Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File: ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier: 0aPY3tQ5Ysk6CruUk68g6terq+LXy2MN5QuO54/BzpE=
Subject key identifier: 93:43:AB:73:25:70:DD:15:E0:6E:7F:A2:FA:88:EA:D8:35:08:89:F6
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial: 019D9962D124FC30881217AD68AAEC32AAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number: 0A91
Signing time: Fri 17 Apr 2026 03:01:23 +0000
Manifest this update: Fri 17 Apr 2026 03:01:23 +0000
Manifest next update: Sat 18 Apr 2026 03:01:23 +0000
Files and hashes: 1: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (hash: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0=)
2: MY0oyyxJxhBaxV6e35Jj6RwVRN4.roa (hash: b5AkjRiP8AjbeAnZmdI+p2iRLfqlwKytew/Xvvx0yg0=)
3: UIXymbU01AcELRK4XQgaDZSENDk.roa (hash: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE=)
4: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (hash: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI=)
5: lhhkdnjbTFcMf_WSQ6Vdc7cUgLg.roa (hash: vPcYoUUrECmWg0bzxsg1BXvUiLIZvalyKunX15L0XGc=)
6: q_YJm9uusZ1gdH6rfgf8d1zvcNE.roa (hash: 7dAiJ/6GQJnXgS5Q7uLwSzG/j868J9jWgDmOCQtKyWM=)
7: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: yglnDwYYI4awHnFE2fPHs3QTARPfXYtT+suMCaGVhq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d1:24:fc:30:88:12:17:ad:68:aa:ec:32:aa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Validity
Not Before: Apr 17 03:01:23 2026 GMT
Not After : Apr 18 03:01:23 2026 GMT
Subject: CN=9343ab732570dd15e06e7fa2fa88ead8350889f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:0e:17:9c:c7:fe:7a:05:e1:18:5c:a7:bb:
b8:a3:01:32:87:df:02:84:3e:c3:1e:f3:ab:11:be:
9a:4b:1c:f1:2d:57:ff:25:2f:11:cf:4f:92:e2:96:
18:8e:41:b2:2f:73:1c:99:6c:46:4e:b5:26:08:33:
61:94:d1:99:9e:6f:1a:0d:c2:17:80:3e:eb:99:7f:
50:1b:b7:12:13:cd:b4:96:07:7d:82:6a:33:73:84:
4e:4a:07:9a:95:a7:1e:05:b3:6b:a8:aa:ad:93:87:
14:b5:16:9f:60:04:a6:0d:e2:4b:83:0a:23:01:1d:
d4:c6:2c:54:0d:b1:c4:75:e4:3a:1a:62:f8:be:18:
7c:e1:b6:cc:6c:2e:cf:04:90:35:0a:40:e3:a2:c7:
04:7e:6e:e8:8b:fe:75:c1:46:fb:bb:93:80:6b:14:
38:01:70:7d:52:3e:cc:74:67:fb:83:73:19:c9:40:
88:3e:ac:00:9b:31:0e:e9:7e:af:2e:95:3e:4d:bc:
29:94:0a:65:29:23:8d:64:0d:1c:24:bf:19:4a:38:
97:3a:21:6c:6c:87:ec:25:ab:29:c5:eb:a5:a9:d8:
42:bc:71:97:2c:f5:66:3c:a9:1a:9c:3f:b6:59:99:
74:21:bd:b2:bc:f5:16:14:53:8b:5e:96:e7:60:d6:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:43:AB:73:25:70:DD:15:E0:6E:7F:A2:FA:88:EA:D8:35:08:89:F6
X509v3 Authority Key Identifier:
keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:95:51:90:e3:07:2a:db:83:6b:9f:7e:61:7d:0b:b5:e2:
bc:63:32:4a:f7:0e:0b:57:a6:fe:9a:69:3d:92:83:26:4c:ef:
78:66:7b:4e:dd:c0:67:b9:03:77:70:31:0c:5d:8d:cf:8d:73:
a7:f4:17:fb:be:85:b3:89:c3:58:fb:ff:81:03:2b:5b:8b:d3:
49:ee:e2:ac:c6:33:e5:0b:84:1e:9e:7d:77:16:d0:10:b2:25:
75:52:29:7e:e4:56:c4:39:db:bb:ae:8e:95:d1:ba:56:66:15:
fb:90:59:3c:41:55:91:01:fa:83:8c:7a:55:9e:18:a1:69:81:
35:d4:35:b6:64:90:2c:c1:ae:9d:96:2c:8c:ee:e1:18:dc:6b:
dd:71:62:c2:86:a4:1c:9a:44:0b:89:2a:2f:c0:61:c2:89:5f:
70:4b:70:af:c7:5f:cf:ab:2c:c8:12:ca:b4:cc:d2:8a:d8:85:
39:ae:0c:39:65:27:e2:12:e5:02:76:f6:10:a8:2a:fa:e4:b4:
f1:05:57:51:ba:0f:a1:df:fc:76:ef:89:22:2c:46:ac:a6:b3:
b3:ad:f3:25:92:50:9b:5c:b9:5a:8e:a3:42:02:bf:3d:06:a0:
91:6e:42:6e:cb:21:72:17:42:36:04:b5:c1:e1:f7:32:42:2b:
f4:3d:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:05 2026 by rpki-client