Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: yOGb8xKR6IAq1pEoSLlvY1DZxta/0m61rAS7X59yQqs=
Subject key identifier: 1C:F9:6D:2C:2C:46:41:69:4D:E6:85:EF:BC:09:CD:68:8A:B2:32:36
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 019CAB6B0AEC0EC458BBB3DD1AD1B0E41835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 22:00:44 +0000
Manifest this update: Sun 01 Mar 2026 22:00:44 +0000
Manifest next update: Mon 02 Mar 2026 22:00:44 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: 87+S9h+5VaTa/pRJM09+6mOPPSTBlRV1tmoQM+Gw5RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0a:ec:0e:c4:58:bb:b3:dd:1a:d1:b0:e4:18:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Mar 1 22:00:44 2026 GMT
Not After : Mar 2 22:00:44 2026 GMT
Subject: CN=1cf96d2c2c4641694de685efbc09cd688ab23236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:2c:40:53:46:56:86:c9:14:39:d0:57:94:
83:1a:f0:a1:a3:7a:66:6e:0a:d1:ba:ef:26:ec:c6:
79:0d:83:b4:47:44:4a:7f:93:a2:b8:f6:a3:0f:2c:
b4:8e:7b:ef:aa:e4:29:f4:ce:f3:8b:e5:2b:b9:f9:
b5:66:3a:cf:57:6b:cc:eb:15:3c:9e:1e:13:88:ee:
e1:0f:a7:0b:55:4c:39:89:ad:18:dc:6c:10:e7:c7:
52:a5:8c:30:12:38:fd:41:59:35:31:87:42:3d:e5:
d7:71:19:2b:ce:0d:a3:70:5a:ab:0f:78:53:b8:df:
5e:7b:fa:ac:46:bb:d1:a0:87:c3:7f:c9:f2:b9:d3:
6b:e5:a8:9f:e2:a1:87:b5:e2:46:b2:57:99:e9:aa:
3c:cd:4d:c7:4e:1e:12:07:b2:51:f3:d2:31:d7:43:
55:12:08:f1:ce:18:46:2f:6b:88:b3:1e:97:ef:74:
a0:a8:23:4c:f7:43:29:60:93:7a:6f:92:d5:3a:53:
ef:e2:6d:71:f6:db:9a:65:7e:34:a7:66:6b:a1:21:
c3:f8:f8:b8:9d:f8:e3:ff:8e:0e:63:ff:aa:3b:7d:
0d:92:89:98:a6:65:69:c2:ca:ae:6e:71:56:54:15:
3e:54:72:25:f3:8c:e8:b1:85:6f:09:e5:4e:61:06:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:6D:2C:2C:46:41:69:4D:E6:85:EF:BC:09:CD:68:8A:B2:32:36
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ad:de:55:d2:1a:3e:ae:0e:d2:67:f1:00:e0:d8:fa:ab:6f:
c3:2f:32:03:42:6e:d3:76:0b:3a:c5:51:55:d9:25:a2:f6:98:
57:d5:21:c9:b8:a8:e2:91:13:53:7f:38:a7:95:61:11:93:c8:
a3:5d:14:78:cb:37:1c:fd:33:0c:63:f8:68:0d:ae:de:69:95:
6d:24:72:58:e7:42:cb:d5:04:7b:89:b3:8b:e0:ef:05:ae:e4:
60:86:d7:ae:de:00:15:08:d7:cf:7b:b0:64:da:cd:a0:90:3e:
32:b5:52:8f:29:ee:e0:dc:ba:d1:a1:68:58:bb:df:58:22:61:
97:7d:0c:60:b5:11:09:eb:c3:9e:76:d3:90:04:a2:63:33:07:
44:31:45:26:9c:b5:d3:38:a2:d4:1b:31:4a:28:f6:30:d6:a9:
19:00:f4:7a:7a:fc:be:cb:92:73:6a:bf:d4:4a:45:53:1e:5c:
ef:1b:a0:15:4a:80:aa:76:89:3c:28:e8:17:ee:48:27:5f:01:
91:c4:3f:6b:b6:02:70:5a:ee:99:4e:25:a8:42:42:88:8b:9c:
dc:4f:02:33:7c:b9:db:73:fe:2a:6a:1e:63:6c:6f:65:96:f2:
80:72:f2:8d:5a:21:51:b5:ec:78:af:b3:3d:f0:fe:87:23:33:
4f:bb:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:02 2026 by rpki-client