Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: 54GfncXZ1TTeZRJOOlvsiEIKCO9OaBHbv46kB580QCk=
Subject key identifier: AC:74:02:B1:6D:27:65:55:81:CA:B0:E1:62:20:2D:E5:49:4E:BC:03
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019CAD59B877C8EF38E3594CF3D0BD0B838C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 1204
Signing time: Mon 02 Mar 2026 07:01:04 +0000
Manifest this update: Mon 02 Mar 2026 07:01:04 +0000
Manifest next update: Tue 03 Mar 2026 07:01:04 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: ICo7J+7fSssoJ8pJqhtSoqx4MI7IMLJYXRQIF5Fmn1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b8:77:c8:ef:38:e3:59:4c:f3:d0:bd:0b:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Mar 2 07:01:04 2026 GMT
Not After : Mar 3 07:01:04 2026 GMT
Subject: CN=ac7402b16d27655581cab0e162202de5494ebc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:04:ad:f1:74:7b:62:4c:27:09:02:45:fb:
91:81:cb:c2:5d:ee:8a:d7:87:77:b0:0e:16:71:1c:
9e:8f:48:96:f0:a2:34:98:b2:12:85:60:49:8a:09:
03:b2:f2:f5:e7:37:e5:71:88:3a:07:48:9f:c5:98:
b1:e1:9d:09:d0:98:a2:92:4d:a8:db:e0:f4:1d:e9:
74:b4:b8:8b:82:19:40:23:42:54:34:28:be:66:95:
4a:9d:8b:66:bc:00:41:cf:30:14:b8:4c:d2:15:8d:
71:73:1d:ee:c1:7f:64:82:c1:ad:b9:7b:21:b5:0b:
90:b4:c5:0d:e0:67:fd:5c:31:6b:e0:a0:c5:8b:a4:
2b:c3:a8:15:c5:6e:82:88:ad:3b:75:bc:60:7e:32:
d1:48:a1:50:b3:10:bf:bf:da:f9:bf:25:81:2c:bc:
c9:2b:14:68:d8:16:33:d3:fe:00:f6:4b:5d:95:68:
7e:8d:7e:7c:5f:ee:85:ac:2c:cf:e9:37:c0:c0:9b:
28:fb:17:03:f4:ed:5b:b7:9c:fd:06:a9:f8:35:80:
f3:18:c6:64:62:49:2f:1c:0b:5e:d9:d1:75:04:f2:
8a:6b:bd:d7:84:6c:42:a1:d9:5d:30:85:6f:81:77:
77:cd:1c:df:24:1c:0f:1b:47:0b:eb:e6:54:f5:30:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:02:B1:6D:27:65:55:81:CA:B0:E1:62:20:2D:E5:49:4E:BC:03
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:23:a5:ad:15:62:b0:8a:1e:f7:85:8c:7d:b0:07:d0:2a:59:
63:ef:3b:75:e4:fb:da:5f:d8:98:e6:7b:59:fb:4a:38:5d:78:
bb:bf:71:5f:36:ff:12:0d:ab:22:72:86:7e:61:e9:2a:6f:4f:
44:48:f4:20:cc:96:f9:1c:c2:63:3e:a1:41:e7:9f:f0:eb:04:
f9:e3:7d:e3:a2:9e:d1:87:2b:87:8c:e5:b2:7e:93:10:7e:7d:
fb:72:86:ff:a5:38:6f:7e:44:d6:6a:16:25:91:6f:b2:94:4f:
fc:e8:c0:60:fe:00:b1:66:e3:b0:7f:49:55:7e:20:1b:55:41:
e6:38:1f:8c:98:c1:fb:cc:c5:8a:22:a6:c5:4e:12:4f:48:6e:
8e:f1:d4:95:f8:57:06:bc:e0:00:ad:03:f3:af:2d:51:ec:0e:
0b:8b:52:d1:6e:7b:dd:58:09:f0:fc:55:b3:c6:67:3e:06:0c:
51:96:aa:99:50:cb:67:b1:d3:31:f9:83:37:6b:99:f4:2b:d5:
d8:31:06:d3:0b:82:3d:00:ac:1b:8d:98:09:6e:4d:ae:c7:bc:
1f:ee:52:75:57:6d:81:f4:e1:5e:2f:1f:f9:8e:12:ec:71:ee:
2b:16:f5:da:04:c1:ce:34:f9:80:c0:9c:97:bf:42:9f:b4:3b:
55:6f:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:33 2026 by rpki-client