Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
File: ubjmb62BRkWYT9TqrTE7b-AFibc.mft (raw, json)
Hash identifier: pVWfyIT4/pn+RVMAdMuvqUOFC3kmhcWxlffsfIqDXJo=
Subject key identifier: 6B:C7:56:4E:8A:45:EA:F6:AF:9F:4F:B9:17:CC:08:EE:F7:DE:8A:38
Authority key identifier: B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
Certificate issuer: /CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Certificate serial: 019D382E50A8BBFC0701D310B8BBCDDD8C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
Manifest number: 0D13
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: ubjmb62BRkWYT9TqrTE7b-AFibc.crl (hash: WD9UNqG+aOj5ijdBRrvtDg4dGPIreKzA+jg+F8ozDqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:50:a8:bb:fc:07:01:d3:10:b8:bb:cd:dd:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8e66fad814645984fd4eaad313b6fe00589b7
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=6bc7564e8a45eaf6af9f4fb917cc08eef7de8a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:34:b1:e4:56:78:0b:c0:88:0c:16:4a:26:
a4:2f:6a:0f:f8:a5:29:ab:e4:22:e1:85:93:18:45:
c5:5e:f9:7e:ae:b4:82:c4:4a:ef:a0:72:da:6c:57:
c8:88:f7:03:e2:89:15:18:75:91:d6:a6:55:97:64:
86:80:b8:98:94:32:e9:8e:ba:5e:28:68:82:04:c8:
50:3d:79:26:96:c7:4c:ad:4c:c4:af:41:be:57:24:
01:70:be:dd:78:4f:af:ba:6d:76:22:ca:f9:89:87:
f9:82:62:86:01:1b:7e:14:0f:4b:e7:49:3f:f4:b7:
f1:31:d2:70:e8:53:dd:82:4e:8f:12:2c:cb:ab:4e:
9c:4d:e0:5b:0c:8d:5c:ee:be:75:60:8c:da:6d:0f:
51:0f:c7:dc:69:0a:ce:ea:df:03:47:12:0c:3a:c8:
27:77:4c:d2:69:40:37:47:e5:99:c7:ac:f0:82:c8:
f0:9c:0e:c3:83:dd:67:d1:6d:4c:b1:46:d7:2e:f2:
e8:98:69:7d:48:46:53:7b:bd:d8:3b:57:da:c9:3d:
32:34:74:ea:78:d9:5d:9f:ae:b9:a3:be:4c:62:2f:
0a:49:8e:47:7f:f0:ce:75:0b:d6:79:35:c7:20:f0:
b6:27:a3:ec:a8:73:f8:f8:d0:fb:33:84:3c:4d:04:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:56:4E:8A:45:EA:F6:AF:9F:4F:B9:17:CC:08:EE:F7:DE:8A:38
X509v3 Authority Key Identifier:
keyid:B9:B8:E6:6F:AD:81:46:45:98:4F:D4:EA:AD:31:3B:6F:E0:05:89:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubjmb62BRkWYT9TqrTE7b-AFibc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/0245eb-caa2-4063-bdef-2a61c4e3e057/1/ubjmb62BRkWYT9TqrTE7b-AFibc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:73:c6:5e:23:e9:06:b7:a8:6e:9d:bb:00:86:4b:e0:f4:8b:
47:6b:2f:9e:88:05:17:78:5e:e5:7e:a9:e5:d0:09:bf:91:0e:
12:79:c4:a6:04:9b:55:fe:12:31:42:e6:1a:bd:f8:21:bc:c7:
53:18:af:e8:fe:24:69:6e:22:6f:5c:71:2a:53:35:ed:59:76:
90:55:64:41:43:8c:92:a6:47:95:3a:8a:70:8c:e4:0a:97:0c:
89:d5:1e:47:56:39:02:18:9a:de:d5:98:48:16:1d:53:07:ef:
d3:b1:7c:c7:97:cd:66:ed:5b:9e:b1:ab:c2:b0:ba:a7:5a:37:
a7:7a:05:da:33:10:51:e9:a9:75:bb:eb:1e:75:05:10:ee:fc:
37:54:73:32:16:b0:41:da:d3:8e:e2:83:bf:4a:fe:32:82:7e:
6b:f6:96:ea:43:d1:87:7a:11:d2:05:33:1b:7b:55:9a:a6:8a:
df:ba:af:9a:93:e9:63:22:38:0c:05:c0:02:99:0d:0e:19:83:
2e:4b:6e:5f:ed:78:25:ec:a2:d8:8e:e8:00:a9:2b:cb:57:33:
7a:e5:9a:62:8f:4f:74:b6:33:49:73:3d:5b:a3:e8:7b:ca:19:
0c:f3:f8:ff:f3:7c:ee:d9:33:f8:f4:68:e3:37:b3:e7:70:e4:
be:dd:ee:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client