Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: 3Br6kxM8le91f+Wdin4SHXALMyyqOlGv+hn4byLoH2s=
Subject key identifier: 12:D8:56:97:4D:A7:63:28:9D:BF:A0:C0:08:4E:5D:3D:79:21:36:9E
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 019D9A3EE6EE4C5B9ABACA89B487E90C1572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: 6XyzM7C6U0Eg9plO23xksot9cNE.roa (hash: U0mBP+sO6b8RXHmP69AVtgeTMj6pgRFEww7l1hgISoc=)
2: rxMNMquNmnBAETPpjSPsz8xiWiw.roa (hash: SPkA6S4HqDNpxWy9E9LRWb/XpKpbwajfBQGXEVH96cc=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: CklasYqFpzNUgOK2YC83I33RO6umoe/OI5BTzPhS+bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e6:ee:4c:5b:9a:ba:ca:89:b4:87:e9:0c:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=12d856974da763289dbfa0c0084e5d3d7921369e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:df:34:3f:85:60:f0:b9:5e:01:dd:63:21:
16:18:18:b4:d5:6f:11:af:b6:ea:ca:22:a4:c5:e5:
db:19:4d:49:0c:06:9b:82:23:4d:7e:33:5c:50:26:
47:5c:8f:70:ec:d3:01:02:7a:60:80:01:f1:dd:eb:
4d:72:81:a9:58:69:28:23:b8:b7:57:c0:6a:96:0c:
21:6d:64:80:55:b7:9d:5d:d2:bd:a9:c7:63:b0:9d:
f5:e2:9d:8f:69:3b:85:41:97:20:c0:17:bd:3f:ed:
c3:3b:23:27:75:52:d8:9d:c2:d3:be:e0:e7:43:c9:
0d:04:9a:c0:ad:a5:b8:81:82:8b:41:c6:07:87:61:
09:2a:8b:21:71:b0:97:11:0c:95:fc:29:46:bf:5b:
f1:d6:8c:ca:59:12:f4:80:06:90:7d:13:48:0c:77:
7d:0e:4a:e5:bd:05:ea:5c:96:50:c5:0f:24:18:e7:
cc:6b:6b:fa:2c:45:c9:86:30:92:3b:03:f2:e8:33:
74:fc:0c:c2:3c:9f:12:6c:79:68:b2:6c:a3:93:0b:
14:97:f9:d7:ff:1e:96:3b:7d:0f:ff:4f:e4:94:d0:
dd:09:51:00:94:3b:27:4c:26:e7:b4:8d:db:d8:d1:
ae:c8:c1:3d:02:e1:36:a0:3f:13:be:22:9f:d1:76:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D8:56:97:4D:A7:63:28:9D:BF:A0:C0:08:4E:5D:3D:79:21:36:9E
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:57:d0:21:a6:19:d8:01:4f:2e:b2:af:e2:59:f4:26:d1:28:
48:aa:b8:73:ca:8e:d1:2c:51:0f:29:c0:78:57:8e:af:30:d6:
6a:c0:4f:56:8a:bf:c5:2f:3b:08:50:90:63:19:01:46:2f:3e:
28:5f:93:7e:db:9d:d2:79:85:10:56:75:63:fc:71:80:3d:25:
fc:89:28:3f:e2:4d:32:fe:30:9a:a0:49:87:1e:17:96:90:c1:
53:2f:d2:f1:d8:58:cf:53:01:a6:4b:ed:0a:ae:6f:7b:7c:e5:
42:f0:4d:db:73:f7:40:60:f5:81:97:a8:7e:14:78:f6:ad:4d:
68:3e:aa:90:2c:a9:d1:35:b2:7d:3f:aa:1d:ba:72:c1:c7:04:
ba:bd:9f:41:26:7c:5b:7c:4e:15:ad:c2:e7:75:af:b1:c1:1e:
d6:dd:46:39:27:92:b2:ea:7b:8d:88:f7:2e:28:e9:7b:10:3e:
f1:ff:43:ab:f1:07:dc:0f:8b:89:1b:28:f3:da:7d:61:c9:fe:
3b:d8:64:76:d6:b7:46:d6:60:fb:ad:ee:3c:8f:9e:4e:83:e4:
f8:45:6d:19:91:65:79:cf:dc:c7:f1:49:f3:21:47:3e:17:4f:
92:30:09:92:69:3a:29:88:f1:87:4a:8e:15:e8:02:0d:92:ae:
b2:d8:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:30 2026 by rpki-client