Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier: 4I6CsvNC5P7HzDMM0+pbz58+GI1rHzKJ16PMQIBJxt4=
Subject key identifier: 5F:0B:18:B9:50:14:D2:2A:AC:B6:43:6A:31:B2:9E:63:DF:91:64:B5
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 019CABDA0E04451770888A8CADF7E92005BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number: 0A16
Signing time: Mon 02 Mar 2026 00:02:00 +0000
Manifest this update: Mon 02 Mar 2026 00:02:00 +0000
Manifest next update: Tue 03 Mar 2026 00:02:00 +0000
Files and hashes: 1: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (hash: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0=)
2: MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (hash: b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=)
3: UIXymbU01AcELRK4XQgaDZSENDk.roa (hash: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE=)
4: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (hash: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI=)
5: lhhkdnjbTFcMf_WSQ6Vdc7cUgLg.roa (hash: vPcYoUUrECmWg0bzxsg1BXvUiLIZvalyKunX15L0XGc=)
6: q_YJm9uusZ1gdH6rfgf8d1zvcNE.roa (hash: 7dAiJ/6GQJnXgS5Q7uLwSzG/j868J9jWgDmOCQtKyWM=)
7: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: twS1xTyR60/ceqLecaOtcbMmp3hlSTkk6/3gLJ0UzNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:0e:04:45:17:70:88:8a:8c:ad:f7:e9:20:05:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Mar 2 00:02:00 2026 GMT
Not After : Mar 3 00:02:00 2026 GMT
Subject: CN=5f0b18b95014d22aacb6436a31b29e63df9164b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:29:f4:92:7d:6c:d8:da:fc:c8:c2:c3:e7:
a6:e0:94:60:92:6b:a9:38:22:e4:04:50:90:87:4c:
a2:b1:e2:d8:5f:ea:a1:ce:09:b5:3f:1f:7c:4b:bc:
94:59:10:9e:66:f2:a2:09:ec:36:64:c1:2f:4d:0d:
c7:c9:77:b8:5c:e6:35:e0:3f:56:24:d9:43:c8:7e:
20:8f:53:b5:e7:22:f2:74:d3:7c:cd:68:2d:80:2f:
ee:55:40:39:e9:de:a9:04:4a:d8:9a:d4:68:72:fe:
7b:63:3d:1c:f2:77:cb:1a:0c:7b:b5:aa:2e:a8:da:
53:b1:fc:17:a1:03:f1:80:14:b3:c5:ca:ec:50:b6:
c4:2d:eb:70:c8:ab:cc:b8:c8:f5:92:2c:18:bc:12:
da:4e:83:bb:bb:b0:7b:22:bf:9e:23:04:a6:0a:ff:
d3:c4:77:27:f1:a0:71:ae:67:a5:7f:da:00:3c:47:
53:21:b5:4e:50:c8:81:07:ce:5b:43:2f:26:86:57:
24:8e:f7:cb:69:20:38:98:4b:b7:cb:11:14:9e:3d:
b6:0c:0c:3d:7d:18:a0:72:e5:1d:90:14:2c:27:cc:
7b:11:66:2e:04:6e:76:a4:c5:b3:3c:48:44:f9:41:
e7:35:31:f2:d3:ce:60:c1:bb:76:3a:ad:81:6d:88:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0B:18:B9:50:14:D2:2A:AC:B6:43:6A:31:B2:9E:63:DF:91:64:B5
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f1:65:83:f9:10:2c:3c:0e:1a:76:dc:68:76:d8:ee:49:50:
6d:6b:c9:39:f2:0f:6a:7c:da:a3:ee:32:72:41:7b:d9:f2:23:
14:a8:0a:bc:80:e7:66:c8:92:11:f1:72:40:42:ec:86:77:81:
07:c1:b5:7d:f1:93:b2:bf:67:5d:94:45:0b:c6:d5:c8:f0:00:
6c:0c:77:6f:8f:ba:38:84:22:7f:ce:ba:91:27:fc:07:fb:d2:
e8:1f:50:18:6c:24:23:d3:9e:d7:5b:7a:10:48:66:ec:92:f7:
27:9e:e6:e8:e2:b9:7f:cb:b6:2c:9f:18:74:36:bd:0e:f4:11:
a8:b6:6b:7f:a3:c7:01:dd:e6:80:56:0a:ea:25:fc:ca:d2:7f:
ed:ef:2b:6c:9b:74:09:ab:53:2a:45:41:b6:1d:af:d9:b5:36:
a2:a8:b3:3b:41:08:19:09:2b:f7:78:23:9c:2e:37:6b:84:39:
71:ac:ce:4e:83:ba:d1:cd:f4:cf:91:34:f0:6c:a5:af:db:3a:
72:33:9b:ad:91:77:69:32:7c:23:c5:6a:d0:4a:37:e4:df:b8:
f0:06:fe:36:7f:19:31:7f:d1:22:68:07:bc:cf:ea:e6:61:d0:
12:d1:2f:a9:d4:1e:3a:28:28:c2:6f:71:f5:95:02:03:33:d7:
c1:38:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:53 2026 by rpki-client