Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: 4r5c+4hYiiw5/rUessnFaX5uZh2rzAW+jxSe/MCxJN0=
Subject key identifier: 3D:D0:38:60:DC:C1:BE:F1:E9:3E:87:32:48:B9:E1:3C:5C:0E:78:EC
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 01A0D8DEDE93D5484BB5A69A2229418866A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0C02
Signing time: Fri 25 Sep 2026 14:01:19 +0000
Manifest this update: Fri 25 Sep 2026 14:01:19 +0000
Manifest next update: Sat 26 Sep 2026 14:01:19 +0000
Files and hashes: 1: Efm2bGrofvD9TKo6fR0hCwXyZZY.roa (hash: 8/kSaahEbvJMwKWK7IV2ZU7p4mFsDitwaZrJNwqZgFY=)
2: NDmwsiusftzbyMWBTWDJVW16t3w.roa (hash: vo2FWAXvXazwyLT6897L+Sclc/TCo4ut41EBl8NTSUY=)
3: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: 19E1e5b4vMMc9qD0hJiW8jXq4gm/l7ikFWdB9JYyrQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:de:93:d5:48:4b:b5:a6:9a:22:29:41:88:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Sep 25 14:01:19 2026 GMT
Not After : Sep 26 14:01:19 2026 GMT
Subject: CN=3dd03860dcc1bef1e93e873248b9e13c5c0e78ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:b8:ca:a6:ad:2c:1c:76:36:a4:11:dc:42:
96:06:4c:9d:b9:8d:23:c0:fe:b2:61:26:4c:cc:db:
69:3c:60:cf:f1:3d:3a:e0:4b:63:34:51:c8:a9:cb:
55:cc:10:ad:c3:77:ba:e7:da:41:79:59:e4:39:3f:
25:e7:5c:8f:d5:4b:e1:84:6d:d5:d4:6a:a6:f4:68:
ed:a0:4e:cb:02:08:40:25:30:d9:bb:40:da:84:49:
6b:93:ff:55:12:35:97:44:ac:4e:7d:99:e9:7e:bc:
f0:20:7f:48:58:f7:c3:3f:1e:2e:83:88:51:92:74:
ac:5b:50:1e:85:d1:b0:1e:c7:8b:1b:3b:2a:96:48:
4c:af:1e:59:2b:4b:15:98:ec:39:57:36:23:9d:f4:
2c:b6:f3:b5:af:20:44:25:23:01:d9:b1:58:d5:f6:
03:25:3f:c1:3a:4b:52:1b:13:c9:fb:db:ef:63:10:
26:bf:b2:1e:d5:8b:25:9c:9a:f8:16:69:6f:5d:c0:
f6:f6:90:4f:46:bc:ee:66:e2:84:3e:be:24:55:54:
cb:86:fd:a9:34:1e:b7:83:6b:a3:fe:a6:85:ef:bf:
af:91:2f:e6:d4:3e:02:a0:a4:fa:67:a4:a9:a3:a8:
05:42:2c:7c:bc:97:4f:e9:9c:0b:1c:2a:8b:99:34:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:38:60:DC:C1:BE:F1:E9:3E:87:32:48:B9:E1:3C:5C:0E:78:EC
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:72:0f:f8:83:54:df:cb:02:d4:5c:9c:cf:d1:29:f6:12:81:
4b:fc:8b:b2:c2:aa:e9:f4:cf:a6:c8:7b:1d:3a:30:57:f0:c1:
52:65:db:9a:c7:cf:4f:9b:f9:c0:31:38:d0:39:4d:52:d1:46:
89:1e:d1:21:08:62:c2:80:0d:7c:f5:38:65:f0:c5:02:3b:1d:
51:ac:4e:2e:51:02:a8:a1:55:66:17:e5:0c:92:51:83:8d:03:
5e:05:7a:fc:cf:88:e0:d6:04:c0:16:e8:1d:f2:c4:4b:70:99:
95:7d:2f:f6:c0:35:b5:5f:d7:c8:84:a7:d3:46:55:b0:3d:a3:
a8:83:bf:3c:32:ad:1d:86:f3:c6:9a:47:e3:bc:13:c1:0b:78:
a0:43:66:c2:a4:f2:0e:f2:83:96:6a:c1:20:4d:ad:a8:80:69:
73:30:13:01:5c:33:10:3c:98:79:2f:a5:a9:4d:a3:93:1d:20:
da:f5:4d:4a:6e:50:2d:c0:70:d8:1c:20:0a:58:84:ad:ef:5b:
af:8e:34:08:f2:01:84:4c:05:c4:5b:2f:e7:1f:13:3b:6f:f8:
a1:f1:e7:31:e6:9f:a2:9d:03:93:54:4e:a4:1c:0d:fa:84:c8:
ad:d6:c1:d6:23:12:0b:44:ff:63:40:ac:5f:47:bf:eb:64:e5:
d4:d3:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:12 2026 by rpki-client