Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: AB2ox3wDt3lydIpwkAFElPoOraQX7fWvaTmKnPGC484=
Subject key identifier: F1:26:51:9E:91:44:7D:D3:4D:8B:4E:02:BF:C5:77:FC:2C:27:99:EC
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019F9436BEE01A32660EB73C1E5857C412FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 1385
Signing time: Fri 24 Jul 2026 13:00:43 +0000
Manifest this update: Fri 24 Jul 2026 13:00:43 +0000
Manifest next update: Sat 25 Jul 2026 13:00:43 +0000
Files and hashes: 1: YvVGQcutlJrA2jMyatSGsdl5Rr4.asa (hash: 2RRUWDSNMNA7Ca+6SbUofA2wtJxLYK6StHpkMxrAOxI=)
2: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: NxOJ9kRukQCKqTRyVO75HDE15S8BRaJSNU8zkOCeuEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:be:e0:1a:32:66:0e:b7:3c:1e:58:57:c4:12:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Jul 24 13:00:43 2026 GMT
Not After : Jul 25 13:00:43 2026 GMT
Subject: CN=f126519e91447dd34d8b4e02bfc577fc2c2799ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:26:7f:59:ce:18:80:c0:4d:5f:f2:ba:fc:f7:
d8:43:ac:13:62:c4:1b:46:82:f1:3c:60:85:82:fb:
0b:24:24:59:7b:f7:d9:0e:c9:33:de:a0:53:b1:08:
81:98:ae:97:5f:2f:11:a8:a6:ae:bb:73:86:7c:9a:
2c:1b:90:89:45:99:72:c6:c0:34:52:c2:19:3f:20:
0c:ef:74:f0:34:8c:d2:4d:8f:61:e8:b9:49:bf:0b:
14:eb:74:f1:7b:48:66:a0:aa:04:8b:6e:b9:12:45:
bb:2c:d8:d8:cb:2a:11:8e:da:6c:bb:8f:55:5e:24:
9a:6f:2f:c7:c3:44:16:f1:7f:75:3c:02:fe:7d:f3:
9f:21:8c:1a:d0:d5:c6:6e:5d:5e:21:da:a7:a1:0a:
d9:26:16:e4:73:78:b2:2d:c0:90:53:f5:1d:2e:ab:
23:8b:ff:d8:81:4f:3f:20:eb:93:d7:04:e4:3e:23:
ae:df:56:43:77:e5:5c:16:19:2f:66:4f:58:57:46:
e8:4f:90:a7:ca:7c:f4:99:22:74:88:2a:c3:83:c7:
2f:2f:1e:fb:6f:02:48:43:5c:66:b6:c1:19:7e:a6:
db:34:85:b5:c6:7d:b1:37:a0:f1:67:5e:00:11:75:
1b:fa:44:62:53:c6:e6:7c:7f:4c:13:cf:c2:de:eb:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:51:9E:91:44:7D:D3:4D:8B:4E:02:BF:C5:77:FC:2C:27:99:EC
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4c:2c:d3:d0:d4:74:12:b1:09:23:56:a9:f2:d4:94:49:9c:
1e:41:94:bf:3a:3a:22:e9:1f:bc:ad:df:88:8d:ed:96:14:34:
27:62:59:65:fc:7e:e1:f1:99:6a:c5:a8:a7:43:30:4f:a2:5b:
8e:05:07:c1:39:6d:1d:f1:ad:f8:43:9b:6f:79:97:30:6d:9c:
72:74:a4:bb:fa:53:fe:af:33:ab:1e:de:59:25:c5:a9:5c:fe:
35:62:9a:15:23:f7:c2:b8:88:ab:9b:66:70:85:8a:be:ff:95:
49:81:cf:19:e3:e8:e2:51:f6:33:6b:c3:2c:7e:70:34:8b:28:
3c:a8:6b:c3:1a:2c:7e:6d:5f:67:18:69:85:7b:c4:aa:b6:4c:
80:69:ab:44:8b:82:7c:24:f8:41:e4:9a:ff:1a:78:7d:0c:35:
22:f2:86:c0:95:2a:26:29:cb:03:55:09:1c:f0:87:37:2d:d2:
52:2e:db:6a:dc:8c:e9:2f:00:6b:01:d7:4e:65:35:6d:af:d4:
70:39:8d:bd:ac:82:e2:aa:b0:a6:0a:65:dc:9b:79:ff:f9:0c:
d0:95:2e:b3:20:34:0e:93:6a:a5:ec:5c:45:92:f4:be:61:54:
96:dc:95:41:a7:a9:21:7b:24:da:33:73:e8:79:b3:87:a6:6d:
0b:a9:bd:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNr7gGjJmDrc8HlhXxBL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTNjYTE4ZTNhMDQ4ZDU5ZmE2Y2Y1OTY2N2NmZDM5YTA1
Nzk3M2UwHhcNMjYwNzI0MTMwMDQzWhcNMjYwNzI1MTMwMDQzWjAzMTEwLwYDVQQD
EyhmMTI2NTE5ZTkxNDQ3ZGQzNGQ4YjRlMDJiZmM1NzdmYzJjMjc5OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yZ/Wc4YgMBNX/K6/PfYQ6wTYsQb
RoLxPGCFgvsLJCRZe/fZDskz3qBTsQiBmK6XXy8RqKauu3OGfJosG5CJRZlyxsA0
UsIZPyAM73TwNIzSTY9h6LlJvwsU63Txe0hmoKoEi265EkW7LNjYyyoRjtpsu49V
XiSaby/Hw0QW8X91PAL+ffOfIYwa0NXGbl1eIdqnoQrZJhbkc3iyLcCQU/UdLqsj
i//YgU8/IOuT1wTkPiOu31ZDd+VcFhkvZk9YV0boT5Cnynz0mSJ0iCrDg8cvLx77
bwJIQ1xmtsEZfqbbNIW1xn2xN6DxZ14AEXUb+kRiU8bmfH9ME8/C3ussxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEmUZ6RRH3TTYtOAr/Fd/wsJ5nsMB8GA1UdIwQY
MBaAFLpTyhjjoEjVn6bPWWZ8/TmgV5c+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMt
MWIyMDQ1NGEyODYyLzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMtMWIyMDQ1NGEyODYy
LzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0ws09DU
dBKxCSNWqfLUlEmcHkGUvzo6IukfvK3fiI3tlhQ0J2JZZfx+4fGZasWop0MwT6Jb
jgUHwTltHfGt+EObb3mXMG2ccnSku/pT/q8zqx7eWSXFqVz+NWKaFSP3wriIq5tm
cIWKvv+VSYHPGePo4lH2M2vDLH5wNIsoPKhrwxosfm1fZxhphXvEqrZMgGmrRIuC
fCT4QeSa/xp4fQw1IvKGwJUqJinLA1UJHPCHNy3SUi7batyM6S8AawHXTmU1ba/U
cDmNvayC4qqwpgpl3Jt5//kM0JUusyA0DpNqpexcRZL0vmFUltyVQaepIXsk2jNz
6Hmzh6ZtC6m97w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:27:39 2026 by rpki-client