Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: QVO7PF2q+EgfYXHO1sIHEntnFPPGlHewLS5j9pPpWUk=
Subject key identifier: 8F:BE:8B:DF:F5:A6:3F:EA:D7:67:75:FD:0F:28:F4:16:FB:A6:47:68
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 01A03A4C7F557A82FDD0A33D766775C15A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 13DB
Signing time: Tue 25 Aug 2026 19:01:26 +0000
Manifest this update: Tue 25 Aug 2026 19:01:26 +0000
Manifest next update: Wed 26 Aug 2026 19:01:26 +0000
Files and hashes: 1: YvVGQcutlJrA2jMyatSGsdl5Rr4.asa (hash: 2RRUWDSNMNA7Ca+6SbUofA2wtJxLYK6StHpkMxrAOxI=)
2: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: DMXbzpX1Ofcfjq0ZaxULEqxVx9V/TckEpxk9YKYkGQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:4c:7f:55:7a:82:fd:d0:a3:3d:76:67:75:c1:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Aug 25 19:01:26 2026 GMT
Not After : Aug 26 19:01:26 2026 GMT
Subject: CN=8fbe8bdff5a63fead76775fd0f28f416fba64768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:d3:46:5c:73:e2:33:df:07:4d:55:80:1f:
d4:b6:7f:a3:7e:66:06:02:94:38:c4:19:58:91:50:
af:cd:27:94:a0:ac:d8:9c:7a:28:69:2a:73:f2:11:
2f:47:a7:25:70:ac:1a:df:4c:80:ac:9c:e9:8d:0c:
89:f0:26:88:2f:d5:af:cc:d5:56:47:09:29:a1:f5:
8f:6a:37:4c:dd:fd:d9:44:7d:1c:7f:6c:56:ab:2c:
c2:2b:99:1c:2c:ce:3d:88:38:bf:d5:9e:34:21:ae:
ed:5c:40:55:53:79:96:6e:c0:68:38:1b:14:06:dd:
cc:8b:68:e8:3b:9a:41:3c:dc:45:79:12:96:18:84:
76:5d:d9:6b:a9:17:31:13:cf:c1:93:a6:b8:7c:4b:
b3:fc:d1:c2:ec:39:9e:e9:40:97:7d:b6:be:31:7f:
45:85:aa:9f:32:b4:9a:b9:31:8e:bb:53:72:10:f9:
0c:cd:3d:82:94:18:86:db:c6:38:c1:42:6a:5f:84:
e8:a7:24:8a:3d:ad:db:d7:ed:7a:f9:d2:e9:df:37:
bf:c1:6f:e9:f9:c5:7f:37:9a:17:c3:cf:e4:94:55:
51:66:ae:34:9b:c0:4d:8e:b7:28:0b:ea:ee:37:1d:
98:89:d2:0a:d6:b1:3a:82:61:43:09:31:9f:5d:08:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:8B:DF:F5:A6:3F:EA:D7:67:75:FD:0F:28:F4:16:FB:A6:47:68
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:30:11:a9:5d:b2:9f:90:d8:82:9b:a9:c7:45:75:b7:7f:0b:
8e:87:bb:23:9b:02:95:0b:fa:cf:4d:e5:55:ba:a0:24:18:3a:
20:a7:c1:90:06:d9:af:92:e2:4b:a0:32:c0:a0:80:c1:e6:11:
b1:2a:0a:55:33:2d:c1:94:60:af:c4:3d:cd:90:a3:65:68:e2:
94:5d:d9:9e:d3:37:df:fd:cd:0b:20:0a:d2:8c:a5:54:06:ee:
a1:82:03:de:65:06:9e:53:ae:49:7e:ba:3e:4e:09:80:5a:ad:
39:bb:e5:b0:34:f0:e2:42:e6:17:b0:48:94:38:32:82:3f:6e:
ff:0d:a3:71:4d:ea:38:b3:b2:0f:21:4b:37:c0:f8:b3:af:5d:
03:b8:01:16:c9:74:24:2e:d3:ca:83:86:e5:19:e2:a7:dc:61:
14:e7:cc:99:2d:25:b3:ec:f0:22:f4:bd:2c:7c:7f:e3:b4:c4:
bb:d3:02:d0:55:d8:49:a6:d6:cc:dc:fa:a2:7a:e5:6d:f5:49:
16:9c:2f:b8:d7:32:06:47:3e:7d:a5:5a:40:3d:8a:7d:9b:e9:
76:c0:30:8c:47:f4:d0:6e:97:70:c4:cc:19:c4:6c:69:2e:83:
2e:a9:19:ab:e3:a6:a9:54:ab:d0:27:2f:cb:2a:35:28:c5:cc:
e9:17:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:42:30 2026 by rpki-client