Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: q8h/paD8Y7rk9aFjFd4C5yD2CH3t8deJGE8aYdhJEjk=
Subject key identifier: DD:FD:79:EB:2E:04:81:29:EB:CE:4B:D4:B8:D9:96:A2:42:F5:18:79
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019FA7867C977F4A12F4A24962145E68DE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 138F
Signing time: Tue 28 Jul 2026 07:00:36 +0000
Manifest this update: Tue 28 Jul 2026 07:00:36 +0000
Manifest next update: Wed 29 Jul 2026 07:00:36 +0000
Files and hashes: 1: YvVGQcutlJrA2jMyatSGsdl5Rr4.asa (hash: 2RRUWDSNMNA7Ca+6SbUofA2wtJxLYK6StHpkMxrAOxI=)
2: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: m5/EXW7jW2IqIJCx1ua2NX0IsAcPBdK349esWAtVap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:7c:97:7f:4a:12:f4:a2:49:62:14:5e:68:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Jul 28 07:00:36 2026 GMT
Not After : Jul 29 07:00:36 2026 GMT
Subject: CN=ddfd79eb2e048129ebce4bd4b8d996a242f51879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:eb:1d:4b:b0:ab:fc:2f:55:e4:3a:4a:cb:
1c:2a:f0:d1:71:64:48:c8:be:6e:34:16:6d:ae:bd:
28:5f:d4:33:4c:c0:18:7e:42:70:3a:ba:55:50:31:
4c:52:48:e5:9f:01:61:42:d5:92:d1:7d:ae:4c:0a:
f8:87:79:8d:4b:2b:67:2c:96:e7:8f:d2:2b:ac:0f:
c9:2a:b8:a9:13:34:8c:c2:1f:f1:ec:a9:9a:ae:0a:
23:25:ee:22:8b:77:99:68:a9:2b:f8:cc:f3:f0:4f:
64:77:d0:3b:ac:d6:82:49:60:89:a2:b5:28:e5:61:
ef:86:3f:78:28:9d:59:aa:a0:4a:d4:3f:85:a1:fe:
5b:85:12:b4:6f:81:ba:c7:04:08:d0:1f:8a:45:69:
d4:29:29:a9:2f:90:5b:49:c0:8d:a4:35:ae:81:a1:
a3:a6:e9:d4:fd:b4:92:74:15:76:81:51:3e:72:f6:
e6:80:10:02:8c:47:c3:07:72:22:f6:46:cc:17:64:
03:f4:a0:9d:a7:bc:3d:ca:52:c4:8f:d1:bf:70:4f:
b2:93:8b:a2:c7:16:93:6c:b7:74:3e:b2:86:4f:21:
5c:c2:b9:24:3b:93:62:57:60:7a:99:dd:6e:43:a7:
73:d0:bc:d5:fb:d6:64:6f:38:b0:46:c2:6b:40:8f:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:79:EB:2E:04:81:29:EB:CE:4B:D4:B8:D9:96:A2:42:F5:18:79
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:f9:13:43:85:e7:10:69:88:91:f4:30:04:6a:78:f0:a3:
3e:9c:e9:1d:2c:0f:67:1a:25:cc:d1:5f:86:5f:d6:60:7d:43:
91:54:df:fe:09:48:2e:ce:1f:a0:a8:dc:18:9a:a1:c1:4a:b2:
a5:d6:aa:26:c4:88:fa:45:f1:61:09:d6:86:be:37:07:80:2d:
9a:33:99:8b:75:39:50:af:9f:cb:0d:a2:c5:be:97:59:bb:cf:
fb:d3:fe:bf:27:5c:77:a7:c6:e4:39:30:15:b3:65:e5:62:da:
14:7b:ba:61:d6:a5:43:9e:4c:4c:32:1e:0c:cd:f2:1a:3f:f3:
72:04:33:7c:27:81:49:c8:b2:98:f3:6b:8e:0d:2b:25:66:1d:
27:b4:a3:49:7a:b7:e3:a6:79:ea:5d:a9:0c:f4:b1:f8:78:92:
87:76:7a:12:8a:8b:a6:3a:eb:4c:62:e9:f7:25:40:94:cc:10:
4e:62:71:68:65:d4:95:a5:41:a3:45:a8:11:87:52:29:cd:2c:
2f:20:2e:e8:e6:80:25:27:36:10:78:f3:67:21:30:0f:f1:54:
90:44:1c:d1:a6:76:e7:57:35:e3:c1:88:a0:22:63:9b:53:31:
14:e9:6f:f1:c9:94:95:f6:6c:91:f2:e2:c2:da:64:ee:43:36:
15:fa:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:28 2026 by rpki-client