Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: rhs40I0zTKiPL3PQwdKANa38ZxUxibMNDxBo+B6pdwI=
Subject key identifier: 43:15:D9:1E:58:19:83:74:65:77:68:2F:6C:0D:3B:7A:C3:3C:F7:CA
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 01A17B848475632D4736525CB54BF4A6FC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0E9D
Signing time: Tue 27 Oct 2026 04:00:44 +0000
Manifest this update: Tue 27 Oct 2026 04:00:44 +0000
Manifest next update: Wed 28 Oct 2026 04:00:44 +0000
Files and hashes: 1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
2: lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa (hash: E7hSojMc3tDdmz8A/pzP/+XY9Q3UAlYQtQ1nExLgNd8=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: Iiwc/u7V5zIzW6gyqb8/Ed3m0Ff9hERZ0bl0biac3Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:84:75:63:2d:47:36:52:5c:b5:4b:f4:a6:fc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Oct 27 04:00:44 2026 GMT
Not After : Oct 28 04:00:44 2026 GMT
Subject: CN=4315d91e581983746577682f6c0d3b7ac33cf7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:9b:b1:b9:03:4a:01:4c:b8:d2:2b:60:7a:
be:76:71:3a:7e:e7:99:8e:68:c6:83:38:c2:5d:01:
58:08:b6:0a:79:0c:76:d3:f6:05:4c:c8:c3:94:02:
5b:07:43:a2:60:8e:60:8d:b2:15:48:c8:19:2b:63:
63:b9:bf:94:9b:68:6c:45:b2:c6:e0:ca:b8:16:b9:
01:41:64:cd:13:1b:84:8f:27:dc:04:a2:4a:12:fe:
c5:f9:3b:96:c7:ea:41:a8:2e:0d:2b:42:35:82:ab:
1d:ab:8a:3b:3c:25:69:29:14:15:f4:e8:b7:fe:c0:
f7:cf:90:74:a8:e4:d5:c4:d5:4c:47:32:f0:b4:39:
f4:73:dc:4b:77:1d:73:05:62:48:30:94:d2:ca:f7:
bd:5d:ed:fa:06:b0:cb:82:ec:13:6c:7a:79:5d:ff:
6b:91:d4:fc:0e:8b:85:fe:c6:42:80:57:ca:99:f4:
ac:f0:06:60:0b:13:24:20:e4:f6:91:83:8d:c4:6d:
fd:a2:2a:09:f5:c7:8a:62:26:c0:45:d3:8e:05:d6:
c6:95:39:18:b5:90:da:0a:11:9f:a1:35:0b:58:d4:
67:02:fc:ab:ef:b2:5d:bd:25:64:40:ee:1a:0c:a9:
8b:b0:84:d5:72:79:56:6a:1a:6d:e2:f9:1f:66:46:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:15:D9:1E:58:19:83:74:65:77:68:2F:6C:0D:3B:7A:C3:3C:F7:CA
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:de:ce:2e:2d:ea:d7:8e:e1:5f:df:e0:9b:fb:c3:1f:c4:c6:
57:83:96:a2:37:b0:86:87:37:c4:a6:63:b5:dc:f5:23:a7:17:
cb:14:d4:e4:da:d9:d3:1e:c0:cd:17:65:b0:1e:17:00:1a:27:
3e:6a:81:e4:ba:d6:6f:47:e7:0c:9e:ba:b4:e1:d9:8b:ca:83:
46:db:0d:32:9a:3e:d7:f7:a5:80:ed:7c:9f:06:49:67:f6:85:
35:df:ca:8e:51:70:20:ad:28:57:c7:40:40:9a:01:a8:c3:7d:
6c:34:ac:ac:1a:e9:99:9e:58:8d:53:17:f0:e0:94:8d:dd:dd:
80:9f:02:66:aa:2f:95:ab:c8:95:25:33:79:18:33:d4:ef:02:
c8:15:43:05:ad:83:9a:dd:5a:f5:a8:2a:4e:98:99:53:48:25:
6d:11:82:34:87:27:40:fe:51:8c:e4:8c:28:2b:93:3b:6e:f8:
fc:8b:40:34:89:da:03:f0:46:b5:0b:f7:91:23:be:63:ae:74:
7a:62:b7:9f:0e:5e:86:04:a3:1e:b8:5d:4e:17:fd:c2:b5:23:
5f:da:38:1a:c7:53:49:b1:15:55:53:c1:30:c8:50:fa:6e:99:
88:98:69:c5:a4:14:42:7d:56:c0:17:2a:48:16:44:db:08:d9:
bc:87:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:04:33 2026 by rpki-client