Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: 6GgFv6Tr7E2IjTW7yll+6nDsEwSISYR7Q4UcK5EfK0k=
Subject key identifier: 5A:83:96:04:54:00:34:1F:2D:8D:A2:16:E6:8D:33:12:98:42:8A:9A
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 019F92EE077049B1AB47B4A8644A28CCB224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0DA0
Signing time: Fri 24 Jul 2026 07:01:40 +0000
Manifest this update: Fri 24 Jul 2026 07:01:40 +0000
Manifest next update: Sat 25 Jul 2026 07:01:40 +0000
Files and hashes: 1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
2: lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa (hash: E7hSojMc3tDdmz8A/pzP/+XY9Q3UAlYQtQ1nExLgNd8=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: xZWTdBMFOo956esbVpvxOeAEfp+wVfr9nTKYyDxhG0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:07:70:49:b1:ab:47:b4:a8:64:4a:28:cc:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jul 24 07:01:40 2026 GMT
Not After : Jul 25 07:01:40 2026 GMT
Subject: CN=5a8396045400341f2d8da216e68d331298428a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:5d:37:d7:1b:73:8e:cb:90:e0:7b:42:18:
e5:ea:1d:46:69:a4:82:7b:ce:05:ab:fd:43:75:70:
3d:da:72:33:cf:ae:47:79:10:44:32:07:4f:12:e3:
9e:f3:8e:5c:46:2a:59:de:80:3c:f7:01:f0:64:bb:
a5:e2:2e:97:12:c3:3b:0b:18:78:06:65:81:8c:c9:
4e:2a:41:2c:e9:3e:9d:18:88:bc:31:13:d8:24:a4:
ed:84:ff:93:7d:28:21:47:b0:10:fb:a9:1f:bb:1b:
27:cc:1a:aa:a6:09:b9:4e:b4:eb:9a:14:9d:01:7e:
e0:c5:cd:c1:eb:fc:34:2e:c2:37:70:89:61:64:3f:
e6:ef:4e:9d:c8:cd:97:93:f7:61:29:42:f6:9e:20:
f2:37:51:a1:fc:88:06:df:44:b0:71:45:30:e2:ba:
ec:b5:e5:3b:c0:31:2a:69:44:91:aa:05:f6:94:08:
79:1d:74:30:19:b9:b2:a3:9c:85:f8:65:75:48:a7:
76:aa:78:75:7a:db:e1:c1:0c:ea:fb:f6:cf:d0:68:
b4:e0:2e:4f:84:1f:6b:0f:8e:6c:5d:f6:f3:b7:1b:
e4:c9:a1:36:19:d5:7d:ef:9f:da:5b:09:70:56:0f:
ba:28:39:e5:b0:3d:d8:6d:dc:25:a1:a8:51:46:0a:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:96:04:54:00:34:1F:2D:8D:A2:16:E6:8D:33:12:98:42:8A:9A
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a3:8e:82:61:81:11:99:19:81:09:55:fd:76:86:df:a1:20:
ba:84:b2:78:d3:43:20:6b:22:b8:2a:cf:51:f7:64:7d:3e:f9:
e4:30:d9:de:3c:c8:cd:62:16:67:e9:ce:3e:7b:bf:90:e8:15:
a1:a5:b4:96:c2:d0:d6:38:9c:41:1d:83:8d:9f:ae:bd:a1:32:
19:d1:43:25:d8:ef:07:f0:d6:07:ab:3c:0b:37:9f:4b:9c:08:
19:23:c1:f2:65:d2:f7:b0:26:cb:61:92:7a:50:78:e5:d3:27:
50:70:9d:e3:23:70:03:b7:a8:be:d5:4d:41:79:44:f3:a3:62:
39:5e:d5:b6:bf:70:d8:34:00:44:c3:27:26:b3:a5:c7:76:9d:
62:5b:35:27:4f:b9:74:66:28:61:f7:24:d7:b3:ee:8c:59:2b:
7f:a7:bf:ad:28:b5:58:1d:c7:85:27:84:cf:e1:f4:c4:fc:43:
8d:6f:bf:4a:08:a0:46:c3:18:61:82:6b:57:02:11:c9:88:f6:
11:5a:da:45:41:82:95:d6:bd:9b:db:ed:2b:ee:85:79:d8:01:
af:4a:86:fd:58:ec:ad:4f:53:d6:f0:6b:b7:3b:63:3e:78:77:
5c:07:8b:06:6a:d6:89:51:bc:be:7e:1c:31:3d:c9:e1:78:9d:
27:b2:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:58 2026 by rpki-client