Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: BFHT7E1hVo8kp/6SKzIvLcM+K6ymKK2TJnzXlO1ECB8=
Subject key identifier: 1A:A5:B1:8A:36:B2:DB:70:CD:30:86:DF:E6:81:F0:EB:12:80:2D:3B
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 019FA071D0C87F47F121486AC352E376508B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 0DA7
Signing time: Sun 26 Jul 2026 22:00:41 +0000
Manifest this update: Sun 26 Jul 2026 22:00:41 +0000
Manifest next update: Mon 27 Jul 2026 22:00:41 +0000
Files and hashes: 1: 1-Y2vjSjF6gXRq6I6kzf8-SGCL8Q.asa (hash: DdT5c/3q+BGyWUydZ3FkM3RX71y9vyzAcIHaVlT8fro=)
2: lLOn1a_u_YC3vJ_LFQzYUJYz5bw.roa (hash: E7hSojMc3tDdmz8A/pzP/+XY9Q3UAlYQtQ1nExLgNd8=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: cxFR0sWpIBsbZ/4fvxfUmYvbC+JmbLC+oLbt0RHIu7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:d0:c8:7f:47:f1:21:48:6a:c3:52:e3:76:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jul 26 22:00:41 2026 GMT
Not After : Jul 27 22:00:41 2026 GMT
Subject: CN=1aa5b18a36b2db70cd3086dfe681f0eb12802d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:44:0f:89:ed:7c:7c:5d:07:ff:01:6f:23:
ce:a4:4a:18:4b:5e:c3:9c:68:34:da:ae:f4:fb:a3:
2d:0d:61:02:9d:8a:cb:ef:4f:c0:5a:c3:ea:f2:84:
e0:2a:06:15:df:5a:61:42:f6:66:30:f5:dd:ce:35:
9b:35:68:78:5d:f8:be:be:be:29:5d:56:08:68:a5:
76:c5:a8:42:c6:cf:a7:b4:e8:12:e8:52:20:f1:16:
5a:15:56:86:e7:48:64:30:df:83:89:80:65:b2:29:
46:0d:e6:d7:32:9d:5f:f0:a9:6f:49:fc:1a:fa:de:
b4:b7:a7:c9:49:f1:01:1a:ba:59:c0:42:71:14:82:
f9:05:3b:13:84:3c:e5:f5:d2:f8:c7:46:9e:6a:90:
47:39:a4:57:fc:d9:30:4f:09:b7:15:60:69:12:4f:
04:88:aa:cd:10:26:59:b2:5f:48:61:6d:70:5a:af:
15:cf:56:6d:c3:3d:bc:15:1b:bb:fa:6b:af:84:90:
c2:df:4e:3d:47:41:c8:15:65:10:43:b2:50:f0:ef:
6e:1b:c6:77:79:d2:07:c7:43:0d:cd:62:8f:fc:bd:
4c:e0:55:82:bd:90:93:84:e5:c2:57:ae:3c:75:4e:
2c:aa:5c:74:4c:6c:a3:e7:c1:f0:24:f7:b1:c4:58:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:B1:8A:36:B2:DB:70:CD:30:86:DF:E6:81:F0:EB:12:80:2D:3B
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:da:ae:04:7c:e0:1d:e4:6c:56:b4:62:77:ea:f4:00:54:97:
02:3d:1d:e1:f7:8b:8b:e3:5c:dc:4a:62:17:c7:16:a9:b9:c9:
6f:f9:81:a9:4b:82:1a:69:8d:92:b5:dd:b1:63:26:55:74:d6:
87:44:fd:11:b1:74:9d:16:87:34:8e:5a:cb:99:ee:65:0a:22:
32:b3:91:b5:25:26:15:22:27:67:ae:83:cb:f4:3b:44:18:ce:
f9:8c:79:33:03:57:b1:8c:60:ff:01:fd:cc:0a:36:1c:55:72:
35:0e:7c:2c:f2:70:6a:50:8a:6e:a9:37:13:a7:63:51:49:25:
b2:5f:11:33:d5:8b:e7:9a:d5:28:7a:31:72:91:dc:f0:4b:20:
cc:66:24:a5:5b:14:67:a4:7f:21:a4:a3:a0:8f:19:01:79:55:
e2:fe:9f:c9:90:39:65:88:52:a2:39:36:b9:07:9f:ee:5a:37:
1a:62:70:bd:9b:54:76:8a:26:a3:bb:48:74:8c:42:a5:1a:04:
7f:b1:a9:9b:e2:73:c9:18:bd:24:9a:f8:20:8d:26:63:81:0f:
e1:90:ea:b9:c9:54:29:6b:83:e2:fc:24:cc:7d:82:2f:9e:3d:
bf:f4:9e:14:7b:b6:a2:47:a6:b1:31:09:a9:a0:a4:0c:30:80:
7a:3b:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:38 2026 by rpki-client