Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: iAQht5kwLxEBZtxB3ssPfjT1RqphLInV+54aCzzdOg8=
Subject key identifier: DE:29:5A:14:02:6F:F2:76:E3:DC:65:1C:75:5B:AA:8E:6E:99:65:C7
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 01A0CAEB6FAD67761F4BAF5C54EAEB0B6EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0E31
Signing time: Tue 22 Sep 2026 21:00:22 +0000
Manifest this update: Tue 22 Sep 2026 21:00:22 +0000
Manifest next update: Wed 23 Sep 2026 21:00:22 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: tcmSWKMDcI0xqAf37zH++Xcp5etujSreLisDb75twmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:6f:ad:67:76:1f:4b:af:5c:54:ea:eb:0b:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Sep 22 21:00:22 2026 GMT
Not After : Sep 23 21:00:22 2026 GMT
Subject: CN=de295a14026ff276e3dc651c755baa8e6e9965c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:1e:7e:23:3a:5e:44:90:08:17:92:a1:4a:
c8:bc:88:a0:a0:f5:eb:d6:3e:18:68:fd:73:b0:d1:
26:32:13:b2:93:b4:e8:91:16:ba:a4:71:00:f2:b2:
4b:91:70:d1:09:9b:5d:79:ea:aa:db:38:a0:2b:1b:
3d:6c:cd:71:00:c2:ce:f5:c0:b5:fc:69:a2:3d:84:
7d:c1:8b:16:cc:54:bb:7f:c5:59:64:17:70:b7:0e:
c7:70:08:7f:bb:c9:c1:a4:94:e2:85:f2:cc:04:81:
8c:ec:05:ad:8c:17:59:82:dd:95:6a:29:a3:e8:08:
71:9a:94:aa:96:1b:b0:a1:80:7a:22:7e:40:15:17:
eb:38:a1:e2:25:a6:85:5f:24:2f:4a:9b:4d:f8:f8:
46:a1:d0:13:55:41:cb:2d:75:21:ea:09:a8:db:80:
71:1b:f5:fd:bd:2c:e7:14:8d:b4:82:63:0c:42:a4:
99:8a:5e:1e:65:3f:91:fc:11:85:22:0b:11:da:9d:
97:f1:42:49:63:bf:cc:98:b0:9d:d5:97:6c:10:09:
d2:7f:b1:f5:fa:48:cc:1d:91:e2:9b:9c:76:c6:4d:
f2:ec:df:a1:13:50:20:16:8e:8d:e9:23:52:bc:04:
5a:8c:75:68:01:22:5d:94:bf:f5:48:11:9c:d3:08:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:5A:14:02:6F:F2:76:E3:DC:65:1C:75:5B:AA:8E:6E:99:65:C7
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:4b:fd:91:2b:c4:bc:de:e8:a8:22:c4:88:16:e9:f0:8b:
9e:b3:da:08:13:ab:e1:45:17:90:34:6c:24:e5:3e:61:4b:f6:
04:90:26:c1:bc:08:1a:9b:1c:fe:ef:64:9f:be:2b:f9:90:5e:
80:7b:ee:25:ae:1c:83:c2:30:3e:f0:ce:a9:d0:fc:62:ef:98:
88:ef:52:ed:2c:de:7f:92:69:f8:3f:c4:b2:2e:71:6b:c1:42:
12:0d:85:2b:57:7f:9a:05:72:e9:ad:0d:58:ab:46:24:fc:60:
37:1a:bc:af:17:fc:0c:f6:7d:7a:3f:26:d5:79:45:25:2e:6e:
97:bf:04:66:45:78:39:31:fc:34:40:22:e4:e8:f8:fc:7d:fc:
24:e4:ad:c1:89:fc:68:da:e9:cc:58:0e:ab:3f:60:ba:0c:07:
3d:dd:9b:d8:3f:94:07:5d:37:7d:db:bc:46:28:8c:11:80:87:
94:5e:04:d8:0f:45:4b:67:89:ca:28:07:3b:e5:4a:10:e7:46:
1b:9b:e1:4e:36:2a:d0:f3:ef:72:08:e4:84:1c:4e:31:81:c8:
91:c4:fb:ca:37:47:c7:50:44:a7:b6:32:02:73:7d:fd:b5:07:
74:e9:46:ce:e8:78:c6:ff:f8:58:85:02:b9:c3:6e:f2:43:52:
d0:8e:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:09 2026 by rpki-client