Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: 7fMj7HHHDewiEixX47V/B2XMIlzk1GLVZmbWogOo0lc=
Subject key identifier: F5:72:AE:F0:A2:5E:4F:52:84:B4:5E:E1:3E:E3:A7:D0:F2:F9:AB:4F
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019F9022BA182CC6E3D91E8CE47D2C1E681F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0D8E
Signing time: Thu 23 Jul 2026 18:00:22 +0000
Manifest this update: Thu 23 Jul 2026 18:00:22 +0000
Manifest next update: Fri 24 Jul 2026 18:00:22 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: uAC6zIyvBDQZT9TlD/osEsYFYRD63hcJ1xY5RUGDIhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ba:18:2c:c6:e3:d9:1e:8c:e4:7d:2c:1e:68:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jul 23 18:00:22 2026 GMT
Not After : Jul 24 18:00:22 2026 GMT
Subject: CN=f572aef0a25e4f5284b45ee13ee3a7d0f2f9ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:66:31:09:b4:79:d1:fa:d6:05:3c:51:a4:
c1:8a:35:d2:4d:8a:47:a1:c5:ad:08:c3:a1:4b:25:
75:a3:6b:47:8d:30:8f:a6:e6:b5:72:c4:3a:a4:0f:
e3:e3:f2:4f:31:83:fe:93:25:54:38:d6:9c:0b:1c:
ea:af:e5:a8:14:1b:74:8f:e8:9d:15:64:20:60:0f:
23:c4:c2:46:c6:35:29:7b:eb:2e:b9:64:8f:b2:a8:
76:28:61:4a:b9:87:62:b0:57:9f:7a:1b:99:55:d3:
f0:4c:63:84:b8:cf:a9:5f:29:6a:a5:8e:ae:cd:1f:
a6:07:61:c2:13:4b:48:e4:07:85:c3:b2:6f:3f:04:
f2:ff:c5:06:a6:dc:2d:d9:e5:8b:d9:87:64:c5:6a:
1c:6e:42:7d:7e:70:54:e3:3f:1c:12:e4:db:95:1e:
b7:59:0e:a6:77:f7:88:49:37:fb:53:9d:8b:c0:e2:
cb:fe:f9:1c:40:79:2a:59:83:27:04:a5:84:5a:f3:
1f:9d:94:b6:2c:58:b7:a0:23:34:4a:36:a7:78:ad:
92:12:b1:45:6f:14:d6:ef:b6:91:95:61:8f:91:7b:
92:8c:29:cd:bb:22:5d:d2:e7:e9:4e:94:16:88:4a:
20:72:dd:a2:eb:67:8a:8a:72:d3:f3:51:d7:1c:ed:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:AE:F0:A2:5E:4F:52:84:B4:5E:E1:3E:E3:A7:D0:F2:F9:AB:4F
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:24:a6:ac:a4:cb:42:5a:b7:1e:d7:9e:86:a7:ec:fa:bf:fa:
e0:d2:c3:17:74:3d:00:03:7f:b1:15:8c:79:25:70:f1:e0:41:
0a:f8:13:d1:21:2f:30:45:8a:55:5d:ec:10:3e:16:a5:20:7c:
86:6d:6c:c4:74:ae:13:3b:a1:23:31:d6:2a:7c:0a:0b:46:0f:
84:c4:f7:73:f2:95:21:68:ff:0c:12:ef:68:0d:6a:53:33:c3:
14:c3:67:be:4f:86:e2:7e:1a:cd:d6:69:3a:9c:67:e0:4e:9f:
f7:08:cc:cb:e8:de:19:6d:38:d0:d9:8f:f3:b2:41:28:9e:52:
4c:96:41:70:3d:02:0b:12:02:19:e2:c3:c7:b7:c3:9c:9e:5f:
34:9c:36:80:59:ed:8f:ef:be:8c:3d:eb:04:ca:f5:49:51:fb:
b2:4c:bb:bb:82:29:f4:50:f2:4f:b3:88:0d:c4:2c:ba:4d:f1:
98:4e:a8:52:f5:84:4d:a9:c6:f6:a7:67:c4:f8:b0:97:e4:de:
0d:73:be:5b:f2:3e:34:a0:0f:e1:42:4a:d8:9c:f4:ef:fb:e5:
90:19:61:dc:4c:e4:a1:d4:6f:8f:d7:66:dd:fd:75:15:be:fe:
42:f2:90:cc:c7:98:c7:46:0c:81:34:ea:fd:0a:20:ab:ee:99:
11:54:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:08 2026 by rpki-client