Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: 9Ze65e3m0pXNwEopekOF+FkLBG3slUV6llhjNmy3/3Y=
Subject key identifier: 24:8A:4D:3F:20:96:21:BB:0D:52:3D:5D:37:65:10:5D:7B:F3:8A:0B
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 01A0CCA2F7E5E235E02C55DCA440104225B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 191B
Signing time: Wed 23 Sep 2026 05:00:27 +0000
Manifest this update: Wed 23 Sep 2026 05:00:27 +0000
Manifest next update: Thu 24 Sep 2026 05:00:27 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: uKLlXc7/+vMRUYsZwFzBa/L8CjS74pKMN8lEse0MFgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:f7:e5:e2:35:e0:2c:55:dc:a4:40:10:42:25:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Sep 23 05:00:27 2026 GMT
Not After : Sep 24 05:00:27 2026 GMT
Subject: CN=248a4d3f209621bb0d523d5d3765105d7bf38a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:b9:c1:98:02:39:e6:e3:70:e0:90:50:81:
7f:12:00:5c:76:73:ae:48:62:c0:14:d8:06:6b:1c:
57:ea:25:d3:86:be:c1:14:b1:b1:da:4b:f3:ca:84:
65:f3:ea:51:eb:35:db:7c:c0:46:9c:4a:e6:fc:e9:
09:44:7c:9e:81:62:25:b1:ac:37:cb:c7:4f:eb:87:
53:75:58:c3:98:b6:4d:85:a2:97:4f:2b:21:b3:e8:
fd:24:2f:47:74:d5:91:ea:3a:58:d7:64:a6:4b:3f:
52:6d:f4:6d:08:50:e4:f0:5f:db:9d:43:7f:ae:c7:
aa:8a:a4:18:1c:0d:89:ad:7e:b4:0f:75:3f:ed:09:
99:37:8d:7e:9d:d6:71:5c:f3:a7:e2:f8:06:1d:29:
fc:12:94:f3:e6:bc:6c:eb:ba:52:50:a1:03:4a:1c:
a9:59:a2:b0:89:bd:2c:ae:ba:1d:72:fa:9e:0a:d6:
07:ce:1a:6c:c8:a5:aa:20:a0:4e:1b:b3:4e:7a:d5:
06:4c:aa:1d:cf:39:48:bc:3a:80:c6:b3:d8:ac:6f:
f4:c8:c6:28:57:be:a2:e8:00:1e:89:26:53:fa:a1:
48:c4:a6:bd:ee:04:13:8f:dc:9e:80:0c:6a:15:59:
44:f9:8b:8f:d4:d0:c1:6a:83:51:55:4b:ef:06:30:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8A:4D:3F:20:96:21:BB:0D:52:3D:5D:37:65:10:5D:7B:F3:8A:0B
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:be:5d:ba:d4:85:97:1f:d9:d6:b7:02:bd:1b:2a:fc:86:73:
a5:72:e1:ba:7b:06:6a:f5:89:76:29:25:ee:18:be:bc:c9:c0:
c9:0c:84:a4:92:f1:49:46:5c:91:72:fc:e2:ee:d5:1e:3b:8e:
05:33:4a:08:fe:e4:28:80:51:cc:eb:29:cf:02:ec:e9:6b:71:
cd:b3:29:3c:43:33:be:32:d4:7a:73:7f:07:91:06:21:0c:8a:
38:08:3a:99:67:0a:33:5e:3b:e9:12:4b:ee:b2:6f:2e:9e:cb:
27:0f:99:8d:09:2d:ca:29:c1:50:a8:6c:59:14:f3:ce:82:5d:
ad:9e:b2:d4:0e:b4:ec:0a:93:a8:f9:6c:07:87:7a:58:77:e5:
5a:af:0b:02:cd:cc:f2:0a:c1:47:80:7b:de:d9:d4:7c:2e:57:
95:df:b3:d3:40:04:f2:4d:51:e5:be:7a:ff:83:0a:01:f3:3a:
1c:57:8c:07:8f:77:3d:a3:80:05:3b:95:dd:e1:bc:8a:85:06:
a4:c1:43:db:1d:19:65:8d:4b:4a:19:9d:97:a9:5b:b5:e0:b8:
f3:90:34:07:f1:45:a1:8b:6f:5e:05:d4:ea:4b:e2:8c:25:2f:
30:72:c4:d4:ab:5c:42:9a:14:65:06:52:88:c3:e6:7e:2a:f8:
e6:75:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:29:35 2026 by rpki-client