Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: Gv66u1eHlX22g8FfZS1Bi0vwyB/4KW/t+6rbOi+Xmho=
Subject key identifier: 48:E2:B4:F1:69:21:1B:A8:82:79:C5:50:8B:9D:60:30:7C:88:42:5D
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 019D9AE2CCFA0BB0EBBADABA3C9FF34A8E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 10:00:47 +0000
Manifest this update: Fri 17 Apr 2026 10:00:47 +0000
Manifest next update: Sat 18 Apr 2026 10:00:47 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: ZjxrLKKYUreu7se5jnRopVaqx1oLjrTtreCTzxe0qnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:cc:fa:0b:b0:eb:ba:da:ba:3c:9f:f3:4a:8e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Apr 17 10:00:47 2026 GMT
Not After : Apr 18 10:00:47 2026 GMT
Subject: CN=48e2b4f169211ba88279c5508b9d60307c88425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:43:df:43:49:36:42:f5:39:5c:4d:30:dd:
bd:aa:ca:0f:1f:b8:22:45:24:e0:50:51:f3:07:86:
ea:19:fd:96:cb:38:54:2a:24:ca:7d:80:2e:e3:62:
60:45:a2:e3:3d:ac:66:bc:e6:79:7c:40:77:45:91:
27:54:a2:aa:00:e8:b9:ce:0c:f6:2d:39:74:73:4d:
60:9a:02:46:f2:12:56:24:6e:76:57:09:bf:24:75:
b1:de:72:de:2f:b2:71:05:8c:0b:c2:d6:3c:f6:bd:
f5:59:70:99:bc:4c:55:f6:aa:55:73:6c:50:c9:b4:
7b:31:8b:2c:71:d9:50:35:e3:54:8c:bb:fb:95:95:
6a:14:6a:f0:77:ec:64:d4:fb:25:8c:b4:1d:96:20:
b0:b5:cd:33:c0:a6:cb:85:a3:18:a7:2c:08:e9:58:
af:86:0c:1b:f0:34:88:f6:0f:86:38:9d:3e:c8:89:
30:25:b7:2c:4c:1e:53:b9:da:ee:82:0f:95:a4:e7:
a8:e0:9b:0c:c5:10:d5:a2:11:35:3d:33:2d:b5:50:
bb:bf:64:69:3e:d5:11:1f:e0:a9:65:0c:95:e3:10:
fe:e6:68:9b:7a:65:a5:a1:da:e2:ea:7f:68:5c:1f:
62:98:f1:7d:52:5a:35:e0:a7:43:ec:4f:a2:3e:35:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:B4:F1:69:21:1B:A8:82:79:C5:50:8B:9D:60:30:7C:88:42:5D
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c7:3f:31:c7:ab:1b:a5:4f:7e:fc:bc:15:7c:f1:6e:dd:96:
6a:1f:73:03:24:7a:76:82:4a:40:f6:77:04:ef:5a:c4:09:e8:
76:0b:fa:2b:90:75:b0:2b:ac:40:95:f7:88:f9:de:09:e4:85:
01:00:78:d7:eb:59:87:e3:8b:cc:1d:a8:a0:22:f5:03:5f:95:
73:80:54:ae:86:3c:2b:f5:c9:49:07:1a:79:84:8a:fe:37:51:
1e:24:f6:ff:4e:10:e6:5c:75:9d:4c:73:ea:ff:d7:f3:33:ac:
a7:85:22:16:55:a1:c9:4a:58:55:2c:58:0b:3d:e5:a1:7f:b3:
5c:ab:69:ba:1e:95:20:ae:2c:03:cd:c2:ba:2f:b2:76:cd:c1:
ca:ab:ed:33:97:a0:d4:30:32:d4:2e:bc:70:ea:41:ae:11:a9:
53:7a:61:3a:5b:6c:4c:83:47:f2:d3:ae:26:7b:ac:b4:5e:80:
6d:6c:6d:f0:b5:ca:3a:ef:ad:ff:a3:f0:03:98:49:fd:14:8b:
af:63:0f:44:e6:9a:e4:92:47:ad:dc:70:f0:ce:25:18:96:24:
44:b1:a3:77:04:73:36:d3:55:1c:9a:fb:de:e7:d4:bf:50:6c:
c1:f9:d7:16:55:02:fb:0f:90:22:eb:c5:5c:f2:49:43:20:91:
bd:cb:58:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:32 2026 by rpki-client