Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: wUo6vzsaIA10ubjoCWoRSEt/6r9nyG95LTAKwVaQU68=
Subject key identifier: 17:55:F1:D8:C8:8D:91:EF:7B:D2:ED:01:7F:45:50:01:C2:18:07:54
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 019D9A06F883174F12EC505C236E1E35FBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 0F85
Signing time: Fri 17 Apr 2026 06:00:41 +0000
Manifest this update: Fri 17 Apr 2026 06:00:41 +0000
Manifest next update: Sat 18 Apr 2026 06:00:41 +0000
Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: dgCFI+1MybeMoS7Nao7AjBV2nyHtSXP9r6RFKZjK0+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f8:83:17:4f:12:ec:50:5c:23:6e:1e:35:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Apr 17 06:00:41 2026 GMT
Not After : Apr 18 06:00:41 2026 GMT
Subject: CN=1755f1d8c88d91ef7bd2ed017f455001c2180754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:e3:a6:9b:33:4f:48:a7:3c:51:b1:7e:66:
24:5a:a4:a5:d7:6e:d5:f0:3b:94:3b:34:6a:59:be:
68:8e:24:6c:8a:c3:1d:97:2a:20:22:20:f1:b5:2f:
a3:71:79:e6:d9:8d:2d:61:08:31:ea:ba:39:c7:0b:
5b:50:52:65:55:f8:f9:9c:13:f0:08:e8:5f:e6:92:
f9:44:4b:4a:14:a2:65:c6:72:57:71:ef:2d:84:16:
01:ce:b3:f5:2e:e5:e6:39:a3:29:28:05:2d:2a:cd:
e9:68:7e:85:68:bd:59:f2:18:e5:5a:f5:97:ee:07:
e2:15:b2:66:48:d1:4a:7b:08:15:63:f3:b7:9c:52:
9a:b6:7a:b7:d0:ef:30:a7:05:8c:fd:4b:e8:ab:09:
c5:cf:1d:7d:fc:7e:85:56:41:80:ba:34:7e:2f:59:
ac:11:b1:93:f2:27:27:68:c7:a0:c1:41:b3:59:ba:
af:11:04:72:0f:33:27:f1:02:b3:ce:45:11:7a:37:
c8:cb:a7:43:6f:e9:81:95:5e:81:05:1e:c5:e5:0a:
63:ca:2b:32:36:17:30:13:27:5c:c3:07:2e:87:f2:
f6:82:f7:60:a7:3b:59:05:44:d6:ac:b8:52:e4:ab:
7c:41:b1:34:64:ea:03:5c:a6:cd:56:9c:ca:01:12:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:F1:D8:C8:8D:91:EF:7B:D2:ED:01:7F:45:50:01:C2:18:07:54
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:85:22:18:3e:3d:d8:83:8f:40:95:e0:57:a6:e4:e3:51:3b:
25:09:e1:e4:a0:66:37:d1:14:1c:f8:9a:bc:84:8e:c8:42:ac:
8d:db:d6:7d:b3:d5:de:fe:40:7f:55:be:3e:35:ad:c1:9c:17:
0b:75:2b:0c:73:25:7f:60:af:56:d5:e0:a7:2f:5e:39:76:85:
3d:36:60:81:f7:90:4d:1f:2c:3b:84:20:ee:bc:30:51:44:48:
da:ab:4e:6d:c9:ab:7c:d6:6c:4a:c8:e8:29:51:a0:b9:ab:f1:
76:e1:7b:bf:73:00:2f:db:36:08:54:6a:1b:3e:40:bb:ae:83:
6a:2f:d3:3b:48:44:4c:11:03:6b:98:f1:87:52:5d:e8:50:49:
bf:ba:42:0a:01:f7:b3:10:a1:67:e7:67:1e:d9:7c:14:5d:57:
f5:5c:cd:04:06:7f:63:d6:b2:ad:27:31:3e:e3:4e:bf:31:b7:
3f:f7:7b:3d:00:72:af:cc:65:f0:10:70:fe:ef:d1:26:d3:b9:
1c:a9:3f:f7:ea:44:0a:76:05:3d:96:58:b5:61:aa:78:97:d8:
ab:3f:28:d0:ac:84:b3:ca:95:33:62:dc:63:93:02:bc:02:1c:
24:ca:2e:4a:e3:2c:05:96:db:91:c2:52:70:f4:24:32:df:f2:
8e:bd:3e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBviDF08S7FBcI24eNfukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1
MmJiOTQwHhcNMjYwNDE3MDYwMDQxWhcNMjYwNDE4MDYwMDQxWjAzMTEwLwYDVQQD
EygxNzU1ZjFkOGM4OGQ5MWVmN2JkMmVkMDE3ZjQ1NTAwMWMyMTgwNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc3jppszT0inPFGxfmYkWqSl127V
8DuUOzRqWb5ojiRsisMdlyogIiDxtS+jcXnm2Y0tYQgx6ro5xwtbUFJlVfj5nBPw
COhf5pL5REtKFKJlxnJXce8thBYBzrP1LuXmOaMpKAUtKs3paH6FaL1Z8hjlWvWX
7gfiFbJmSNFKewgVY/O3nFKatnq30O8wpwWM/UvoqwnFzx19/H6FVkGAujR+L1ms
EbGT8icnaMegwUGzWbqvEQRyDzMn8QKzzkURejfIy6dDb+mBlV6BBR7F5Qpjyisy
NhcwEydcwwcuh/L2gvdgpztZBUTWrLhS5Kt8QbE0ZOoDXKbNVpzKARJxEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdV8djIjZHve9LtAX9FUAHCGAdUMB8GA1UdIwQY
MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt
YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk
LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIUiGD49
2IOPQJXgV6bk41E7JQnh5KBmN9EUHPiavISOyEKsjdvWfbPV3v5Af1W+PjWtwZwX
C3UrDHMlf2CvVtXgpy9eOXaFPTZggfeQTR8sO4Qg7rwwUURI2qtObcmrfNZsSsjo
KVGguavxduF7v3MAL9s2CFRqGz5Au66Dai/TO0hETBEDa5jxh1Jd6FBJv7pCCgH3
sxChZ+dnHtl8FF1X9VzNBAZ/Y9ayrScxPuNOvzG3P/d7PQByr8xl8BBw/u/RJtO5
HKk/9+pECnYFPZZYtWGqeJfYqz8o0KyEs8qVM2LcY5MCvAIcJMouSuMsBZbbkcJS
cPQkMt/yjr0+JA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:51 2026 by rpki-client