Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: ie8c+lWU0AaFDBbM5aiZHEFUvIst0EYFYLP6agUStoM=
Subject key identifier: FD:B6:43:41:BD:D7:F5:27:29:CE:D5:43:AE:35:45:A9:18:17:FF:19
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019FA93DD2A227C4F3A52085B40B5A7C1274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0D9B
Signing time: Tue 28 Jul 2026 15:00:28 +0000
Manifest this update: Tue 28 Jul 2026 15:00:28 +0000
Manifest next update: Wed 29 Jul 2026 15:00:28 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: t83OCTmEc5u2sCpYfShvMOviZRVGa8HNpDuqjFQ9ZVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:d2:a2:27:c4:f3:a5:20:85:b4:0b:5a:7c:12:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jul 28 15:00:28 2026 GMT
Not After : Jul 29 15:00:28 2026 GMT
Subject: CN=fdb64341bdd7f52729ced543ae3545a91817ff19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d6:1d:18:3e:53:af:1e:8d:f0:fc:73:5b:e4:
ff:69:dd:21:01:a1:b2:57:45:bd:32:e7:54:49:cb:
07:d1:f3:40:27:e8:9d:a7:25:3d:89:aa:09:ae:11:
06:cb:34:03:ad:c0:c0:b3:7e:cc:52:ca:1f:2b:5b:
fa:a0:1b:e1:f5:97:6f:af:78:95:1a:0d:bb:af:b3:
15:eb:ee:54:c6:fc:1c:fe:e9:cd:99:b6:a0:40:40:
24:57:6b:fa:76:dd:dd:28:a1:a9:2a:58:a9:2f:91:
98:65:b8:c7:3a:32:f6:7a:6e:ad:a5:b7:08:80:b6:
16:a3:f9:ec:de:75:01:ca:6a:9a:88:67:59:fb:10:
0d:26:91:4e:5e:75:d1:47:c3:a9:a6:cf:4c:65:e7:
e5:11:fc:5a:be:56:a7:22:c8:9a:88:0a:e3:4e:0b:
6a:e1:de:bc:d6:1f:41:7a:76:77:32:63:d5:7d:b4:
5d:92:91:0c:43:79:f8:3f:20:da:c7:7e:fd:12:89:
4a:f3:6b:c2:14:17:9f:99:a0:bb:c5:d4:36:c0:1c:
0f:bf:97:89:2c:cc:91:5d:a9:e7:44:2b:e1:a7:17:
69:67:09:9a:ab:e5:f1:f1:9a:d9:2a:3b:48:d7:e0:
bd:52:35:2d:a8:4b:2b:25:57:48:85:57:99:bf:44:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:43:41:BD:D7:F5:27:29:CE:D5:43:AE:35:45:A9:18:17:FF:19
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7a:ff:ee:72:d3:d4:4c:34:3b:36:57:46:ee:c4:3b:7a:92:
a3:8c:fb:a1:b6:6e:98:27:cd:3e:33:9e:05:54:87:20:49:92:
bb:71:2f:96:81:a3:27:1f:3a:2e:87:52:8c:fe:9f:88:38:b6:
23:39:d3:51:33:06:18:84:e3:d7:2e:5e:e1:5f:ae:a0:55:7f:
e7:2e:56:99:f6:39:5d:25:3a:0c:6c:a0:7a:73:b3:76:2e:12:
4d:81:bc:6a:61:46:ed:4a:b8:6d:42:89:95:e1:c7:81:c5:f8:
22:1f:9f:e3:ce:4e:b2:d2:0e:3c:e5:34:ec:4e:6b:2a:e7:20:
c4:05:f0:ee:f9:21:4b:82:a9:dc:f5:9f:f4:ad:64:99:12:56:
53:32:4b:1b:4c:56:c9:0f:a1:e6:65:bb:99:4f:02:bc:b7:95:
49:d0:28:48:f5:d0:7a:18:0f:56:45:97:86:5b:c6:76:15:cd:
7f:28:fc:25:a7:cd:28:24:48:60:2c:67:d8:f7:28:0d:07:62:
a4:e4:4e:23:9c:14:b6:be:24:30:5e:e6:f2:54:a5:e5:fe:64:
86:ee:c3:48:71:c6:c3:95:fd:2a:4a:ad:b2:86:6b:34:57:cc:
82:b6:6f:23:0a:b7:68:3d:2c:c3:97:01:30:90:52:5c:86:66:
c5:99:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:53 2026 by rpki-client