Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: 0BWdOtfeLrZVo+4uBJbLRXMelekGMkH/Nr4o8lpzmv8=
Subject key identifier: 55:ED:A6:7E:C0:C7:6F:CE:05:35:6C:DA:40:BA:06:68:8D:71:4A:3B
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019D2704D93BEE52F75315E5FD1358548369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 1461
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: C8P94d62zKvEA0XMLh9QeEjrlrDveaUNf5+kIMX5uZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d9:3b:ee:52:f7:53:15:e5:fd:13:58:54:83:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=55eda67ec0c76fce05356cda40ba06688d714a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:e6:53:fb:ae:40:36:7a:10:f0:59:5f:eb:
9c:b2:bc:bf:42:c7:1f:fc:63:15:4f:fe:f7:2c:dc:
0c:e2:83:d5:0b:bb:3d:9d:7f:20:8b:fc:1e:0a:56:
2e:d4:28:8d:61:84:b5:d1:1e:f8:d6:95:90:2e:b6:
c3:0b:00:8c:3a:85:79:ac:23:06:50:30:7b:43:02:
80:ab:6c:61:64:24:83:5a:32:65:18:ce:fa:d7:b2:
ba:c2:d4:91:74:57:df:3b:8b:3a:a5:ef:37:b4:72:
41:6c:72:2b:c7:c7:ea:a5:92:a7:ed:32:e5:b3:97:
91:76:d7:c7:50:f8:1d:ca:72:a4:65:b9:b8:29:27:
08:19:85:20:e9:62:1c:d5:52:d9:6f:bd:c1:2d:b1:
41:9e:d4:ea:aa:fd:5a:1d:51:03:84:42:fd:9f:b2:
39:85:0f:4e:27:70:14:c4:b4:b5:b7:ed:36:85:55:
e4:2e:39:af:dd:23:76:d0:cd:98:fb:21:2b:0c:60:
51:a6:35:92:22:99:a7:34:04:80:f4:c5:86:53:c3:
32:1b:bf:df:f1:01:c5:4d:a5:14:1a:a7:87:8a:d8:
df:25:43:41:f5:fa:95:e8:55:d9:eb:97:cb:e6:8d:
07:a4:ad:db:29:7e:9a:bf:94:91:20:21:ce:21:a2:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:ED:A6:7E:C0:C7:6F:CE:05:35:6C:DA:40:BA:06:68:8D:71:4A:3B
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:9e:bc:86:2b:8b:7f:47:b2:89:ab:9a:51:fe:15:db:01:
7e:95:e8:00:7a:38:33:ec:de:6e:d8:76:c8:11:53:1b:d1:3c:
5e:05:95:af:08:70:44:24:cf:f4:bd:a1:cf:b3:42:0d:e4:d2:
11:c6:5a:fc:b7:17:9a:79:11:ed:6b:13:e1:41:0c:c1:d2:d3:
97:ce:0c:d7:61:bc:bd:25:c3:d0:5c:2e:62:8d:f9:0f:a9:b5:
53:38:e1:84:c4:23:3c:ee:6c:00:35:25:54:92:16:be:e0:8f:
88:e5:4a:e0:da:b6:4c:0e:28:17:24:d8:d5:e0:cc:36:f3:33:
ec:5f:d8:1b:1b:eb:f7:39:be:dc:f2:46:d5:8d:a5:e0:7a:55:
a8:49:14:5d:18:5d:1b:0f:a3:6a:27:6e:e1:eb:2b:ef:bc:e0:
b5:69:5f:5d:1f:e2:52:b0:46:a9:65:d8:99:13:68:25:5e:c7:
71:65:fe:e2:d0:6b:aa:1f:47:7b:65:67:87:a8:a7:ef:4a:83:
48:c8:5c:2c:3e:4a:28:c1:da:d4:73:e3:c4:ee:43:4a:b1:33:
d5:25:97:74:15:d3:b7:50:c1:c1:2c:02:cd:78:62:b6:1b:9b:
fe:84:b7:58:65:92:84:57:56:a3:04:df:8a:55:77:63:04:c2:
98:f4:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:03:36 2026 by rpki-client