Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: SvVCbQ4F+rsUUe+LterymhlndAXQOIYKvfT+OZrDiTI=
Subject key identifier: DA:DE:62:EE:D0:27:C1:8D:05:3B:D3:37:BD:67:69:FB:43:71:33:D0
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019D984FED020D96753986EB3B683482A8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0C88
Signing time: Thu 16 Apr 2026 22:01:07 +0000
Manifest this update: Thu 16 Apr 2026 22:01:07 +0000
Manifest next update: Fri 17 Apr 2026 22:01:07 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: OTkosv1k8tQ1drZEwGZMfxSB1iOVTeykRTUjw6pJAN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ed:02:0d:96:75:39:86:eb:3b:68:34:82:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Apr 16 22:01:07 2026 GMT
Not After : Apr 17 22:01:07 2026 GMT
Subject: CN=dade62eed027c18d053bd337bd6769fb437133d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:92:6c:dd:b5:6f:d0:0d:13:4e:a1:54:70:
bd:35:81:72:82:89:d7:12:8f:52:be:37:3f:b6:d1:
1d:05:7a:16:27:b2:78:e8:3d:c7:7f:ac:95:b3:fd:
2e:50:55:00:65:86:81:b7:ca:47:7f:88:9a:c8:31:
e2:e1:6f:d6:c5:db:39:8e:87:8b:14:75:f6:9c:f3:
4c:ae:1a:cb:29:86:ce:ee:28:3b:75:7d:96:3b:76:
03:55:8d:49:2c:36:2a:fe:72:c6:18:01:b3:5d:02:
f3:36:f3:b5:f3:ac:b9:4f:77:b7:33:2e:5e:6e:77:
d9:56:19:3f:c1:9b:87:ae:dc:89:ff:e4:13:e5:a9:
d0:f0:57:a4:2c:c6:e2:9e:66:33:92:70:bf:ea:b1:
d4:37:47:31:ae:18:8a:bc:16:72:28:05:3e:30:8b:
36:3c:6e:b6:7c:fb:28:ef:f4:b5:58:ef:56:fa:b1:
0c:2c:7e:71:dc:00:bb:0d:e3:a5:67:33:fe:79:d6:
fd:5f:c0:36:dc:c2:19:7d:d8:62:2c:44:f0:84:0e:
2d:f2:1b:61:53:75:f6:c8:08:cd:62:d9:c0:d0:45:
13:96:0b:73:12:9b:3e:9d:b8:92:ee:d6:6e:a9:9e:
d1:38:7a:d5:5e:d6:76:1e:37:8e:3a:94:44:a3:c9:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DE:62:EE:D0:27:C1:8D:05:3B:D3:37:BD:67:69:FB:43:71:33:D0
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:86:08:97:4a:40:41:2b:fd:7c:ee:d7:62:66:db:4f:63:dc:
ab:bd:0d:8d:6d:e0:1d:d4:5a:fa:c7:4a:ab:6e:58:f9:45:f6:
2a:8f:22:41:0e:04:c6:dc:f6:27:85:a6:7d:d6:58:54:94:08:
f1:f9:5e:d8:4d:84:2e:52:a8:ec:72:a0:7e:6e:ea:52:60:e1:
60:5f:c0:63:99:b3:09:aa:3e:e0:48:67:86:03:c1:8f:75:e3:
9c:25:72:e6:06:a3:79:cd:c0:7f:84:19:43:29:3b:7d:09:34:
66:27:f8:d5:af:2b:d5:f2:de:ff:8a:a1:91:45:0f:6c:31:8c:
94:d5:83:19:57:d4:5b:8b:21:dd:50:5d:ce:45:39:ef:e3:f3:
30:52:a9:87:21:67:a7:2b:9d:da:73:6d:75:0d:21:68:6d:30:
39:92:22:85:5f:f1:bc:5c:60:47:d1:c6:ed:72:6b:7f:5d:4c:
c3:af:f8:03:89:59:ed:5a:9c:8a:9d:de:a3:6b:52:d6:08:b9:
08:94:99:06:e4:11:c7:dc:4c:42:82:79:38:77:c9:af:f4:a1:
f6:09:e1:5d:55:55:7c:a4:5f:7f:68:ec:d5:38:09:ac:a8:56:
63:52:3f:e2:2e:6e:3c:c4:aa:e9:f8:68:9b:d8:e1:f3:8b:cb:
9f:00:1b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:45 2026 by rpki-client