Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier: Dir8vuwQdI82HuwACxPB4TSwHsIQ+WVQKotfYS8nnuc=
Subject key identifier: 08:B1:AC:B9:07:71:57:0B:F0:00:7E:EB:BB:48:C8:B8:FD:DD:54:9A
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 019D2772154FFA3AD18106FA302DDE6E97C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number: 0A56
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (hash: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0=)
2: MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (hash: b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=)
3: UIXymbU01AcELRK4XQgaDZSENDk.roa (hash: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE=)
4: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (hash: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI=)
5: lhhkdnjbTFcMf_WSQ6Vdc7cUgLg.roa (hash: vPcYoUUrECmWg0bzxsg1BXvUiLIZvalyKunX15L0XGc=)
6: q_YJm9uusZ1gdH6rfgf8d1zvcNE.roa (hash: 7dAiJ/6GQJnXgS5Q7uLwSzG/j868J9jWgDmOCQtKyWM=)
7: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: krHnGwKgw+YrV0Su8jCVx82sBqkmM1vr+XSUGgzvqZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:15:4f:fa:3a:d1:81:06:fa:30:2d:de:6e:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=08b1acb90771570bf0007eebbb48c8b8fddd549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:d9:32:b9:a9:d1:56:9d:19:69:8d:2c:02:
47:e0:df:b1:a9:df:a6:b0:c4:2f:7a:53:a8:aa:0e:
5c:30:f6:4c:7c:af:60:91:c2:1b:e0:26:76:ff:1b:
8a:e7:e2:6b:29:57:f1:61:5c:b1:37:8c:c9:8e:f3:
de:87:6a:fc:57:a4:42:4e:a6:83:bc:57:45:17:42:
91:ad:9c:c4:2b:6b:61:1c:6c:2e:75:c5:40:c0:70:
a9:a0:c8:e5:09:b7:68:2f:21:14:66:07:58:e7:db:
02:da:10:14:07:7f:1c:1c:49:79:50:76:89:0d:1e:
42:6f:69:8c:b9:d8:01:5b:58:a3:df:d3:0e:18:71:
fb:8d:60:41:d7:78:3a:e7:1a:cb:0e:98:6e:16:21:
a4:1d:1f:47:39:1c:f9:99:0d:22:86:b1:89:19:55:
a3:f9:d0:66:2c:0e:f3:fc:27:6f:f5:3e:57:f2:a4:
94:ba:70:fc:85:22:01:6e:fa:2f:66:5a:8b:cb:3f:
12:3a:3a:00:c7:3b:0c:38:86:3b:ba:c4:15:0c:48:
20:ea:1c:e4:6f:5f:b1:10:bf:af:07:51:8a:5a:f4:
da:d9:24:9e:b4:ad:a0:c2:b0:8e:74:0d:b4:2c:44:
a5:22:ed:a6:3a:51:0a:aa:19:f2:2c:55:05:e9:1a:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:AC:B9:07:71:57:0B:F0:00:7E:EB:BB:48:C8:B8:FD:DD:54:9A
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:17:c7:94:97:60:5a:82:21:78:5d:06:66:2c:03:87:77:81:
7e:51:53:a7:83:f3:4b:68:0f:c9:6a:9c:cd:5e:f9:a8:a7:c8:
b0:07:c4:65:cf:55:ea:f1:80:97:89:44:67:a0:09:6e:1e:10:
ee:7d:7b:41:67:06:2c:15:81:91:8b:52:d6:19:b5:59:17:78:
ee:bc:5b:b1:0b:f3:d3:93:0d:b0:71:70:94:06:a5:aa:51:25:
90:6b:f7:32:b6:6d:70:da:47:79:d6:07:ac:18:d5:b1:77:9e:
9c:46:96:91:65:ad:38:64:9a:59:bf:56:1a:5f:12:9c:fc:5a:
fd:21:21:3c:ad:20:76:a8:d6:82:fc:6d:c5:e7:16:32:ac:71:
1b:a9:d2:28:32:f3:a7:e2:cf:e2:d1:1d:2a:6a:ec:84:a0:3d:
66:09:f5:01:9e:b5:31:4a:8e:4b:59:c8:2e:b3:02:79:41:cb:
b9:ec:2e:49:b2:7d:bc:82:8f:71:43:89:34:8c:de:77:35:d6:
3d:b0:1b:71:4b:e4:1d:46:8b:4e:3b:03:14:b0:aa:27:14:63:
97:52:6c:cd:42:79:8d:3a:d4:71:c8:cf:dc:fb:d0:20:12:e8:
dd:2e:37:ea:42:34:53:38:8f:5c:3b:46:b1:f6:5c:4d:56:6d:
79:59:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:19 2026 by rpki-client