Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: 9cDkNWBReoOdq+6WRS2WGgBnPIkmhAGorZGHVDW9B/Q=
Subject key identifier: C7:79:0B:95:2E:AC:35:71:48:12:45:26:85:82:AB:07:E2:72:54:13
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 019F92117561BEE7899EC444B2215E7F6DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 108A
Signing time: Fri 24 Jul 2026 03:00:45 +0000
Manifest this update: Fri 24 Jul 2026 03:00:45 +0000
Manifest next update: Sat 25 Jul 2026 03:00:45 +0000
Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: e2pX9KqYj/lvroOUcuPeh7ixqDaDZu+AaP5jB1zsyEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:75:61:be:e7:89:9e:c4:44:b2:21:5e:7f:6d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Jul 24 03:00:45 2026 GMT
Not After : Jul 25 03:00:45 2026 GMT
Subject: CN=c7790b952eac3571481245268582ab07e2725413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:65:dd:38:90:0c:c3:c4:e6:35:88:fa:ed:
f3:61:78:04:f7:46:c4:07:30:3d:07:5f:7c:dc:94:
6c:4b:cf:0d:dd:38:e1:0c:48:8a:55:11:fe:46:2a:
8c:54:b5:04:79:e8:4e:10:62:75:7b:5d:7f:1d:7b:
a8:cb:f4:f9:cc:ac:f8:5f:94:85:63:e3:90:92:3f:
4d:4a:97:6f:fd:73:6d:bb:59:74:91:ed:9d:70:06:
b7:36:38:f3:4c:bf:70:08:41:8f:7c:c6:cc:d9:13:
25:94:89:d0:76:41:a1:92:aa:02:46:f1:f8:42:ed:
15:62:be:9b:d4:3d:a6:ba:b5:b3:00:2e:48:5b:f0:
e1:46:5f:92:5a:42:0d:93:5f:99:ef:13:eb:26:cf:
ae:40:1f:57:52:fc:f9:65:ba:c9:1f:a3:2e:fe:16:
07:48:e6:3c:1c:36:4e:e8:b9:d7:18:16:8b:69:3f:
f9:c9:d0:d6:cf:77:86:72:e8:52:b5:17:95:09:3c:
a0:36:8d:18:60:8d:d6:db:f1:72:9b:20:9f:67:7a:
76:a7:bc:e4:6f:11:9b:ee:d0:5f:d1:ef:4f:55:9a:
10:d6:46:8a:f3:1c:84:fa:2a:9a:5b:d4:96:42:c1:
38:33:32:49:b1:b9:1a:0f:44:c3:7e:af:43:cf:c2:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:0B:95:2E:AC:35:71:48:12:45:26:85:82:AB:07:E2:72:54:13
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4e:cf:43:ef:73:9b:be:29:11:74:64:4c:c8:f8:cb:9c:ea:
57:d6:43:31:93:ae:34:91:4a:a8:07:0a:96:5f:40:9f:67:8e:
2d:ca:5b:f3:e8:2f:54:ef:9d:25:f9:7f:cd:ee:a7:c4:07:7a:
64:0a:92:9f:ce:d1:79:ac:7f:07:61:3d:6b:32:aa:d7:7d:3f:
51:01:88:df:ff:50:62:2a:e7:a2:7b:2e:ba:f5:c5:e5:c2:91:
c5:0d:41:a8:9a:93:e7:b1:3a:97:31:68:32:4b:6f:bc:6e:8d:
27:f0:d1:e9:fd:fc:c9:81:b0:7c:2c:9d:31:ea:d1:ea:1c:c6:
d8:f6:32:a6:cc:b4:a7:9e:50:7a:0e:b9:ce:12:e0:39:e1:38:
f1:49:56:c6:a7:11:4c:8b:aa:bf:7b:72:97:5e:ae:1b:50:ef:
19:c7:31:76:9d:f4:98:a5:71:7b:20:03:de:50:0b:9d:be:b9:
45:8d:ea:eb:3c:81:18:25:3a:1a:cf:8d:40:31:fb:0f:3b:5e:
14:00:74:57:5b:9f:27:9e:85:7e:3c:b6:20:30:ce:bf:ee:f3:
51:88:d1:29:d2:de:40:be:3c:d2:4b:39:22:9a:5d:f8:ae:06:
4b:36:fa:f0:3f:13:7b:57:dc:48:fe:59:06:3e:ef:bf:a8:ba:
2a:3e:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:34 2026 by rpki-client