Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: F7PPrer5Pno1zi7ickqsyPog6Ehr+KT62dN13bP6F5U=
Subject key identifier: 38:34:BB:1F:D9:6F:C5:9A:A8:25:CC:F5:04:0A:35:9D:A5:2D:F4:F1
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 019CAC7E2E797B195F16C1DBDF31B953D199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 1382
Signing time: Mon 02 Mar 2026 03:01:16 +0000
Manifest this update: Mon 02 Mar 2026 03:01:16 +0000
Manifest next update: Tue 03 Mar 2026 03:01:16 +0000
Files and hashes: 1: sxmrXu9E-QMmpeBcwLRWCGaEZE4.roa (hash: jY/5S/c8G/l4I3WYZXOjvNoUctwx3/ZjUHeaUP4rQBU=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: d9TZYYb7rS8CPrnQs37wtSgqESO3pxBaDwukeqXLaOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2e:79:7b:19:5f:16:c1:db:df:31:b9:53:d1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Mar 2 03:01:16 2026 GMT
Not After : Mar 3 03:01:16 2026 GMT
Subject: CN=3834bb1fd96fc59aa825ccf5040a359da52df4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:3e:99:b0:e4:81:72:ab:06:80:58:db:3b:
63:6a:8e:04:83:f8:59:7e:38:84:5b:1c:7d:87:13:
c4:19:2e:f9:0a:71:44:e0:2d:23:af:d7:c3:3c:46:
71:49:3b:38:35:05:8e:16:04:ce:ca:68:bd:ed:6f:
b7:c9:9f:a6:77:46:70:91:6b:28:41:e6:8c:0e:2b:
03:2e:76:77:b9:e9:93:f5:81:ad:7b:5b:87:61:a3:
ca:e1:b2:6d:0e:05:21:c9:da:5c:4e:24:7e:ae:06:
5c:c7:27:5e:09:6a:18:1c:2d:e4:df:4a:d5:28:94:
9b:88:7b:b2:60:c5:e5:60:d5:54:93:12:d1:41:87:
b1:b0:db:06:5a:a1:75:b1:84:af:03:0a:d1:e7:c7:
a9:3f:9f:60:7d:47:63:a2:cb:32:0b:4b:38:89:da:
22:18:f6:87:cc:fd:a4:9b:99:78:d3:fb:a7:9b:03:
10:4a:5d:57:8b:02:0e:00:0c:de:fc:2d:fc:aa:3d:
11:ce:e7:01:78:2f:24:85:60:b6:2a:3d:1f:7c:15:
8b:80:31:23:b5:d1:c8:bd:54:74:82:6f:e1:5f:d0:
aa:fb:32:0b:1a:88:8f:ba:00:e4:e9:64:d3:55:4c:
61:3a:7f:08:36:24:0a:fd:a2:14:0f:3f:72:ce:f9:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:BB:1F:D9:6F:C5:9A:A8:25:CC:F5:04:0A:35:9D:A5:2D:F4:F1
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f9:05:4a:8e:08:b0:ef:26:e4:c1:4d:ea:03:c7:70:63:e0:
ca:92:61:bf:96:26:08:8e:de:9f:bb:c6:9d:82:77:9a:35:4b:
95:f0:13:5e:65:3c:a1:d1:bf:48:22:3b:ea:7b:d8:b6:b0:4e:
6b:7c:12:c4:74:17:dc:76:28:50:f3:34:fd:21:e1:54:10:aa:
f5:f5:ee:3c:e2:df:27:bb:92:56:5d:56:de:93:13:70:ff:64:
b4:fb:d3:46:46:38:8d:c9:ed:37:ca:8c:60:14:5f:93:14:7c:
2f:37:b8:94:e8:97:f0:55:be:77:7b:89:12:3f:a2:fe:25:9e:
3b:e7:df:ae:a2:7b:f9:ac:63:0d:7b:84:33:a6:47:cc:4d:f8:
e7:3f:a8:29:e1:30:06:c6:0c:cb:1d:e0:ab:4c:2a:ce:d9:26:
a1:e3:b2:84:bc:c0:82:07:9e:e9:8d:01:4c:24:c9:fe:9a:a5:
1b:29:dd:2f:c0:f5:f3:2f:3f:91:02:19:75:27:b7:78:2a:1f:
df:b7:b5:12:75:09:02:fa:e5:b4:13:8f:66:79:a6:97:b0:1e:
2b:02:17:83:03:d2:7a:f1:65:cb:2b:0e:f9:46:b3:4f:c7:93:
81:94:c9:d2:70:ff:6c:0d:94:b1:49:82:54:40:aa:6b:5f:ec:
11:bd:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:35 2026 by rpki-client