Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
File: ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft (raw, json)
Hash identifier: xS6yAtIaSQdncnPHNg0ZCTgbEWNQIUhw7vLVSAlmPIY=
Subject key identifier: 72:C2:0E:11:A7:FF:8E:CB:F4:CD:E6:AF:16:6A:59:67:A1:2E:06:C4
Authority key identifier: B9:B3:2A:E0:EE:06:2C:24:26:12:38:D3:97:75:EA:B2:F9:36:30:CB
Certificate issuer: /CN=b9b32ae0ee062c24261238d39775eab2f93630cb
Certificate serial: 01A0D7278759DCF7B3B45A0DAF3C70CBDC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
Manifest number: 0A
Signing time: Fri 25 Sep 2026 06:01:27 +0000
Manifest this update: Fri 25 Sep 2026 06:01:27 +0000
Manifest next update: Sat 26 Sep 2026 06:01:27 +0000
Files and hashes: 1: 6etunUu-k-vz2lC9aY0nGp4qHRo.roa (hash: Xcj36HhW4JTkA8EtBQ1D6q6NkYj4QqBLyLaMy1h66Kg=)
2: ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl (hash: g60fjCmdtAHxu0kHWyGfw+8PIW5WLfbv7IaE9dE9g4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:87:59:dc:f7:b3:b4:5a:0d:af:3c:70:cb:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b32ae0ee062c24261238d39775eab2f93630cb
Validity
Not Before: Sep 25 06:01:27 2026 GMT
Not After : Sep 26 06:01:27 2026 GMT
Subject: CN=72c20e11a7ff8ecbf4cde6af166a5967a12e06c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:7d:e3:ed:43:70:2a:e4:6a:99:91:27:87:
ed:8d:0f:18:74:7a:32:8b:71:cc:14:12:3d:cb:9b:
1b:e1:bf:be:6b:b7:a6:b1:3c:07:79:f1:1a:ee:63:
68:9c:a4:3b:a8:90:94:b7:47:d9:fe:a8:7d:51:02:
50:fd:c5:a9:cf:8c:15:fb:c8:4c:ef:21:15:2e:f3:
e3:1c:3f:a9:6d:f2:d4:44:7d:55:2e:7f:a5:bf:bd:
1f:db:5f:fb:54:72:78:76:d5:b1:7a:5e:fa:3f:34:
5e:d3:cb:d8:d0:ad:e7:30:26:f7:26:dd:01:8f:2a:
10:0a:aa:48:d3:f3:9e:54:2c:52:4d:c9:7c:c2:a1:
ac:bb:0a:66:4d:85:eb:0f:67:6b:84:84:08:8b:f6:
5c:2c:0c:4a:ba:cc:ee:05:25:fa:00:60:ab:aa:35:
38:7a:ac:ba:f6:5e:f8:4a:8f:87:bb:c6:8b:e7:82:
11:bd:aa:b2:d9:14:19:5e:88:cd:ef:e0:c8:c4:ae:
80:e9:29:36:ee:eb:fa:b8:62:5f:77:11:a3:1e:78:
64:47:a3:91:71:2e:09:ce:fe:00:78:01:32:c3:8b:
4a:5a:38:fd:0e:ac:45:46:fb:d5:a5:39:ad:92:73:
1c:6d:8e:8e:6d:3a:22:6b:34:57:61:2c:3c:59:0a:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:0E:11:A7:FF:8E:CB:F4:CD:E6:AF:16:6A:59:67:A1:2E:06:C4
X509v3 Authority Key Identifier:
keyid:B9:B3:2A:E0:EE:06:2C:24:26:12:38:D3:97:75:EA:B2:F9:36:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:2c:ea:6a:ef:de:01:41:83:fd:25:88:92:1e:8d:62:c0:
0e:6e:ca:4e:48:8c:14:08:0a:2d:4e:89:3e:52:8b:f0:10:2a:
eb:2a:8b:66:15:3e:82:55:15:03:a9:56:c0:29:90:bd:81:cb:
12:0f:37:6c:7c:96:1b:a2:0d:3e:a1:fc:dc:cf:ab:3d:23:b7:
1a:0c:2c:07:d4:74:69:6d:74:84:1c:f1:5e:35:a4:ec:f0:ed:
cd:5b:18:a9:0c:ab:7e:60:21:7b:33:98:c0:5c:fd:45:1c:12:
f0:36:c5:9b:be:d1:15:c3:22:cb:ba:01:46:63:3e:c3:48:27:
82:da:e9:69:31:80:af:bd:ea:1f:a5:fc:d0:79:97:3d:d7:a9:
8a:c1:5f:4f:7c:8b:2e:c8:dd:88:3a:69:45:1b:fd:f2:fc:5e:
e5:5e:ce:56:01:f5:33:a9:b5:01:7d:a8:77:06:8c:ae:00:d5:
0d:9f:82:90:c7:d3:94:26:f0:9c:fb:fb:0b:8f:b6:14:71:d5:
8e:a8:d2:d1:29:2e:82:3d:d8:49:57:01:d7:2e:eb:21:a7:39:
2c:0f:18:94:06:a5:36:21:01:d8:3d:ff:83:85:11:32:24:57:
28:48:02:8e:73:04:65:22:16:e0:f1:f4:bd:c8:3c:ec:f0:7a:
99:6f:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:52:15 2026 by rpki-client