Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: jvWpo4w6dNC4hpmwuKODqiQV1IgXIE+ChUyPXC3TBCs=
Subject key identifier: A6:AD:0C:8C:7A:6E:90:1E:58:4F:C4:23:FF:2D:17:10:71:6E:99:C8
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 019D3865FA9E3E0D2750487B530EE233D8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 124C
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: xf1oE3FkokuvG2OoeInq7EmvOah9qHmf8SPDhkCQLg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fa:9e:3e:0d:27:50:48:7b:53:0e:e2:33:d8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=a6ad0c8c7a6e901e584fc423ff2d1710716e99c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:0d:21:45:dc:37:f7:1f:3c:5d:0d:eb:19:
1e:5d:a1:4e:65:c4:b4:9f:29:db:43:c7:22:22:18:
ac:ed:32:54:e0:5e:5b:5e:6e:a6:54:ee:c1:90:e6:
c8:b7:d3:fd:4f:47:b4:7f:93:91:3a:0c:b7:f6:39:
24:54:f9:a6:9c:2d:a2:38:e2:f6:54:f7:c7:1b:23:
35:2a:22:12:6b:ed:fc:2c:fb:40:12:b0:8e:b1:85:
bc:19:1b:0a:9c:18:1f:92:66:cc:8d:1b:7a:1a:d8:
34:04:c5:f2:cc:f5:46:05:1c:ed:a9:ba:a3:b0:62:
00:fe:83:4f:67:77:07:2b:b0:18:30:e1:55:b6:97:
97:64:4f:85:d9:e7:85:f6:fc:bd:8f:bf:7e:e2:e4:
66:41:6e:4d:9c:4c:df:d6:67:ad:b6:1e:80:1c:a7:
16:32:f7:3c:7a:be:da:f3:46:03:1b:56:de:f8:75:
5c:08:23:d6:c3:d4:ba:ad:2e:63:a7:e2:29:eb:81:
8b:19:d6:67:43:c2:98:ef:86:ec:f7:7b:3b:c8:cf:
27:58:0d:f1:14:94:63:a4:ff:b1:e9:4d:79:f8:55:
78:9a:8c:f6:39:1d:68:d0:c7:e0:af:54:57:0f:32:
81:41:77:f3:79:d5:05:69:b7:bd:b6:30:8f:92:63:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AD:0C:8C:7A:6E:90:1E:58:4F:C4:23:FF:2D:17:10:71:6E:99:C8
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:3a:11:08:c1:eb:4a:db:d5:71:3d:79:52:b4:91:12:6f:
09:bd:49:68:6d:2c:02:bf:11:0b:83:74:e6:67:d9:31:a5:b6:
a7:00:81:8c:1a:01:9a:2f:e0:a4:dc:95:b0:a8:e9:c5:ff:a0:
22:fa:74:ae:cc:63:fd:a9:8c:36:c0:18:f0:ed:e3:4b:cc:77:
3c:4b:e1:82:3c:60:e6:af:68:82:06:16:0d:18:9a:26:c7:bd:
8a:18:a9:77:20:35:59:10:77:19:19:61:6d:a2:ee:5a:fc:a2:
a6:42:2f:7d:9f:b1:ab:01:df:b8:04:81:dc:48:4f:5c:c5:9f:
94:f9:25:5b:06:8c:a1:e9:9a:80:f1:88:ab:60:01:51:a4:6e:
fa:50:3c:c8:52:be:5e:0f:ff:18:80:ef:6e:88:77:3b:28:36:
4d:0a:a3:25:b2:e5:96:2f:b0:7b:4a:d6:34:7e:6e:78:d9:91:
3d:59:76:69:69:25:7f:43:9c:9c:5a:29:73:f2:55:fe:b9:4b:
48:a4:d8:da:bc:1e:29:c6:9e:50:c6:2f:be:a6:b7:ce:31:bc:
04:5c:f8:14:dd:75:e2:3d:84:53:72:39:40:6c:33:2f:15:8a:
ba:9d:86:c7:dd:77:26:17:1d:df:e8:2c:69:1a:53:8f:a5:98:
9d:8d:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:33 2026 by rpki-client