Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: jSd//AcRFAawnyM/7GMgvrCO/fYznffGVQJKBXVpJc0=
Subject key identifier: BB:66:DF:44:2A:2D:EA:2E:AF:69:74:2B:D1:63:B5:04:8C:79:CD:3E
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 019CAA8F9CD1EDBCF802295D84EED08AD4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 0F09
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: x8TWhHzu+P4zxKdSRhXNtcC4fx2KQ9yP/LBUrmjY5kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9c:d1:ed:bc:f8:02:29:5d:84:ee:d0:8a:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=bb66df442a2dea2eaf69742bd163b5048c79cd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:2a:8f:f5:fd:8e:83:4e:c0:36:4e:5d:e3:
0c:35:ea:b2:7a:81:65:55:51:0a:e7:03:a8:4b:90:
59:1d:11:39:6f:02:9a:3a:1a:8e:9b:8d:dd:15:92:
d8:21:ae:76:59:2f:0e:c9:e7:81:79:b6:ba:78:1d:
b3:00:3b:52:b2:e1:a4:8f:9e:61:b3:1c:14:99:41:
30:19:8f:03:7c:0b:0d:0d:7d:39:c9:27:dc:ff:9d:
4e:44:5c:22:ba:ab:ec:68:ca:28:3d:ab:c7:62:1b:
d9:04:70:9f:01:95:e8:f7:22:7c:ff:17:e6:7c:97:
70:35:4a:05:5e:26:da:a6:28:d4:c0:a2:db:9d:29:
c3:b4:a4:16:ee:e5:ff:94:85:2e:ea:42:c5:9a:44:
16:0b:87:ab:2b:0d:16:a0:27:8e:13:63:4a:77:81:
c9:87:54:9d:13:93:fb:a7:ac:a0:32:9a:d0:54:b3:
db:78:d7:c3:86:7e:c3:d4:1e:27:ec:03:b0:92:6a:
6d:88:f2:f4:3e:90:1d:11:5d:af:c5:03:73:76:94:
a6:df:2a:e5:3c:a1:18:cf:fe:0b:eb:6f:b3:ff:28:
fc:a9:01:24:e7:40:ac:0c:a4:41:de:0f:9a:08:5a:
31:37:16:bf:56:80:ab:f1:89:17:32:4a:b3:33:a3:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:DF:44:2A:2D:EA:2E:AF:69:74:2B:D1:63:B5:04:8C:79:CD:3E
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c3:52:40:1f:6f:0d:cf:d0:35:f8:44:59:46:a3:fa:e3:0f:
f3:08:be:0e:c9:22:1d:59:61:28:57:c7:62:44:ba:e2:33:78:
0d:fd:0d:3e:4c:c2:4c:4f:c5:74:99:70:ce:27:b3:00:ad:85:
36:0b:71:a3:d9:58:84:af:02:78:38:b9:4d:7c:56:ad:e8:48:
a3:da:84:39:f2:bb:db:0b:96:8e:98:ae:cf:d6:96:5a:02:55:
72:e9:f8:08:51:1b:95:74:33:87:ae:ac:c4:2f:27:13:d7:33:
0c:fc:e8:49:cf:f4:ae:7a:6d:60:e4:25:a1:a8:fb:51:2b:e3:
0d:32:56:4a:a6:03:f8:fa:71:6c:34:cb:39:0c:31:0f:39:0d:
5d:56:96:0f:47:09:03:68:b8:40:ef:c1:b9:de:91:b7:ab:a6:
cc:35:62:4a:d9:07:60:0d:67:9b:a2:3c:ea:ce:12:9d:f4:4a:
39:c5:dd:f9:ef:93:e1:67:43:7f:d7:79:9a:03:4f:19:4f:89:
0d:2c:d5:92:3e:c4:af:e6:e6:ff:9b:c0:4b:8b:15:7a:19:6f:
7b:aa:61:75:62:15:86:49:81:b1:a1:0b:18:5c:bf:bf:9b:35:
a0:5d:4b:15:d8:52:09:3d:3b:f2:b9:d8:ab:d5:93:b3:ed:79:
26:0e:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:11 2026 by rpki-client