Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: rhOiWdILpB35dFB+5uJBLGtqsg1A7qC/xiQ6KeXyx8o=
Subject key identifier: 41:9B:7A:36:28:7F:E5:17:7F:AB:08:04:2D:57:F1:45:96:FD:3E:F3
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019CAD5A077D665F958DDBE73923F5DB15A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 1422
Signing time: Mon 02 Mar 2026 07:01:24 +0000
Manifest this update: Mon 02 Mar 2026 07:01:24 +0000
Manifest next update: Tue 03 Mar 2026 07:01:24 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: l2Y9LVeYPMKgo57NYFbMiqeLI8fTmqAZFk554ifnPVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:07:7d:66:5f:95:8d:db:e7:39:23:f5:db:15:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Mar 2 07:01:24 2026 GMT
Not After : Mar 3 07:01:24 2026 GMT
Subject: CN=419b7a36287fe5177fab08042d57f14596fd3ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:f8:98:1e:6c:5f:43:ff:7a:26:fd:52:85:
a5:5c:3d:57:bc:d7:68:be:5d:40:78:d1:fb:c3:59:
8d:38:b5:28:bb:c2:59:14:d2:0a:cf:13:79:48:d2:
ad:a8:ef:51:64:f3:a3:fe:d7:8d:a2:49:7b:26:0b:
b5:6f:c5:45:53:79:fe:a4:48:df:ad:6a:19:9e:50:
e8:55:de:37:25:d1:3e:ae:15:19:f9:fb:d7:c7:a1:
54:6b:24:fc:dd:52:e1:bf:4f:fb:13:81:9f:d9:b1:
8f:9e:b3:18:53:09:6f:d4:6b:86:39:7b:29:fb:4f:
e1:20:a2:ea:9d:07:53:34:f9:0f:76:c8:b9:dd:65:
80:fb:e8:ab:bd:ff:f3:9b:35:e1:dc:4b:a9:9a:fb:
20:e8:fa:ac:2f:83:14:38:2d:1d:b2:a7:99:57:7a:
ef:0d:ed:22:eb:ac:59:cf:aa:b9:7f:d1:b2:25:90:
c7:83:6c:79:7a:85:36:ac:59:f8:ca:0e:d9:43:15:
f6:85:c3:9d:d8:7b:28:73:dd:f1:40:e0:f7:a5:d5:
06:b9:86:51:78:37:a5:9e:55:9f:9a:e8:db:1d:f9:
15:91:d8:56:c6:ad:34:5f:23:1a:a9:97:ab:68:95:
d3:63:d9:3a:02:fe:88:96:76:9a:5e:f7:78:6b:a3:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:7A:36:28:7F:E5:17:7F:AB:08:04:2D:57:F1:45:96:FD:3E:F3
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:86:35:53:c6:da:e0:bb:de:66:fa:25:1a:b9:86:43:d9:6e:
9c:ef:25:dc:09:81:03:d6:a2:ff:aa:aa:16:38:f1:e8:d2:e7:
14:00:72:6c:72:bf:5e:24:bf:37:41:2f:d8:24:bf:32:ea:cc:
a2:6f:ac:8e:8f:cd:0b:bf:94:5a:e9:c7:c4:84:6a:0c:97:45:
88:8c:8d:a0:36:58:77:d5:6c:12:9d:9c:b3:33:1e:3e:36:f4:
a2:af:ae:be:d3:c7:0a:8c:8d:13:a2:88:a4:11:15:b6:d0:fe:
f9:37:ca:38:43:67:7c:20:cf:26:96:16:d7:b5:b9:12:f8:f0:
4e:c6:50:f3:5d:2a:c7:f2:b6:ae:97:27:3a:00:0c:1b:23:ba:
61:87:0f:0f:33:f3:70:67:04:04:78:0a:73:64:61:46:40:2d:
4f:32:69:33:f4:f4:0a:01:c5:84:99:10:71:49:ec:5a:56:0a:
d5:d5:36:b5:d8:c8:79:90:aa:5c:3e:09:26:24:0e:53:0b:4c:
a6:9c:fd:01:3b:3f:06:cc:5f:64:25:d6:44:70:56:57:20:48:
81:3e:e9:33:75:5c:6d:f4:93:1e:fc:dc:88:6f:aa:21:33:fd:
b4:27:23:5a:db:5e:75:71:a8:5e:1f:6f:d5:0f:81:8a:a1:b4:
72:f9:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:31 2026 by rpki-client