Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: O3aNWahZeT422pfCEDnxquPM6Co9/mgZWFdLZiBHank=
Subject key identifier: 9A:5D:BD:2A:CB:DD:A1:8D:5A:13:9E:3B:AD:82:6C:01:3F:1C:20:EE
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019D9AE33B2490E25B97639AC5DB6B2B6E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 127F
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: yfqAFzR4UimfLjr5hRS2+uI2G93tX7LnCnIyDi6cRKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3b:24:90:e2:5b:97:63:9a:c5:db:6b:2b:6e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=9a5dbd2acbdda18d5a139e3bad826c013f1c20ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8d:f3:e3:02:1f:5b:17:4d:1d:31:00:9a:93:
00:d2:41:cb:72:01:ec:6d:42:58:d7:b8:0e:92:7a:
e9:ef:81:2d:77:ac:89:a3:f1:36:5c:a8:c6:7f:3b:
f2:d7:d8:85:71:fa:aa:25:05:1f:79:ff:82:c1:1e:
57:84:0f:31:2c:b9:f4:a2:bc:f5:ed:1d:e1:19:75:
de:6f:b6:40:39:e2:98:3b:b3:17:11:44:d1:16:35:
50:dd:a1:71:68:fb:5b:fb:19:4b:14:d5:8a:dd:09:
cc:cb:7b:f9:c6:b9:b7:1f:59:4e:bd:c8:ae:05:92:
e0:6c:d0:c8:b8:51:12:2e:f9:bc:fe:7c:93:83:8e:
a2:37:b4:eb:d1:07:fb:0e:31:90:f1:c4:fc:9f:d5:
ed:89:7c:3a:38:68:b5:c2:61:de:ea:91:20:ee:1d:
a3:e8:07:b3:36:91:17:d1:7a:b3:f0:ca:4a:da:3d:
d6:35:d9:f2:0f:32:57:3c:66:5b:fc:53:04:51:92:
b7:91:32:d8:12:b4:fd:6f:d9:50:12:d4:f1:80:a1:
0c:ef:3a:4f:80:2a:f0:d3:5e:24:99:04:c3:f0:d3:
0d:0d:a7:b0:af:6f:4f:7a:12:44:ec:4e:d1:92:b0:
ac:a8:be:4b:12:bf:1a:6d:3d:6b:fe:ab:ee:ce:98:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:BD:2A:CB:DD:A1:8D:5A:13:9E:3B:AD:82:6C:01:3F:1C:20:EE
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:2f:5e:ba:b1:3e:66:1f:a7:a9:e7:75:5e:39:96:36:94:
c5:1e:10:b8:f7:ea:e9:78:e5:20:a1:1f:13:16:7b:95:db:71:
f7:98:c4:5b:da:4f:42:b1:3f:a8:fe:29:37:f6:c0:94:39:02:
44:4f:f7:09:bd:a6:46:cb:82:34:40:0d:6c:1a:ae:c7:81:ef:
3d:32:c6:4b:85:e7:d0:e5:18:2a:be:8c:74:a3:ef:d2:27:96:
0f:e1:b1:6b:45:6d:8d:85:02:9c:e5:f6:3e:ad:3e:ef:55:c9:
1f:1d:19:16:cf:f8:ae:92:90:c5:d3:1f:0d:51:5a:17:c5:7c:
e8:9b:78:b1:eb:57:d8:56:98:56:0b:76:f8:35:4d:d7:5f:83:
d8:56:df:2a:17:4c:14:43:cd:f2:c9:85:82:06:5c:b8:63:cb:
de:62:2d:76:19:e4:e3:a3:e7:28:c1:ab:95:00:d9:0c:c8:e2:
59:a3:0b:5d:8d:23:43:43:8b:80:1b:19:45:67:2c:3c:7e:9e:
5f:d8:a4:e4:4f:92:0f:04:8e:6b:03:d4:9a:a9:64:ab:ee:b7:
93:bd:c7:fd:19:f5:27:81:fb:bf:f3:26:0a:9b:6a:ba:3d:02:
f6:91:0f:f1:2f:92:21:a3:f4:23:7c:23:c6:c0:4d:40:cd:2a:
f6:66:6a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4zskkOJbl2OaxdtrK24hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTNjYTE4ZTNhMDQ4ZDU5ZmE2Y2Y1OTY2N2NmZDM5YTA1
Nzk3M2UwHhcNMjYwNDE3MTAwMTE2WhcNMjYwNDE4MTAwMTE2WjAzMTEwLwYDVQQD
Eyg5YTVkYmQyYWNiZGRhMThkNWExMzllM2JhZDgyNmMwMTNmMWMyMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y3z4wIfWxdNHTEAmpMA0kHLcgHs
bUJY17gOknrp74Etd6yJo/E2XKjGfzvy19iFcfqqJQUfef+CwR5XhA8xLLn0orz1
7R3hGXXeb7ZAOeKYO7MXEUTRFjVQ3aFxaPtb+xlLFNWK3QnMy3v5xrm3H1lOvciu
BZLgbNDIuFESLvm8/nyTg46iN7Tr0Qf7DjGQ8cT8n9XtiXw6OGi1wmHe6pEg7h2j
6AezNpEX0Xqz8MpK2j3WNdnyDzJXPGZb/FMEUZK3kTLYErT9b9lQEtTxgKEM7zpP
gCrw014kmQTD8NMNDaewr29PehJE7E7RkrCsqL5LEr8abT1r/qvuzphv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpdvSrL3aGNWhOeO62CbAE/HCDuMB8GA1UdIwQY
MBaAFLpTyhjjoEjVn6bPWWZ8/TmgV5c+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMt
MWIyMDQ1NGEyODYyLzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82ODhjZTAtMTBlYy00OTM3LTk0NDMtMWIyMDQ1NGEyODYy
LzEvdWxQS0dPT2dTTldmcHM5WlpuejlPYUJYbHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHwvXrqx
PmYfp6nndV45ljaUxR4QuPfq6XjlIKEfExZ7ldtx95jEW9pPQrE/qP4pN/bAlDkC
RE/3Cb2mRsuCNEANbBqux4HvPTLGS4Xn0OUYKr6MdKPv0ieWD+Gxa0VtjYUCnOX2
Pq0+71XJHx0ZFs/4rpKQxdMfDVFaF8V86Jt4setX2FaYVgt2+DVN11+D2FbfKhdM
FEPN8smFggZcuGPL3mItdhnk46PnKMGrlQDZDMjiWaMLXY0jQ0OLgBsZRWcsPH6e
X9ik5E+SDwSOawPUmqlkq+63k73H/Rn1J4H7v/MmCptquj0C9pEP8S+SIaP0I3wj
xsBNQM0q9mZqAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:41 2026 by rpki-client