Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: D9JzhiRxWt+HVTYABUap1DTg496ZBwqn2MPTqE+5v08=
Subject key identifier: 06:22:EF:A4:5C:68:21:C4:87:1C:B6:40:8A:13:4D:27:DD:04:10:9B
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 01A0CEC80B75170DCE11CD9E03DC3D4ED76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0E33
Signing time: Wed 23 Sep 2026 15:00:11 +0000
Manifest this update: Wed 23 Sep 2026 15:00:11 +0000
Manifest next update: Thu 24 Sep 2026 15:00:11 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: ogpXTr59PssPeY8Fe7nLWCKaBImNrq09hOUIV6YU+7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:0b:75:17:0d:ce:11:cd:9e:03:dc:3d:4e:d7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Sep 23 15:00:11 2026 GMT
Not After : Sep 24 15:00:11 2026 GMT
Subject: CN=0622efa45c6821c4871cb6408a134d27dd04109b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ca:c6:b5:b5:82:90:1e:bb:ab:39:7b:d5:c0:
c3:b2:71:dd:1e:5d:32:b5:e7:b3:86:76:57:93:47:
9d:b6:1c:c3:4d:93:9e:17:ca:f9:bc:ff:d9:35:67:
4a:f9:9b:08:41:a4:98:19:70:f3:02:5e:87:99:1c:
6b:26:ab:f5:56:86:19:dd:30:e9:69:81:76:75:35:
d0:41:2d:8d:9a:21:75:54:d3:c2:7b:ef:ae:44:bb:
de:17:68:a2:8f:ae:f4:64:30:08:a6:44:97:15:52:
75:8a:c8:dd:21:4f:f8:03:de:60:8f:64:24:6f:a9:
de:bf:01:4d:8c:b8:56:ce:a6:be:65:67:da:6e:6b:
7b:69:27:6b:8d:9a:5f:23:1f:f3:3a:93:b9:ee:d2:
ae:c4:7a:7d:9e:ce:d6:fd:b4:54:01:aa:7b:21:c2:
22:bb:d3:a5:2d:ef:0b:5c:f5:45:c8:6a:f1:9f:2b:
c4:d3:39:1c:67:d3:22:30:3a:25:0b:e6:38:23:bb:
14:0f:8b:43:84:04:31:12:31:c1:3d:21:35:c9:c9:
fd:39:6f:af:05:2c:5a:c6:00:30:27:2f:1f:66:49:
70:e0:ee:8e:2c:1a:f3:9f:95:6b:c6:b3:8b:14:47:
2f:57:e0:24:3d:d7:cc:38:91:19:50:5b:14:a8:67:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:22:EF:A4:5C:68:21:C4:87:1C:B6:40:8A:13:4D:27:DD:04:10:9B
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f7:26:72:b5:d4:c0:21:e3:6d:c9:67:bf:71:49:b7:68:1b:
76:95:09:3e:95:4f:4f:79:ea:48:31:52:2b:e1:e1:4d:7a:49:
20:58:45:1f:13:d3:0b:d6:a7:55:d9:f7:c0:b9:05:c1:e1:a4:
d0:d5:9d:af:e1:4e:eb:8c:c5:35:fc:d6:ab:8d:d2:27:3e:95:
90:07:dd:99:c1:c8:4b:48:59:63:18:db:f9:f8:ce:07:5b:f0:
ed:89:cc:50:34:75:35:56:1a:9a:a0:01:dd:1e:bb:30:e8:a2:
11:36:b8:f0:7b:4d:24:f1:6a:4a:b6:58:12:68:0c:e0:60:71:
81:8e:a9:05:fa:4a:17:6d:55:75:39:21:a4:64:77:13:fd:ab:
41:4f:75:66:69:d9:65:8b:3c:52:1b:5e:2c:bb:90:51:bf:17:
bb:ab:0f:19:44:ba:d3:73:36:d1:92:12:76:4a:3d:48:a9:5d:
a9:2d:47:c3:04:e0:92:1a:c2:1f:c4:3b:3b:58:a0:c5:4a:b0:
23:71:0a:09:b9:24:c3:94:80:df:e9:77:72:dc:3c:8a:75:75:
fd:90:1b:ae:07:c9:03:06:2b:cb:66:51:33:f6:56:56:fc:29:
d8:73:3a:0f:16:4a:d2:b2:04:cf:8d:1b:34:d9:6f:eb:89:b0:
91:21:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:30 2026 by rpki-client