Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: F6HivLLeqZ8vSMcQW3kaZmZppL0PBANkBXjXok6Djn8=
Subject key identifier: 2A:F9:38:67:F5:42:A1:18:AA:C8:B8:C0:1E:DE:0E:E5:93:00:3C:35
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 019D2BF36FA0852F21DC0B112F6A1DC6E8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 13C4
Signing time: Thu 26 Mar 2026 21:01:07 +0000
Manifest this update: Thu 26 Mar 2026 21:01:07 +0000
Manifest next update: Fri 27 Mar 2026 21:01:07 +0000
Files and hashes: 1: sxmrXu9E-QMmpeBcwLRWCGaEZE4.roa (hash: jY/5S/c8G/l4I3WYZXOjvNoUctwx3/ZjUHeaUP4rQBU=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: PGC49stbq8Sib1lB5i+hHDMv6qKLKrcVPKJl50zUgBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:6f:a0:85:2f:21:dc:0b:11:2f:6a:1d:c6:e8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Mar 26 21:01:07 2026 GMT
Not After : Mar 27 21:01:07 2026 GMT
Subject: CN=2af93867f542a118aac8b8c01ede0ee593003c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:c0:f7:f3:d0:0a:7a:b3:53:76:c1:e4:53:
f9:95:21:89:7e:b4:5a:c1:8c:ec:0a:2e:39:e3:70:
a7:2d:73:7e:48:98:98:d0:da:fa:c5:fb:e3:14:b3:
56:c2:e6:d5:11:fd:81:3a:75:b5:3a:78:48:4c:09:
1f:f1:79:97:67:b8:8d:fd:93:e7:9b:13:ee:7d:d6:
f2:7f:a4:29:dc:81:32:71:72:17:f8:7b:e1:83:bc:
1c:d5:5f:8f:54:5e:9d:7d:e3:19:75:4c:b0:9b:af:
8e:4c:76:f6:cb:9f:e3:c1:27:f9:51:39:52:79:bc:
ef:99:15:58:d7:07:89:ae:9a:62:5d:ab:aa:f6:a3:
d2:8c:5a:53:58:77:25:4e:11:bb:2c:0b:10:28:86:
9a:13:ec:68:5c:82:1e:84:00:d6:9e:91:86:98:07:
67:1c:c3:64:38:07:49:b2:e7:59:99:e6:41:f8:f3:
a8:f1:92:4a:f8:d2:ec:c9:f2:78:1b:16:5e:d0:b1:
77:c3:f8:e8:13:ea:d5:42:5c:80:b2:35:c2:26:55:
49:45:d3:56:ea:68:c6:bb:32:77:0f:38:02:1c:be:
96:26:fa:97:20:60:0e:60:49:ec:55:04:b3:4d:fb:
60:34:78:88:24:88:47:a0:77:2d:b9:47:55:b8:27:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:38:67:F5:42:A1:18:AA:C8:B8:C0:1E:DE:0E:E5:93:00:3C:35
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:64:19:34:8d:c2:6a:ba:7e:42:14:6e:d5:44:c9:b2:21:21:
bc:1c:2d:a1:a5:1e:1a:4e:46:b4:59:c3:93:10:13:57:3c:fb:
86:22:75:b3:08:0c:d6:26:5e:7d:a7:ee:fb:00:71:c5:58:15:
34:76:14:a4:1f:60:9e:d5:dd:a2:26:26:bb:d8:82:dc:07:5c:
68:ac:32:c6:df:d5:30:f4:75:90:95:57:c9:f1:ec:4f:09:96:
4b:24:c6:d2:41:31:f1:34:08:d2:16:61:aa:c5:45:41:f0:0f:
4c:5c:80:a9:bb:57:a6:43:62:87:32:fd:b7:34:85:03:87:e0:
e0:07:8f:ad:87:11:8f:63:d3:78:77:08:6d:c8:b3:5a:61:d0:
49:49:4c:54:2d:5f:64:8d:b1:e4:38:a1:91:23:69:d3:b9:e5:
d9:79:dc:bd:3d:9b:39:fa:11:51:04:06:a8:3e:2a:b9:ad:9c:
5f:d0:09:85:7d:56:c5:a7:9b:23:a1:c2:a2:ec:0d:10:d2:67:
88:da:de:df:1a:78:fc:77:71:07:ba:b2:8d:af:60:72:1d:4e:
2d:10:67:32:6a:da:08:91:fa:3b:78:81:a2:e1:fd:02:6a:43:
6d:5f:97:2d:93:21:75:da:56:79:0d:8a:22:41:8a:a1:75:7c:
31:e5:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:49:59 2026 by rpki-client