Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: xtx2QCRvLwAEwI3y/2n+eF2owLjLAoncppQXhxu+udg=
Subject key identifier: 31:F3:A4:30:BB:D7:F9:46:22:72:3B:D5:2A:6C:3D:55:93:8D:57:17
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 01A08C0DB501F417BEDE169B8A612EA2ACB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0E21
Signing time: Thu 10 Sep 2026 16:01:43 +0000
Manifest this update: Thu 10 Sep 2026 16:01:43 +0000
Manifest next update: Fri 11 Sep 2026 16:01:43 +0000
Files and hashes: 1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
2: lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa (hash: E7hSojMc3tDdmz8A/pzP/+XY9Q3UAlYQtQ1nExLgNd8=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: 3oltRqSmxojrUqK3xB460ASrhewtb2KEVVFeopB6SKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:b5:01:f4:17:be:de:16:9b:8a:61:2e:a2:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Sep 10 16:01:43 2026 GMT
Not After : Sep 11 16:01:43 2026 GMT
Subject: CN=31f3a430bbd7f94622723bd52a6c3d55938d5717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:11:64:0b:b1:f4:9b:33:78:1c:b2:8f:79:
ef:43:5e:ad:a0:90:67:a6:15:f3:a3:12:5f:c9:fa:
05:50:62:87:05:ee:3d:be:72:6a:b4:e0:9d:49:40:
40:6c:90:cc:34:fe:b0:a8:30:d1:e5:ba:a4:32:45:
65:15:ca:ca:e4:a0:9f:f1:8c:3d:2a:d5:24:e2:03:
01:c0:c5:a7:63:51:ac:fa:71:9f:73:49:4e:27:ed:
59:8f:71:7e:e3:51:52:c7:3b:98:cc:ef:c0:d1:c0:
93:3e:ec:aa:58:6f:c5:91:a7:06:be:e5:1b:c8:2c:
a9:ab:6e:36:09:f7:97:e8:55:b0:99:9a:27:06:57:
10:63:05:99:08:17:c4:94:ea:60:28:e0:91:dd:86:
dc:43:dd:74:dd:d4:47:b5:c6:e5:f6:12:28:85:a9:
93:4a:ae:a2:eb:6b:88:e8:c2:16:50:07:24:fe:0e:
da:02:6e:45:3f:dd:8a:b3:c4:0d:84:5f:28:37:f2:
1b:6c:e5:5c:2f:4e:42:fa:50:cb:7d:a8:9e:01:e1:
90:69:a2:77:34:7a:ed:ab:72:3b:16:fb:4b:46:aa:
87:67:e3:46:d8:3e:ab:8b:df:15:ff:ef:2c:62:04:
7a:93:8c:5c:1b:48:60:68:77:fe:22:94:db:f4:4e:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:A4:30:BB:D7:F9:46:22:72:3B:D5:2A:6C:3D:55:93:8D:57:17
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2b:df:61:20:5b:df:d9:7a:0b:d7:a5:47:33:97:99:2e:24:
47:21:44:fb:38:05:8b:0a:52:57:f1:ac:00:08:90:df:aa:c2:
0b:f5:7e:70:2e:33:6a:ca:93:91:f6:9b:8d:07:8a:1c:4f:7d:
ea:96:e8:ef:7a:63:2d:e2:ce:18:01:2f:a2:39:f2:4d:d4:4b:
3f:0b:f8:68:79:c8:1b:2d:14:08:92:d9:89:56:56:54:88:67:
9e:86:52:54:e8:a6:86:4e:cb:c6:c8:d6:af:b6:45:5d:ed:fa:
70:aa:bf:b9:d7:9a:76:7a:49:7b:f5:80:7d:c3:e2:83:fc:23:
99:2a:9f:13:97:f5:f1:4e:83:f0:92:66:43:a0:4c:9c:dd:84:
39:fc:3d:ea:18:6f:5f:0b:6a:52:a5:73:6b:db:9a:68:08:18:
e9:d1:43:ad:fb:09:1d:62:0e:5c:a9:ca:17:d2:ac:0e:82:2a:
73:41:a4:e3:62:36:ad:a5:da:64:66:75:39:85:90:c9:fc:89:
1b:58:be:e3:54:d8:8f:71:99:ff:46:4f:56:13:42:d5:53:7b:
0c:23:43:67:11:69:6a:dc:54:9e:d0:12:dc:4c:02:df:7d:3a:
bc:81:79:d4:61:92:e8:e9:65:16:fb:70:47:ef:91:2d:b4:24:
37:da:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:06 2026 by rpki-client