Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: SWZTQfUUb8whmH/uLeW6O7uR6UeXB5wKa/F/UqXF5uQ=
Subject key identifier: 26:CD:26:0F:E7:77:87:5F:26:CC:1B:B4:74:D6:96:FB:58:53:FA:5B
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 01A1DF154F07D2585B02712A642B8AEB22D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0EC0
Signing time: Sun 15 Nov 2026 12:01:17 +0000
Manifest this update: Sun 15 Nov 2026 12:01:17 +0000
Manifest next update: Mon 16 Nov 2026 12:01:17 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: HtC0QfbRQbGZ0A2JF51WB9sODYjZOBq9QRuKXz1WwBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:4f:07:d2:58:5b:02:71:2a:64:2b:8a:eb:22:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Nov 15 12:01:17 2026 GMT
Not After : Nov 16 12:01:17 2026 GMT
Subject: CN=26cd260fe777875f26cc1bb474d696fb5853fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:cd:1b:93:51:a9:90:97:8d:23:2d:3f:ac:
8e:95:3e:c6:dc:a8:4a:49:41:f3:b7:1f:72:86:82:
5d:5a:46:20:a4:dd:a3:c0:db:d4:5f:8a:40:42:ba:
a4:1f:51:94:13:ec:89:f5:b9:e1:f2:b5:90:cf:26:
b9:19:54:dd:ac:9a:9d:2c:fc:03:09:b1:dc:7b:00:
80:ab:a9:aa:40:0b:b9:81:3a:77:87:17:a5:7c:ba:
c4:1b:10:70:7b:71:d8:a9:20:05:db:c0:9b:98:21:
88:eb:07:31:d5:41:db:1f:27:42:5a:26:38:45:6c:
2d:fc:3c:30:2f:62:b5:42:ea:18:8c:a6:d1:be:cd:
31:ed:0c:64:06:64:ac:62:96:86:8f:09:52:bd:74:
0a:e7:5e:97:ed:74:b3:cf:69:71:2b:c1:ed:7c:66:
33:b1:80:e6:88:3a:aa:14:21:a3:dc:39:2c:8f:a3:
58:98:bc:88:a1:73:24:24:a0:02:8a:ba:07:00:d1:
af:99:3c:f2:14:38:ce:df:83:7d:12:ac:a2:ea:09:
b7:2f:4b:5f:ed:24:a6:1b:0b:d8:09:19:14:dd:4f:
e2:f5:e0:9c:f5:1a:71:52:e6:98:97:1c:b8:0d:36:
7f:c0:52:60:a2:7d:7a:56:34:b6:33:97:f8:5a:a2:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:26:0F:E7:77:87:5F:26:CC:1B:B4:74:D6:96:FB:58:53:FA:5B
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f7:7c:19:c9:24:ab:23:50:7d:d3:71:ad:86:3f:87:28:6c:
90:cf:86:16:55:a7:c7:df:59:d1:2a:75:8b:1b:f0:43:4d:55:
81:e1:59:46:1e:d1:83:27:2b:aa:08:0a:1b:3f:18:91:02:69:
62:42:c6:72:92:34:35:45:26:2a:9f:dd:de:1b:a0:7c:a4:61:
db:60:a7:83:92:d2:30:85:79:9f:b6:80:f8:d7:b9:32:91:05:
00:8d:13:1d:e2:d5:f8:0b:7b:6f:4c:04:4b:3e:58:55:14:0b:
34:26:4b:80:f2:f8:9f:db:de:b7:d4:31:2c:71:8b:20:0c:f2:
d8:67:d1:3e:03:25:1e:04:2e:fa:1d:d2:6e:fb:0e:8a:9b:e0:
7a:19:19:47:b5:58:eb:50:a2:f1:be:4e:69:9a:a6:4f:d2:78:
70:b1:1c:24:65:19:c6:86:80:8b:77:eb:05:dd:b9:e5:ba:a1:
ee:1f:e0:6d:1e:0f:e7:67:06:ab:80:f2:38:f0:56:e9:a5:d6:
12:c3:f6:a9:e1:a4:b1:c0:6f:54:fd:bd:fd:e3:04:17:dc:ab:
e5:98:b5:ed:54:f5:51:58:26:46:f7:03:65:56:96:08:0c:e2:
db:12:d0:77:c7:c9:c7:ca:f7:11:ba:23:46:2f:b1:0b:d8:a5:
ad:36:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:56:39 2026 by rpki-client