Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
File: ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft (raw, json)
Hash identifier: 8vpZTNlHM4S0+pqWfE0v7eUSspmSd8m5gnzcxVAEcpg=
Subject key identifier: 3B:76:6A:BC:E9:A1:44:D0:D6:4C:79:A6:B4:43:5C:6A:EA:98:DA:F1
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial: 01A1DF4C497976B2BCD58F0F8261F3BE9E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 13:01:21 +0000
Manifest this update: Sun 15 Nov 2026 13:01:21 +0000
Manifest next update: Mon 16 Nov 2026 13:01:21 +0000
Files and hashes: 1: 0Td6CpG-ym_-K5b4WeUNjXePjUc.roa (hash: 8r4ggp6PxqO1ZrZZe1PjZkrnXadGZdj4c8IAkyVPoI8=)
2: UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa (hash: 1nK47WRZwAvKB9ouMkN1V/iLxMpccr6CTRWd93nbh9I=)
3: VI02z2FHl_uy1YfJADZkMaattiI.roa (hash: iGaV6V98vbELrIXxsPeIiB2rSTsDaubi3a7rszzR+rI=)
4: kq1xYxFloxajo4ocaHFVoXWbLDY.roa (hash: 5lt2etlP+aPgpUw9DddCPVJWXAZYWqwLCkqKVkNEao4=)
5: rnJIlbs2iVDtWflxRJ2ZBYeF__I.roa (hash: YKlhZLI+VkzsmAVmF0CZzBKBT9NCGEV+DX5m19LqsF4=)
6: ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl (hash: MpcWt/6+46x4Mv9hIpDNuAexPigOTUCURAhDGQ5pPx8=)
7: xywtwPVtKI2c3GfGQ6zEtHEmcuk.roa (hash: rjSOo1Wse8hlTDW23Au03BF12xwjNXnRbuXo4liko2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:49:79:76:b2:bc:d5:8f:0f:82:61:f3:be:9e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Validity
Not Before: Nov 15 13:01:21 2026 GMT
Not After : Nov 16 13:01:21 2026 GMT
Subject: CN=3b766abce9a144d0d64c79a6b4435c6aea98daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:2e:00:48:bb:9f:2b:b6:96:60:96:15:24:
ed:93:c5:c6:72:53:c0:6d:17:e6:96:15:fb:2a:56:
76:b1:56:97:09:1c:57:53:01:58:98:ef:b7:29:87:
1b:0e:c7:cf:73:9b:78:87:97:60:9d:8a:09:34:b3:
9f:2c:a8:17:8c:f4:d1:66:c3:4b:bc:da:f8:91:39:
ee:f2:4d:8a:e3:e1:ce:e3:5d:8b:82:95:99:6f:89:
b7:47:40:11:6b:2b:57:6e:32:d4:7f:81:5b:5e:ae:
e1:17:72:7e:3e:cc:71:1e:cf:ab:6a:ea:d9:f5:86:
bb:68:21:c3:39:6a:40:8b:7a:ad:9b:1b:03:e1:a0:
ee:8b:95:d7:c4:92:d6:b8:11:27:06:18:fa:06:bd:
8e:df:54:a5:41:9f:a8:0b:39:74:94:31:3f:94:5b:
15:aa:af:fc:02:9c:42:2b:e8:30:2c:a5:76:d6:bd:
30:4d:36:9c:64:b8:df:f1:70:a8:50:ce:31:28:1a:
2b:13:81:5f:42:74:1d:ee:4d:71:49:9b:14:c8:44:
93:c5:d3:9a:46:29:c5:1d:d2:aa:0b:25:4f:f2:7b:
c7:90:9f:ba:d8:59:76:a0:09:e9:6d:87:d0:60:5e:
22:54:fa:f9:b0:b1:3a:5f:05:44:66:68:42:48:ff:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:6A:BC:E9:A1:44:D0:D6:4C:79:A6:B4:43:5C:6A:EA:98:DA:F1
X509v3 Authority Key Identifier:
keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ba:24:02:65:3d:66:ae:b1:33:cb:d2:91:15:fd:d3:2d:57:
b5:35:fc:61:66:ce:35:92:c2:01:55:41:74:11:2d:32:ea:66:
7e:1b:65:08:ec:07:88:ee:73:51:bd:3a:c5:73:2d:30:4d:71:
30:f9:d3:7d:07:2a:e2:c2:87:06:41:d5:b0:d6:62:26:07:28:
03:e4:9a:43:81:14:d4:a5:65:22:76:fd:f8:65:db:3d:bf:54:
73:30:f9:11:92:a6:fc:24:43:26:13:1b:bc:62:70:5b:10:7e:
3c:14:fb:2e:50:1c:2f:06:2e:ab:c2:5d:3b:da:8e:15:d6:66:
40:60:3e:94:98:b7:b7:a9:0c:f6:24:1a:b1:b9:9f:58:f3:5e:
7c:47:ac:a3:cd:ce:72:27:09:27:a3:6f:8b:ce:36:56:0d:8e:
c7:11:8e:18:9d:6f:3c:11:a3:bf:87:25:ca:13:4c:1a:6a:e1:
ba:45:3e:ee:f1:b1:94:4a:aa:40:0f:dc:5c:d6:ac:6b:7a:81:
67:15:c6:11:74:c2:ce:4a:86:df:47:52:1b:5b:46:51:0b:b7:
00:d3:fa:52:de:99:08:6e:f7:ec:52:32:41:b5:7a:b2:c4:00:
d8:d4:37:f6:56:83:6f:9f:c0:da:6f:45:26:0b:45:82:23:2c:
7c:fb:9d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:22:13 2026 by rpki-client