Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: +R5at8LNtK6vu9CnGoZX5S280fESiBtkW0a8nLPv9to=
Subject key identifier: 27:E1:E5:6D:40:3D:78:E1:54:EA:AE:4C:57:72:5F:0E:A7:69:3F:C1
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019CAA218505CED697EF4291326C2D355A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 06A4
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: W019hPBGihmbOx1R1lB9HYzA4Us0lxpiULs4pDBKJpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:85:05:ce:d6:97:ef:42:91:32:6c:2d:35:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=27e1e56d403d78e154eaae4c57725f0ea7693fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:86:69:29:28:4f:49:fc:bc:ed:64:fe:18:
e4:51:e9:ab:3c:bf:01:65:f1:43:a6:ca:c4:c1:7e:
cf:45:67:09:6e:d5:de:eb:ae:6a:38:39:71:d3:44:
38:c2:55:dc:f0:fd:38:89:bc:85:b8:03:30:c1:ea:
ed:0a:a7:66:0b:dd:93:5d:53:c1:b3:9a:fd:7f:51:
1f:57:b1:47:b9:42:de:03:8d:e3:1c:76:67:b7:6c:
e1:6a:b5:2c:95:cd:1b:5f:f7:4a:e7:b1:51:f0:00:
e1:42:11:9b:1e:02:43:e1:a8:ae:54:50:1a:ae:9b:
c9:6c:93:e6:bb:16:db:a8:89:06:1d:07:4c:9d:6c:
9e:92:04:0c:d6:66:67:3c:02:e4:2d:5a:4a:24:e9:
31:c6:5b:9a:72:fb:0d:b1:81:8d:14:9a:7b:2a:c4:
91:5b:7f:da:5a:f2:fe:87:41:d1:ce:00:43:94:57:
18:59:27:fd:0f:28:6f:bf:c9:d3:94:d7:17:6a:ce:
05:32:bc:b5:c7:6e:eb:37:a1:8d:5c:62:b9:4a:77:
3d:69:ec:e4:7e:8a:b8:d3:63:ad:af:e0:a2:6e:5f:
2b:6c:35:20:d5:3d:2a:da:c2:ae:f1:b6:e3:78:bd:
49:c2:c4:68:f9:4b:53:da:cc:28:5f:75:10:18:c5:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:E5:6D:40:3D:78:E1:54:EA:AE:4C:57:72:5F:0E:A7:69:3F:C1
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a2:68:23:10:f4:de:11:56:83:2c:7c:c3:5a:ed:8e:16:55:
b4:92:54:b4:b0:d3:2f:ac:fa:ea:97:c4:61:d1:98:ad:aa:6d:
72:26:20:df:8d:a0:f6:40:c8:a7:82:46:d1:c9:1a:f5:18:e5:
3a:fa:ca:17:e5:7b:c1:19:c2:ba:c3:26:97:8e:51:66:4e:7c:
c1:9e:41:39:ff:52:b8:17:02:22:b2:2a:e5:ad:26:ef:04:39:
15:e0:c2:84:1c:58:db:e0:c3:36:75:11:37:f2:b2:b3:e6:7b:
38:ee:99:60:22:0c:34:d6:aa:37:a5:7b:5b:75:22:ab:da:50:
33:9a:de:0a:f1:2e:ad:8a:45:e7:dc:91:04:ad:1b:54:85:b6:
8d:3a:63:93:e8:0a:b5:44:97:47:d4:57:01:22:9d:0b:16:11:
a8:b5:79:a1:83:c6:31:bc:75:ac:b4:f0:ef:da:9c:33:63:d4:
d4:c8:ba:41:6f:5c:2b:f9:6a:16:ee:ff:e2:e6:a4:58:92:03:
13:9b:0d:d8:aa:64:94:61:82:cb:cd:c4:0b:20:6e:fb:94:31:
ec:cb:41:90:f3:87:ac:21:b2:71:0e:00:a3:35:de:e7:57:b2:
37:3c:fb:69:bc:0e:8c:56:a3:0c:ea:8c:5d:3b:3a:d8:36:a2:
05:7b:cc:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIYUFztaX70KRMmwtNVoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh
NDk1YzEwHhcNMjYwMzAxMTYwMDQ5WhcNMjYwMzAyMTYwMDQ5WjAzMTEwLwYDVQQD
EygyN2UxZTU2ZDQwM2Q3OGUxNTRlYWFlNGM1NzcyNWYwZWE3NjkzZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhmGaSkoT0n8vO1k/hjkUemrPL8B
ZfFDpsrEwX7PRWcJbtXe665qODlx00Q4wlXc8P04ibyFuAMwwertCqdmC92TXVPB
s5r9f1EfV7FHuULeA43jHHZnt2zharUslc0bX/dK57FR8ADhQhGbHgJD4aiuVFAa
rpvJbJPmuxbbqIkGHQdMnWyekgQM1mZnPALkLVpKJOkxxluacvsNsYGNFJp7KsSR
W3/aWvL+h0HRzgBDlFcYWSf9Dyhvv8nTlNcXas4FMry1x27rN6GNXGK5Snc9aezk
foq402Otr+Cibl8rbDUg1T0q2sKu8bbjeL1JwsRo+UtT2swoX3UQGMXGYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfh5W1APXjhVOquTFdyXw6naT/BMB8GA1UdIwQY
MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et
ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2
LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqJoIxD0
3hFWgyx8w1rtjhZVtJJUtLDTL6z66pfEYdGYraptciYg342g9kDIp4JG0cka9Rjl
OvrKF+V7wRnCusMml45RZk58wZ5BOf9SuBcCIrIq5a0m7wQ5FeDChBxY2+DDNnUR
N/Kys+Z7OO6ZYCIMNNaqN6V7W3Uiq9pQM5reCvEurYpF59yRBK0bVIW2jTpjk+gK
tUSXR9RXASKdCxYRqLV5oYPGMbx1rLTw79qcM2PU1Mi6QW9cK/lqFu7/4uakWJID
E5sN2KpklGGCy83ECyBu+5Qx7MtBkPOHrCGycQ4AozXe51eyNzz7abwOjFajDOqM
XTs62DaiBXvMwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:31 2026 by rpki-client