85:28:c7:cf:6f:
5f:4d:ed:8a:c2:76:85:0b:35:7b:df:68:99:87:ab:
34:32:b1:01:75:04:aa:18:18:39:e8:e6:25:fb:12:
8d:7b:9d:33:00:fc:a7:88:99:81:82:e7:13:c3:69:
ce:fc:db:c1:a2:df:e4:85:c6:73:98:32:40:4e:80:
14:5a:f3:91:c1:81:06:51:ab:7c:14:32:af:7e:14:
e4:1f:eb:22:c7:a9:bb:9c:d4:cb:d9:8c:9c:c2:b7:
47:1c:2b:b0:72:79:6e:d8:f9:83:53:dd:2a:72:44:
d4:7a:e7:3a:d8:c5:ee:29:00:10:2f:80:cf:be:2a:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:AA:5E:75:FA:D2:FD:FF:72:52:83:56:A6:7D:28:B5:19:17:6C
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fa:17:26:24:9a:bc:73:0e:21:c7:c8:01:74:0e:ea:e5:2a:
26:33:9d:97:11:14:06:5c:85:4b:15:45:06:15:8e:51:d7:b4:
2b:30:9c:57:da:84:6b:6f:35:eb:46:33:b3:cc:26:1a:53:76:
92:ce:60:62:3a:27:19:8d:ca:60:fd:2f:3e:fe:09:a0:aa:bf:
74:44:1f:98:ff:09:1d:2f:73:9a:42:9f:f0:d0:07:ed:f2:35:
2e:00:23:ce:ba:9b:2c:4b:f4:d6:a9:63:91:ad:44:3b:9b:24:
87:c2:9e:98:53:6a:7e:06:f6:0b:19:0e:87:d7:0a:f8:e9:1b:
0c:07:a7:57:65:0c:66:07:2c:10:26:2b:25:d1:03:1a:17:0a:
bb:ba:a5:8d:27:fc:e4:61:fd:38:dc:5c:f7:3f:2f:35:55:8b:
2b:17:d9:24:35:e7:48:75:e5:67:ce:ff:bc:0b:52:9e:79:07:
8a:85:d8:6b:e6:d2:19:81:e2:ef:18:fb:1f:82:c9:5b:c1:fb:
23:d8:bc:f5:84:32:a5:04:92:24:81:5d:62:de:8a:4b:2e:27:
93:ae:9e:83:52:6f:33:6f:0a:ca:21:b3:fb:9c:79:1a:ab:7d:
49:bc:be:2e:9b:e8:cb:aa:11:42:3d:b7:5f:a2:9a:98:72:1e:
03:de:2e:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxlW3AstJQGhCGhk7oU1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNDZlZTQ3NTkyNzA0ODA0NWEyZDY2Y2ZiMWM5MjllZGYx
YzU3NzkwHhcNMjYwMzAxMTkwMDUwWhcNMjYwMzAyMTkwMDUwWjAzMTEwLwYDVQQD
Eyg2MGQ3YWE1ZTc1ZmFkMmZkZmY3MjUyODM1NmE2N2QyOGI1MTkxNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCY7IY3smihqgioPVcdR3IoGTcKZ
GyC8AiI/HHZvWKcNqXylTLeE5hn+d+RfyCAYcBnIRaUvybXiii7kN3HtW7UvfdLF
RZjE86FYKG5sXQ0QQ8wRua3rY6lEvhhRBB9pEPdy6bCzladNugxt6IbNMhKDIUhd
fq1ZIr46cXhx4f/1hSjHz29fTe2KwnaFCzV732iZh6s0MrEBdQSqGBg56OYl+xKN
e50zAPyniJmBgucTw2nO/NvBot/khcZzmDJAToAUWvORwYEGUat8FDKvfhTkH+si
x6m7nNTL2YycwrdHHCuwcnlu2PmDU90qckTUeuc62MXuKQAQL4DPviq5vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDXql51+tL9/3JSg1amfSi1GRdsMB8GA1UdIwQY
MBaAFP1G7kdZJwSARaLWbPsckp7fHFd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAt
MjFmMTVlYWY1ZWUwLzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZWVhODQtOWZlNC00Y2JiLWEyNzAtMjFmMTVlYWY1ZWUw
LzEvX1VidVIxa25CSUJGb3Racy14eVNudDhjVjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/oXJiSa
vHMOIcfIAXQO6uUqJjOdlxEUBlyFSxVFBhWOUde0KzCcV9qEa28160Yzs8wmGlN2
ks5gYjonGY3KYP0vPv4JoKq/dEQfmP8JHS9zmkKf8NAH7fI1LgAjzrqbLEv01qlj
ka1EO5skh8KemFNqfgb2CxkOh9cK+OkbDAenV2UMZgcsECYrJdEDGhcKu7qljSf8
5GH9ONxc9z8vNVWLKxfZJDXnSHXlZ87/vAtSnnkHioXYa+bSGYHi7xj7H4LJW8H7
I9i89YQypQSSJIFdYt6KSy4nk66eg1JvM28KyiGz+5x5Gqt9Sby+Lpvoy6oRQj23
X6KamHIeA94uVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:59 2026 by rpki-client