Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: rKf0YB80jmuaykct3Q9Uc2Bu/NHdJ60XvVprsU2jwzo=
Subject key identifier: E7:27:A6:9B:41:5A:A3:D9:7A:F5:18:AA:F7:6E:61:5D:66:A2:5B:62
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 019D37897C5FE7DC84021524654D88C9A2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 13CA
Signing time: Sun 29 Mar 2026 03:00:50 +0000
Manifest this update: Sun 29 Mar 2026 03:00:50 +0000
Manifest next update: Mon 30 Mar 2026 03:00:50 +0000
Files and hashes: 1: sxmrXu9E-QMmpeBcwLRWCGaEZE4.roa (hash: jY/5S/c8G/l4I3WYZXOjvNoUctwx3/ZjUHeaUP4rQBU=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: zSi+V1icHrAdFOR1iA0T7RnoRZaNbMThi2dybBylPHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:7c:5f:e7:dc:84:02:15:24:65:4d:88:c9:a2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Mar 29 03:00:50 2026 GMT
Not After : Mar 30 03:00:50 2026 GMT
Subject: CN=e727a69b415aa3d97af518aaf76e615d66a25b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:e3:b4:ed:15:b1:90:6b:ed:8a:90:bf:0e:
e9:a5:c8:62:be:6b:3c:c7:71:e6:86:c3:40:80:68:
8a:46:97:97:20:38:89:61:d9:1e:8b:de:0a:61:f7:
15:58:b0:fa:26:ce:60:f2:06:a6:ae:80:45:69:d3:
2f:9f:76:51:ae:ff:18:b1:ac:85:99:7f:63:43:78:
3e:39:23:1e:13:8e:16:3b:58:c8:49:15:33:d1:d3:
d1:a6:2e:5a:f0:a5:fb:1b:67:84:8b:76:0a:2b:2a:
94:7c:e1:69:30:55:42:5e:04:92:40:91:29:c7:f9:
36:3d:91:c1:67:28:b3:9d:3e:b3:79:7e:53:91:06:
44:5d:7c:8d:8b:b2:d5:d4:b8:c1:e8:f1:fe:89:34:
cf:5d:84:8c:38:ef:fc:14:de:ee:1f:61:9c:7e:9e:
27:9a:c5:39:9c:77:e4:3a:6e:b0:b4:37:82:f2:c7:
69:0e:aa:d5:12:1a:4a:1b:fd:1d:90:87:f8:5c:50:
d7:a0:46:7b:f3:9d:6c:4d:a7:21:d2:6c:3f:2d:52:
87:d4:b4:ae:dd:82:30:c6:bb:68:9a:37:78:0d:65:
6c:af:e8:7f:46:9a:c5:23:e4:fa:62:da:b5:d0:d4:
a9:99:f0:03:85:21:4a:44:08:41:c7:49:6b:8c:be:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:27:A6:9B:41:5A:A3:D9:7A:F5:18:AA:F7:6E:61:5D:66:A2:5B:62
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b9:f5:26:0a:17:b7:a7:6f:cd:27:08:7b:27:9a:c2:e0:e3:
dd:a5:17:57:93:bd:fd:e3:ec:0e:fb:81:c5:59:4a:3d:99:3b:
aa:3a:82:8a:15:d0:38:06:3a:f5:89:96:f7:97:3a:33:62:1c:
ac:40:ac:99:1d:b9:ac:eb:eb:bb:66:36:c9:af:08:47:ff:a9:
69:5f:c2:66:b0:8a:ef:b7:80:f8:dc:68:c6:36:7c:14:0a:2a:
08:2e:c3:db:af:d4:7c:60:13:63:e7:f7:ac:59:a3:ed:94:a9:
ee:b7:51:5e:fb:81:06:90:7b:2c:6a:46:0a:17:df:b4:2d:2d:
47:4d:37:ed:83:9f:c7:70:cb:d3:39:29:a6:86:a7:45:10:cc:
45:4b:82:be:76:ae:c1:d7:3d:f7:78:3a:43:cf:2f:a0:6e:4e:
93:ea:ff:1b:4b:92:06:d5:c8:60:56:95:91:fe:f3:4d:98:7a:
aa:ea:c2:68:75:f1:6a:72:ca:08:b0:5e:00:b5:8f:cf:24:37:
80:fb:aa:86:46:c9:65:33:cd:eb:ff:4e:52:d2:07:3d:9b:4c:
f1:15:10:e2:64:f8:1a:fe:b4:22:99:76:fe:4a:b5:fb:6d:a9:
c5:19:de:ac:4e:f7:7c:91:27:a9:30:1e:c4:d0:3d:e4:43:de:
1b:2d:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:13 2026 by rpki-client