Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json)
Hash identifier: c4H3OZYwG+LfFkN7Deimuv/36plbz/7N61g+RyY5EuQ=
Subject key identifier: 95:5C:3F:B4:8D:56:A9:A2:74:A8:BF:CB:81:F1:AB:7D:5C:9F:A4:5B
Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479
Certificate serial: 019D284DAACBC23401CDCF244A8ED0906BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
Manifest number: 02A2
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: EoF9fwGsP1CZCYW3UWUO9VMg76/g4fXrWNrDNvtNzjU=)
2: nOWuyvy4DH6k1__anLzqIvUWrnI.roa (hash: FWTcgomuo2Jmq9gwKEXbH5ieQJwMr6YdtSlD/W2xnbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:aa:cb:c2:34:01:cd:cf:24:4a:8e:d0:90:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259796c5f60c55501e458008611623b5049d479
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=955c3fb48d56a9a274a8bfcb81f1ab7d5c9fa45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:2b:67:a4:34:3a:83:e4:fe:95:00:43:a5:
6e:dd:e1:ad:a0:36:3b:42:71:06:bc:8a:c5:61:46:
a3:7c:b0:1d:92:48:08:31:79:bd:00:41:f5:8f:0a:
8e:3b:b0:75:5e:af:2a:60:bf:87:c7:5b:46:50:d8:
d5:ce:40:c7:58:d2:f3:00:7e:bf:5c:49:29:a0:69:
18:96:58:7b:57:0d:47:14:f5:e7:42:d4:43:0f:4c:
d4:43:b8:e6:8e:bb:8d:22:de:4d:4f:34:a1:e7:c8:
21:f2:98:d4:9a:34:69:f9:8a:43:0d:20:5c:af:bb:
7f:b7:b0:a8:51:d3:1d:9a:b4:14:80:5f:f8:33:eb:
f5:6b:93:44:bb:6b:65:94:da:d3:af:7d:72:a4:38:
d9:b8:25:16:39:82:40:f5:ec:db:6a:eb:66:d0:20:
7f:72:4d:67:24:4b:9e:09:b5:d6:df:10:e0:c0:20:
54:4e:21:c8:7d:4f:f9:73:79:40:ab:66:c2:b0:71:
39:86:f9:0b:a4:a8:4c:89:35:64:93:80:ed:cc:48:
51:72:db:16:7f:ac:79:95:95:31:e5:14:df:7f:61:
f8:31:63:f8:21:d4:e4:07:2d:de:b5:b8:9c:4d:1b:
7a:39:d0:6e:ac:ef:a0:64:74:4f:19:ca:dd:05:94:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5C:3F:B4:8D:56:A9:A2:74:A8:BF:CB:81:F1:AB:7D:5C:9F:A4:5B
X509v3 Authority Key Identifier:
keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0d:76:d0:05:aa:3f:c2:50:e6:43:4a:3a:ee:5b:61:21:39:
7d:7a:89:67:da:a1:34:bc:ce:1c:c2:30:99:6a:76:fa:ca:2f:
20:b7:0c:91:5e:21:50:05:de:7b:83:83:f1:85:29:fb:62:fd:
cb:b9:88:4b:bb:f0:37:5c:82:52:48:70:3b:50:58:6e:b2:d9:
a1:a6:e8:97:13:7d:d2:3a:28:52:d4:e0:11:a6:f5:2d:e0:09:
41:a4:45:ab:06:ed:27:6f:74:88:24:27:f9:63:fb:19:b5:d9:
15:b0:10:65:6e:6e:15:a8:12:c1:50:53:52:6b:a0:f6:65:19:
73:83:18:c1:80:16:05:41:ff:86:ab:74:4e:a3:d4:a4:1e:10:
6f:10:58:c6:1a:9b:29:e5:f7:ca:40:c7:f0:76:26:21:92:18:
40:0d:71:dc:32:04:b2:c0:86:eb:b5:c8:5a:d8:3e:c4:3b:96:
a9:4e:2f:b4:19:ad:35:a1:ee:70:a5:1e:d2:1f:17:02:8b:4c:
3f:49:ba:e4:93:8e:8a:ba:c3:b5:63:c3:0a:14:3b:aa:b3:39:
0d:8f:25:ca:20:ea:7f:77:1d:3d:69:8b:3a:96:a1:3c:68:79:
41:22:74:26:da:42:eb:6b:fa:60:74:b1:ca:cd:ad:f1:73:6c:
ae:bc:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:07 2026 by rpki-client