
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: dEdmd2YtnWvxHjPoZ1gorIyZ/KNoPk90CZEA82EBnzw=
Subject key identifier: C2:5A:61:9C:A7:CC:51:A1:54:92:5E:14:2F:43:2B:C0:8C:17:AB:C5
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 01A0DA5FA2BFAD2EAD5F250F358BCDECBA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 1134
Signing time: Fri 25 Sep 2026 21:01:35 +0000
Manifest this update: Fri 25 Sep 2026 21:01:35 +0000
Manifest next update: Sat 26 Sep 2026 21:01:35 +0000
Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: YvbRvUgoDNc/oz5FNeK5c9YNktSk9nwdRPj+45BG7Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:a2:bf:ad:2e:ad:5f:25:0f:35:8b:cd:ec:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Sep 25 21:01:35 2026 GMT
Not After : Sep 26 21:01:35 2026 GMT
Subject: CN=c25a619ca7cc51a154925e142f432bc08c17abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:d3:db:67:fd:fb:6a:1a:a6:50:a0:5a:00:
90:43:77:1f:2f:a0:b9:ff:4b:52:2c:09:db:9b:66:
85:74:6f:d5:eb:55:e9:73:dc:4f:c1:ef:fc:f3:ba:
0d:ee:31:30:88:8f:36:86:57:d3:03:f5:26:b1:de:
45:b4:db:87:28:eb:27:47:a5:2a:52:93:a6:1a:51:
6c:91:39:19:3f:74:2d:49:10:b0:3b:ad:ac:d2:d6:
d2:89:93:97:54:79:68:c1:23:c4:00:bc:b6:41:11:
2c:21:93:94:79:cb:55:e4:25:71:42:3a:0a:53:a3:
2e:96:50:c1:f4:84:96:da:28:b4:eb:75:61:e5:f1:
0b:33:7f:16:9f:cc:3f:4c:ed:0b:f7:72:be:4e:2b:
b5:74:0e:fa:35:75:21:7a:ab:8d:63:29:b1:41:70:
51:ca:0c:b3:6f:cb:6e:fc:6e:df:ea:3e:c1:60:4f:
7b:58:ed:fd:2a:26:d1:60:97:5c:0a:86:c8:b1:77:
34:c2:f6:09:bf:94:d5:ce:ca:4c:a8:47:2e:f7:8e:
09:bd:60:82:6b:10:70:12:46:a7:8c:10:de:a8:76:
48:36:b0:c6:5c:ba:ef:3b:42:4b:66:ef:3a:b2:82:
06:0d:42:72:c4:a4:52:32:a0:6e:9d:d5:65:af:56:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:61:9C:A7:CC:51:A1:54:92:5E:14:2F:43:2B:C0:8C:17:AB:C5
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5a:16:4a:b7:47:35:3c:70:b3:39:2e:46:91:8d:51:3c:8b:
f3:b7:93:e1:cc:ad:a1:bb:31:f9:ce:57:d0:e2:e8:1b:7b:dc:
30:14:68:9f:c2:b3:69:0b:e5:e2:c9:17:75:40:2e:d3:cd:38:
76:76:ef:1f:72:2f:65:85:6b:c8:0a:7c:57:2a:d3:3e:78:d6:
17:5e:71:7c:2c:1d:27:ba:ae:43:0b:56:86:c6:9f:f7:6d:79:
5b:73:9f:91:38:e3:90:da:b3:5e:83:53:35:b7:70:fd:b9:45:
e1:ea:3d:d3:ef:74:33:5f:e4:03:b2:f6:5a:64:79:3b:45:d3:
e4:07:37:25:25:48:20:9e:a5:45:62:5e:ab:be:59:e3:68:c2:
29:83:9e:9a:0f:a5:07:bc:cb:8c:82:64:90:e1:7b:b0:7d:1e:
bd:79:c2:29:07:14:58:2e:88:92:2b:51:9e:3d:66:bf:4b:f8:
43:24:3d:53:b9:4c:eb:41:dc:3e:3f:7c:5f:35:c6:44:d9:43:
ac:3f:c2:c0:4c:cc:8d:30:c5:49:dc:73:32:08:cc:a4:59:36:
4b:d6:01:42:e7:bf:a3:05:e6:56:5f:0d:e3:e1:75:62:bc:d0:
f8:e5:e9:c4:25:6c:89:2d:a0:55:fe:1a:db:0a:ba:14:27:88:
33:9f:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:34:16 2026 by rpki-client