Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: kknej/D1BqyOgjE49gHhKCWdq9/o0/bZc2VkCLvQspE=
Subject key identifier: 80:99:FA:60:17:BB:52:53:A3:3E:8F:1F:99:03:0C:9C:24:20:18:14
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 019D2A3B57AC5EA4E22BDD06096346AE7108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 13:00:25 +0000
Manifest this update: Thu 26 Mar 2026 13:00:25 +0000
Manifest next update: Fri 27 Mar 2026 13:00:25 +0000
Files and hashes: 1: 6XyzM7C6U0Eg9plO23xksot9cNE.roa (hash: U0mBP+sO6b8RXHmP69AVtgeTMj6pgRFEww7l1hgISoc=)
2: rxMNMquNmnBAETPpjSPsz8xiWiw.roa (hash: SPkA6S4HqDNpxWy9E9LRWb/XpKpbwajfBQGXEVH96cc=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: 7VvzrU1aZtzn+ICwMdBaJB3plixCOHpPDbH1VpOgkLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:57:ac:5e:a4:e2:2b:dd:06:09:63:46:ae:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Mar 26 13:00:25 2026 GMT
Not After : Mar 27 13:00:25 2026 GMT
Subject: CN=8099fa6017bb5253a33e8f1f99030c9c24201814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:c1:7e:9c:66:d2:84:1b:a2:ad:98:f7:84:
e2:eb:e4:6f:66:e2:7e:7e:ac:28:41:3d:cf:68:a4:
90:c1:b5:e6:e7:bb:df:7d:d9:a6:7c:f0:90:46:b7:
fd:e3:9e:5a:a3:61:45:1c:f8:aa:c3:6b:5e:ae:d7:
a3:7a:c0:31:24:c3:b0:d3:bb:6f:25:4c:1c:21:37:
73:00:e6:b6:ad:60:9c:b8:7d:1d:65:0e:cb:06:ba:
d9:99:f7:01:f6:a9:fc:6d:92:bf:be:5a:be:b5:2f:
3f:1f:97:06:3c:b3:2d:52:0a:3b:2c:c4:e8:e0:e5:
22:70:e4:f2:3a:c0:20:16:52:ee:7e:3d:6f:9b:61:
a2:9f:27:17:62:30:08:d6:03:71:4c:87:9a:65:08:
29:10:7c:eb:0c:d9:52:0b:12:39:42:d6:f4:2d:c5:
42:00:0d:df:d5:73:35:8c:77:6c:b3:9b:b5:c7:d5:
b3:54:61:64:5b:8c:49:47:ec:d0:5b:b5:29:ca:5d:
ea:17:40:3b:73:d1:cf:d4:fa:eb:14:a4:29:69:bd:
ab:d9:f3:c3:a6:4d:2a:60:ec:30:a9:ae:e0:b0:62:
a8:20:d0:02:db:f3:1a:4f:33:ff:ed:46:92:9c:55:
a6:7f:cc:62:0b:b4:8d:a4:89:b3:3b:8f:85:8c:54:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:FA:60:17:BB:52:53:A3:3E:8F:1F:99:03:0C:9C:24:20:18:14
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5c:5a:5f:95:76:8a:50:03:82:91:c6:8c:d8:42:78:53:c5:
bb:6e:ea:fd:e0:ab:86:fb:c1:fa:d8:6f:df:e0:75:bc:04:e7:
5e:8c:df:6b:7c:da:79:a3:4f:46:bc:1b:2d:38:7b:4e:81:c0:
8d:f5:75:92:54:d1:1d:a4:41:5b:27:22:6d:ca:e6:59:66:7e:
39:0e:7d:ae:f8:5d:41:e2:b6:ad:1c:ef:63:aa:02:e6:e1:42:
cc:9b:27:bf:45:4a:d4:ba:04:bc:d0:28:15:a6:4f:5a:a9:b7:
b6:23:90:42:d0:40:b2:3f:a1:8d:94:89:bc:2f:71:f3:6d:ac:
b2:bb:4d:35:42:a5:94:18:92:90:07:13:26:f2:a2:ba:54:81:
02:f3:1c:05:b3:34:69:1f:99:78:f0:c4:de:8d:c3:03:8e:da:
1a:2e:59:85:a4:1b:41:61:b2:3b:f0:ef:8a:80:18:30:b3:bc:
36:cc:c1:49:00:26:3b:5b:8d:36:19:1f:2f:d0:9e:d4:e0:ea:
55:d2:ba:bf:06:88:64:7b:93:b0:35:4c:dc:99:33:48:8c:e9:
d9:eb:4c:32:91:94:1e:55:48:be:a2:45:4d:1e:e4:ab:08:33:
87:fb:19:57:a1:15:86:0f:10:3d:2f:49:e9:5c:4f:f3:be:26:
e9:ae:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:37 2026 by rpki-client