Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: w2EQD/K3Q1J04oH7GcAv7bCvAbjDJDBz8fgQzg/UAQw=
Subject key identifier: AD:DA:75:4D:C7:59:C9:52:B0:AB:47:E3:9C:60:C6:1D:22:57:AF:74
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 019D270495DE0AB5492DFD7BC9AB20AC434F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: G1K5wrjSUkc6OPZg698VUMVF1OlmUhiM4Y9pQwTlt+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:95:de:0a:b5:49:2d:fd:7b:c9:ab:20:ac:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=adda754dc759c952b0ab47e39c60c61d2257af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:92:83:a2:ab:bb:f8:84:56:39:6a:19:84:
64:f0:d2:1e:e1:a9:26:9b:07:e2:0e:27:38:2f:4b:
a1:1c:ce:ee:2c:a3:cc:45:4f:e8:cd:db:4c:2f:3a:
9a:b3:98:bb:7a:01:ae:88:49:7d:04:05:8b:d6:ae:
c4:25:d0:34:87:62:3d:09:ea:47:29:b8:83:39:be:
87:35:8d:db:92:65:ab:fc:41:8a:c5:c2:9c:ac:9a:
12:0e:f6:ee:1f:5c:c2:5a:63:36:a5:f4:0f:d5:ac:
3d:34:32:dd:69:c9:0d:67:9d:6f:b9:7e:f4:75:32:
2d:7e:44:17:e1:b4:48:cf:de:dd:d1:63:09:a2:78:
12:2b:c2:14:be:dc:72:86:68:53:5f:1b:dc:e5:c0:
eb:8b:0e:16:2e:4b:17:5e:28:d8:d8:63:7e:a7:0c:
4a:92:28:51:00:1e:60:7f:42:9c:b6:f1:68:ef:04:
e5:e8:ed:5a:6f:69:66:84:74:e7:6a:8d:50:06:fa:
05:17:2b:00:07:01:1e:d9:b9:45:a9:5e:22:05:f7:
ca:ea:6d:88:74:8b:7a:a0:65:94:84:22:5f:14:1c:
d3:b8:fb:15:dc:34:dc:de:24:8d:b4:a1:f5:78:ae:
78:6b:4b:cf:e6:45:b5:4c:e4:a2:99:a2:48:70:cc:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:75:4D:C7:59:C9:52:B0:AB:47:E3:9C:60:C6:1D:22:57:AF:74
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c6:58:54:4c:c4:52:ae:35:d9:8e:60:3b:bc:0b:d5:b1:31:
82:65:2c:a1:f9:64:8c:62:d4:77:f1:c9:05:b4:51:04:84:c4:
2c:37:cc:f8:64:9f:a6:5d:e7:ce:03:91:e2:a9:ca:94:b1:14:
15:46:26:64:a5:6f:57:0e:45:90:45:41:e8:9e:8d:3b:4c:30:
d6:2f:b7:d6:12:50:f0:25:9c:dc:2c:e9:d2:58:6b:7a:3f:59:
98:23:71:21:aa:c5:fa:24:13:b8:20:75:4f:af:2d:0e:a5:39:
2a:3a:1b:06:0c:ab:09:3a:a3:aa:87:b6:27:fc:ee:55:e8:b2:
14:81:72:bd:22:af:cb:98:2a:db:0b:35:15:9c:10:37:35:55:
c8:8c:f4:23:02:dc:be:c6:b2:b8:cf:8e:9f:2e:72:14:fc:f8:
02:07:5c:4c:88:4b:95:96:76:3f:3e:56:a9:a2:c3:e3:dd:3e:
fb:ba:e9:31:2c:0b:5e:58:21:9a:fc:81:c0:af:12:df:e2:35:
34:25:62:a4:0b:33:cb:59:28:c3:6c:17:50:85:29:94:cf:6e:
fe:25:9e:1c:75:b3:e4:c3:fc:b1:38:98:b1:76:bd:5e:05:5f:
c7:dc:7b:96:5c:87:1b:6d:04:68:e4:a4:ef:6e:bd:e1:75:a6:
2f:a6:00:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJXeCrVJLf17yasgrENPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTlkOWY1YWYzY2VlNDQyMDE0YjczNTk2MWM3M2I5Njky
NjBlMTkwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
EyhhZGRhNzU0ZGM3NTljOTUyYjBhYjQ3ZTM5YzYwYzYxZDIyNTdhZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltuSg6Kru/iEVjlqGYRk8NIe4akm
mwfiDic4L0uhHM7uLKPMRU/ozdtMLzqas5i7egGuiEl9BAWL1q7EJdA0h2I9CepH
KbiDOb6HNY3bkmWr/EGKxcKcrJoSDvbuH1zCWmM2pfQP1aw9NDLdackNZ51vuX70
dTItfkQX4bRIz97d0WMJongSK8IUvtxyhmhTXxvc5cDriw4WLksXXijY2GN+pwxK
kihRAB5gf0KctvFo7wTl6O1ab2lmhHTnao1QBvoFFysABwEe2blFqV4iBffK6m2I
dIt6oGWUhCJfFBzTuPsV3DTc3iSNtKH1eK54a0vP5kW1TOSimaJIcMyI1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3adU3HWclSsKtH45xgxh0iV690MB8GA1UdIwQY
MBaAFLpZ2fWvPO5EIBS3NZYcc7lpJg4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wM2QzZmEtOWUyMi00NDFlLWI1YzUt
ZDIwM2UyMDAxOGY1LzEvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wM2QzZmEtOWUyMi00NDFlLWI1YzUtZDIwM2UyMDAxOGY1
LzEvdWxuWjlhODg3a1FnRkxjMWxoeHp1V2ttRGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcZYVEzE
Uq412Y5gO7wL1bExgmUsoflkjGLUd/HJBbRRBITELDfM+GSfpl3nzgOR4qnKlLEU
FUYmZKVvVw5FkEVB6J6NO0ww1i+31hJQ8CWc3Czp0lhrej9ZmCNxIarF+iQTuCB1
T68tDqU5KjobBgyrCTqjqoe2J/zuVeiyFIFyvSKvy5gq2ws1FZwQNzVVyIz0IwLc
vsayuM+Ony5yFPz4AgdcTIhLlZZ2Pz5WqaLD490++7rpMSwLXlghmvyBwK8S3+I1
NCVipAszy1kow2wXUIUplM9u/iWeHHWz5MP8sTiYsXa9XgVfx9x7llyHG20EaOSk
72694XWmL6YALg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:41 2026 by rpki-client