Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: /nF4XjuYAofhEaHosaIej51/UPC64vgE92UCSQ1Px/0=
Subject key identifier: 9A:C5:42:A4:FB:7A:C0:C9:D3:F8:0D:6E:5E:10:B7:E0:96:54:44:35
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019D9AE299FF7BCB07FAAF24B786FDD11350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 149D
Signing time: Fri 17 Apr 2026 10:00:34 +0000
Manifest this update: Fri 17 Apr 2026 10:00:34 +0000
Manifest next update: Sat 18 Apr 2026 10:00:34 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: nKBnL4Ie/w0kZbd26Ai9s1wP0rY3qQSwkkTrGeR2dOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:99:ff:7b:cb:07:fa:af:24:b7:86:fd:d1:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Apr 17 10:00:34 2026 GMT
Not After : Apr 18 10:00:34 2026 GMT
Subject: CN=9ac542a4fb7ac0c9d3f80d6e5e10b7e096544435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:e8:57:3f:ce:ec:57:df:01:00:66:78:68:
ba:c3:4a:85:1f:c4:d4:1c:25:e3:6e:5a:db:b6:62:
11:14:11:5d:46:e2:7e:cf:66:d2:e0:2f:ef:39:ee:
7e:b9:d0:fb:ea:ea:fd:ca:8f:17:fb:e8:63:95:85:
db:25:0f:c6:d7:2a:eb:f1:9e:3b:c3:d5:2b:93:ee:
18:b5:d7:94:e5:3b:4c:73:d9:b4:73:d9:3b:08:57:
64:0c:8a:d8:8c:40:38:88:08:5a:70:23:0e:a3:6a:
8b:e4:23:bb:7e:0e:c4:a6:1d:c7:fd:5f:cb:4e:07:
af:93:b7:ff:60:69:db:2a:2b:90:7b:28:d6:d2:b7:
88:3a:00:06:51:0b:ae:66:a6:3e:cb:9e:c8:3f:5c:
05:6b:4e:41:92:a1:6f:65:58:b0:5d:a6:0e:8a:dc:
2e:08:39:67:62:49:0b:d8:e0:09:df:fb:2a:05:42:
db:92:9d:b7:dc:59:ae:7c:09:c3:12:81:fa:b9:5c:
d0:d1:a7:8f:0c:16:12:f1:66:74:50:1c:4f:8b:3d:
ce:0e:12:be:f2:eb:cb:b3:70:d9:cd:e5:d7:e3:4c:
64:a5:35:5d:6b:f5:0b:f0:db:c7:ef:42:fa:69:96:
22:ff:9a:87:3b:58:7f:b5:d8:8b:e7:f0:88:05:6b:
d9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:42:A4:FB:7A:C0:C9:D3:F8:0D:6E:5E:10:B7:E0:96:54:44:35
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6b:83:81:d6:67:0c:a3:dd:8b:85:d4:1c:57:67:d1:a6:53:
68:c1:de:6c:1d:3b:b2:ae:af:aa:a0:25:76:6d:a7:d3:d6:cd:
55:c6:d9:92:73:23:b9:a8:ae:f5:67:1e:29:6e:ab:d1:c6:c2:
e8:91:d9:10:f0:10:7e:20:20:65:0a:dc:5e:62:ad:24:72:fc:
ea:f2:00:fa:6d:97:09:15:0c:a4:42:0f:5c:81:16:7b:47:c1:
82:00:72:8d:7e:4a:fb:20:37:6a:eb:70:cc:45:b3:5e:2b:a0:
e7:86:98:e4:fa:b8:bb:65:0c:74:e6:5a:c3:b1:0b:64:c2:60:
de:61:5b:2f:99:02:ea:18:0c:74:0a:74:c6:fc:20:8f:f9:20:
56:d9:d5:ea:eb:b9:e4:26:2f:01:c7:6a:5c:99:5e:af:47:96:
80:f4:7f:e0:03:69:77:70:ed:91:63:18:8b:5c:b5:6c:40:9b:
1b:7b:42:83:c7:91:f4:56:96:c9:c6:1e:01:70:e8:85:4a:c6:
4d:f4:a9:38:3d:e3:ec:53:e8:55:81:5d:89:97:b4:68:ea:81:
86:f2:e6:5a:fc:5c:04:8d:5b:fd:b7:ef:69:32:b0:e2:72:4c:
b1:08:58:6c:d8:64:83:f2:f9:0e:6f:bd:6e:fe:95:1d:31:b6:
ba:5b:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:41 2026 by rpki-client