Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: hMEToSVLKXFQJNw9erAu7lHBBe7uBRmQ0tKwb/YzI8U=
Subject key identifier: 92:A8:9C:2A:85:10:FA:B8:7D:88:C5:6C:05:3C:4D:6B:EA:60:57:AC
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019F10E4FFFF1B54C36D64AAEFF245D343CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 1341
Signing time: Mon 29 Jun 2026 01:01:10 +0000
Manifest this update: Mon 29 Jun 2026 01:01:10 +0000
Manifest next update: Tue 30 Jun 2026 01:01:10 +0000
Files and hashes: 1: YvVGQcutlJrA2jMyatSGsdl5Rr4.asa (hash: 2RRUWDSNMNA7Ca+6SbUofA2wtJxLYK6StHpkMxrAOxI=)
2: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: aNqDuw7g3UlPjbEmp6zWhTKP9Swy3MMWGfQuG8jScpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:ff:ff:1b:54:c3:6d:64:aa:ef:f2:45:d3:43:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Jun 29 01:01:10 2026 GMT
Not After : Jun 30 01:01:10 2026 GMT
Subject: CN=92a89c2a8510fab87d88c56c053c4d6bea6057ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:e1:31:ae:2c:27:b7:c2:17:66:d5:f6:ac:
36:c9:56:15:f8:95:89:36:d8:6e:ed:ce:b9:4d:22:
d8:1d:b9:4f:95:b7:1b:81:b3:3b:ec:27:d5:7b:e1:
d6:9d:cb:9b:85:da:56:f5:6d:db:5d:66:7e:95:7b:
d8:d7:da:2a:29:15:84:ea:a6:9c:8c:0e:a5:42:55:
c9:bd:c2:c5:ea:55:c3:40:d0:de:14:bc:ff:8e:f7:
a3:f0:a3:25:5b:56:b1:93:e2:5d:d4:5d:2d:5b:37:
0e:e1:c7:83:be:34:3a:e4:68:f0:a7:bf:fe:b0:11:
b6:bb:44:64:e9:21:90:d5:cf:ea:d3:a7:01:c7:69:
c3:b1:45:f0:c7:a3:c1:ed:bf:e0:52:85:19:16:d9:
8f:c2:42:2c:80:a8:7c:55:ee:b4:c3:6c:fb:4d:e2:
77:c7:b6:63:c8:ff:5c:64:5a:50:44:17:78:a5:e4:
df:07:75:04:28:15:db:e9:3e:e8:d7:12:a1:5e:1c:
dc:1f:fa:f1:c9:7d:d1:91:86:af:53:ce:40:5e:e2:
19:c9:21:18:f7:23:c9:6c:71:09:67:0b:67:2a:9c:
47:1d:ee:9d:52:21:24:29:0a:c2:f8:ce:0c:19:1f:
3e:88:87:77:b5:ce:be:68:6c:98:b8:35:ed:0f:7c:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A8:9C:2A:85:10:FA:B8:7D:88:C5:6C:05:3C:4D:6B:EA:60:57:AC
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3c:4d:05:cc:68:c5:76:15:b4:23:1a:92:a2:f3:ad:50:69:
e8:7d:8b:89:6c:97:4f:c5:a3:b7:14:dc:e0:11:70:5e:99:75:
0b:78:1c:f6:e2:9e:5b:79:b2:e1:7c:24:d6:8d:a1:2b:a1:8e:
d8:73:5d:cc:d5:f3:d6:ed:9f:68:84:8f:40:01:7c:fa:bd:5b:
5c:70:6c:b0:b5:fe:5e:d0:62:ec:d2:7e:36:d6:b2:cb:be:2c:
fc:24:8f:31:e5:7f:0e:61:65:1a:3e:20:38:d6:4c:ea:cd:d6:
c3:45:d1:57:72:a5:44:11:18:45:1b:62:5e:6b:ec:bd:4b:f5:
7a:f7:37:80:e4:20:b3:0c:ee:e3:ed:39:47:2c:7b:c7:51:c1:
7e:de:6a:b2:e2:d3:ae:81:4a:45:5c:ce:f6:bc:6a:59:d5:97:
1c:e6:0e:84:e9:f9:5b:a6:6d:02:3b:9a:b7:74:f9:66:28:98:
68:39:bd:f9:73:6c:a1:8b:c2:d8:b8:b2:86:6c:31:54:c2:f2:
2f:2f:41:18:b4:80:bf:6c:0a:ba:bd:22:2a:b2:af:bf:5b:34:
fb:89:7f:c0:ff:4f:ac:c1:58:05:87:27:ac:39:fc:64:4f:e6:
25:fe:6a:e6:00:ee:46:23:a3:df:b0:ff:39:df:e9:5a:f8:ab:
53:8e:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:08 2026 by rpki-client