Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
File: ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft (raw, json)
Hash identifier: 2cMAYiCGEAh4lFHgIOCWPhu/naPd1ovLJFrTSZYuiU8=
Subject key identifier: B3:F6:C8:35:6C:2F:5A:62:61:62:5F:75:C3:AB:C1:4B:F2:A8:CA:66
Authority key identifier: B9:B3:2A:E0:EE:06:2C:24:26:12:38:D3:97:75:EA:B2:F9:36:30:CB
Certificate issuer: /CN=b9b32ae0ee062c24261238d39775eab2f93630cb
Certificate serial: 01A1795F27AF7D4FBD777E97891B71631C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
Manifest number: 5E
Signing time: Mon 26 Oct 2026 18:00:41 +0000
Manifest this update: Mon 26 Oct 2026 18:00:41 +0000
Manifest next update: Tue 27 Oct 2026 18:00:41 +0000
Files and hashes: 1: 6etunUu-k-vz2lC9aY0nGp4qHRo.roa (hash: Xcj36HhW4JTkA8EtBQ1D6q6NkYj4QqBLyLaMy1h66Kg=)
2: ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl (hash: 62QKtXgEaeze5Bp1t8s3NIx6bg6xW+MDmVUdzegqmE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5f:27:af:7d:4f:bd:77:7e:97:89:1b:71:63:1c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b32ae0ee062c24261238d39775eab2f93630cb
Validity
Not Before: Oct 26 18:00:41 2026 GMT
Not After : Oct 27 18:00:41 2026 GMT
Subject: CN=b3f6c8356c2f5a6261625f75c3abc14bf2a8ca66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:b5:9f:8f:cb:50:49:aa:c4:d0:d3:02:24:
d9:a2:0e:ad:00:65:fb:4f:f1:ef:90:ca:3e:b4:2a:
14:30:e7:ad:46:53:0a:31:ea:94:06:a7:8e:40:c5:
9f:48:2a:d0:12:a7:8a:aa:34:e8:e2:e0:32:b7:4a:
e2:e1:45:b8:84:9d:fc:dc:fa:83:1f:3d:4a:fd:7e:
ed:5d:e9:81:86:66:28:b4:36:45:43:ba:0f:b9:4e:
bf:53:5f:12:07:5a:f1:53:7c:df:3a:25:83:c8:96:
7b:47:d6:b7:7f:8b:ab:16:b2:18:f1:33:c2:8d:d3:
f2:f7:a7:6c:be:5e:59:38:35:bb:24:e9:68:dc:b9:
b4:02:dc:b3:88:41:b3:d6:04:96:52:8a:98:51:9b:
88:03:d1:53:fd:b4:1c:f1:df:5c:f9:af:e5:f1:84:
33:e1:e6:ef:56:72:d9:41:21:26:2e:26:4c:e2:df:
c4:c3:51:14:c3:df:5b:da:75:71:36:f7:f3:ef:2d:
fb:a7:1b:96:98:ec:b6:00:b7:e0:80:45:73:a4:a0:
52:25:9f:0c:6d:ef:5c:3a:8d:0c:0a:e5:f4:7f:32:
c4:b0:a7:fa:e7:96:f4:13:73:bd:13:42:32:2f:03:
47:5b:06:49:6a:9e:69:34:06:c2:cf:98:65:4c:35:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:C8:35:6C:2F:5A:62:61:62:5F:75:C3:AB:C1:4B:F2:A8:CA:66
X509v3 Authority Key Identifier:
keyid:B9:B3:2A:E0:EE:06:2C:24:26:12:38:D3:97:75:EA:B2:F9:36:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/effb81-0cae-490d-bbbf-356fe5d5c282/1/ubMq4O4GLCQmEjjTl3Xqsvk2MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:53:a0:75:24:84:76:00:79:1c:25:6e:85:7f:19:4e:d6:7c:
d3:b4:d1:68:03:c6:16:f9:6b:eb:14:1c:7d:b4:5a:11:91:c6:
f8:c7:d0:97:3f:30:21:b5:9b:e9:52:75:1a:cb:b6:21:24:ae:
6c:04:7d:d6:87:c7:1b:6d:e8:78:44:14:00:55:5a:c3:27:c7:
93:18:6e:5c:b6:66:99:21:0d:65:34:25:69:d8:e9:54:ec:aa:
ab:5f:a4:44:4f:4a:8a:03:11:73:86:73:68:e8:91:fe:c0:fb:
ec:73:c3:d8:e7:5d:56:5b:73:2f:9d:36:f7:86:67:9d:56:14:
75:86:45:2e:4e:dd:c0:0b:84:84:e2:7e:7d:14:93:9e:38:4d:
e8:53:93:47:2a:93:e4:9c:26:7c:ad:c0:d6:03:4c:e4:45:88:
a5:b0:09:3d:24:8a:12:2a:2b:44:44:f7:20:dd:04:e5:72:d0:
42:91:d4:56:9b:0d:2e:1f:7b:9b:fb:87:30:3f:90:76:3b:55:
a6:cb:a3:f1:99:6a:1e:6e:14:71:57:ab:31:07:f9:f4:2b:e1:
02:4b:08:3f:60:28:af:56:8b:cb:f6:4a:6a:c6:e3:f6:63:b0:
07:cf:47:12:57:64:e2:26:5e:2c:83:18:15:5a:d7:74:3e:23:
e7:c3:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:59 2026 by rpki-client