Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
File: ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft (raw, json)
Hash identifier: vLvjHxDaUPVkbn+9cSE2bxTivmLc9YsxJyY+VbAzwKw=
Subject key identifier: C2:9C:0B:CB:3E:AB:A6:F3:BD:24:5A:C6:F8:2D:01:D4:D7:C8:71:3E
Authority key identifier: BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB
Certificate issuer: /CN=ba54d08b2b9006e66a483d482604f48b948529bb
Certificate serial: 01A1DE3949003F9EC007A13A0AC806C3B098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
Manifest number: 24
Signing time: Sun 15 Nov 2026 08:00:58 +0000
Manifest this update: Sun 15 Nov 2026 08:00:58 +0000
Manifest next update: Mon 16 Nov 2026 08:00:58 +0000
Files and hashes: 1: 17kQshB363KWnmuIeBKThtYVQ5E.asa (hash: q5bzKCk6gTxlEMmUUF8Dkow0UZ47/8gkAlFSBNvHUCw=)
2: 4HNEJWv0jx0DHCf6yo5W_9O73O8.roa (hash: 3f68C1416KPzUwgiAxa0PSLdxb+HfasDPF3ODql1iJ8=)
3: ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl (hash: MYRl6ab3uH0jIQp4+9Iav/9pOjJYCBeLKpiJBgsqwWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:49:00:3f:9e:c0:07:a1:3a:0a:c8:06:c3:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54d08b2b9006e66a483d482604f48b948529bb
Validity
Not Before: Nov 15 08:00:58 2026 GMT
Not After : Nov 16 08:00:58 2026 GMT
Subject: CN=c29c0bcb3eaba6f3bd245ac6f82d01d4d7c8713e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:4b:5e:af:a5:6c:28:42:6c:93:b5:bf:9f:
24:40:a0:0c:9f:6a:9e:35:d0:db:1f:61:6c:d0:d6:
43:76:2c:05:61:5b:92:02:c3:5b:1c:fb:a5:b3:23:
98:24:7f:76:d1:90:f7:d6:25:c3:3b:5e:69:d7:a8:
ab:bb:6d:5d:db:97:08:19:ed:fa:48:f3:31:d4:70:
b1:1e:dc:91:a7:ed:6a:1a:1d:ee:c9:cb:a0:37:a8:
18:be:72:fc:3f:a1:89:e5:d9:1d:78:10:66:f7:02:
f3:0f:4f:6f:43:f9:75:58:27:7d:a6:8c:15:42:04:
c8:de:2c:b5:ff:75:5b:a9:d6:50:04:a0:11:b4:65:
f8:ad:3b:37:49:b2:c3:15:13:84:ec:b3:73:e0:0d:
2a:9c:65:00:65:0f:9b:7a:d6:5d:a1:7d:df:9f:b6:
3b:a3:88:65:06:bf:47:dc:25:41:20:2d:66:46:9c:
cc:7f:93:39:7c:92:86:26:8a:73:f1:4f:bc:2c:7c:
41:28:c9:e3:00:85:c4:6c:5e:01:f2:68:3b:6a:ff:
6a:3b:4b:b5:1f:93:50:55:8a:42:fc:7e:20:97:81:
88:c2:b1:25:48:34:a2:21:98:9c:ac:57:5a:95:8f:
14:02:88:d4:e3:79:95:47:90:34:05:12:9a:f0:58:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:0B:CB:3E:AB:A6:F3:BD:24:5A:C6:F8:2D:01:D4:D7:C8:71:3E
X509v3 Authority Key Identifier:
keyid:BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:53:34:d2:d0:20:da:ab:c9:fa:5f:8f:db:33:19:65:8c:b2:
d1:e2:81:9e:ee:b0:c2:30:29:2f:5c:c8:b6:a6:51:97:48:ac:
98:7d:54:67:2b:41:09:64:2e:1d:48:5d:92:f6:be:28:5b:f1:
86:7e:97:5a:86:8f:03:f5:f4:8d:92:be:df:73:48:6d:49:9d:
23:88:c7:f0:72:79:ef:99:2d:84:07:1d:53:b6:f8:27:03:68:
dc:06:ec:8c:ee:2b:ea:49:a5:42:38:bc:3d:a1:34:82:f0:01:
78:46:e2:89:ec:9e:7d:d4:6e:c1:cb:43:02:db:af:1f:9b:17:
45:3b:f8:e9:2d:7e:ac:55:1e:51:e3:12:42:80:fe:4d:1f:c9:
a6:02:bb:5f:c1:d2:9b:5a:15:a4:65:62:ea:59:cc:9b:f9:a4:
3d:32:17:df:c5:c3:96:ac:73:07:5d:39:f6:cb:89:07:ce:a5:
bb:a1:e3:b7:c1:66:45:07:42:a1:f0:a8:00:88:45:4a:c9:f9:
ba:52:a0:57:31:bd:92:50:78:a6:6c:54:6e:c8:2c:4c:a6:3c:
f7:bb:a3:cd:24:b4:b6:7f:76:4d:09:1d:69:2e:10:40:24:61:
44:d2:0a:e5:53:0f:92:73:04:79:2c:24:05:54:a0:80:0b:e8:
f0:92:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:37:07 2026 by rpki-client