Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: nKaxLPOXEJCtXZziq3E42LJwxnTDJwNio6nGHXAzj8o=
Subject key identifier: DB:AB:90:DC:CE:50:41:15:BD:8C:5C:AE:22:8B:1C:8F:34:16:18:49
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 01A18E2F9F4938DA09A74DA6A510E90C8033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 148B
Signing time: Fri 30 Oct 2026 19:00:47 +0000
Manifest this update: Fri 30 Oct 2026 19:00:47 +0000
Manifest next update: Sat 31 Oct 2026 19:00:47 +0000
Files and hashes: 1: YvVGQcutlJrA2jMyatSGsdl5Rr4.asa (hash: 2RRUWDSNMNA7Ca+6SbUofA2wtJxLYK6StHpkMxrAOxI=)
2: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: GPShaEonjZlED1aHJf6PMT74n4DDei62xOtigzwfwNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:2f:9f:49:38:da:09:a7:4d:a6:a5:10:e9:0c:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Oct 30 19:00:47 2026 GMT
Not After : Oct 31 19:00:47 2026 GMT
Subject: CN=dbab90dcce504115bd8c5cae228b1c8f34161849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:aa:1e:f5:0b:d4:79:4d:bc:8e:93:f9:47:
62:95:21:98:4e:ee:eb:88:02:87:f9:59:3b:0f:63:
75:e2:e4:8e:c8:2a:c3:c6:39:97:19:71:43:31:28:
eb:dc:12:45:3f:74:50:4a:25:db:66:6b:bc:0e:43:
b8:cc:59:cd:0c:56:c8:8c:32:2c:3d:f0:4e:ac:f1:
c4:55:e9:cc:57:5e:c3:27:1e:a0:5a:b0:54:08:ac:
30:02:39:21:b6:7a:cc:0d:89:a9:f2:40:0f:29:ae:
0d:ef:82:db:29:09:82:3d:5d:76:a2:6d:dd:b4:2d:
88:df:d6:bd:f0:bc:3f:10:23:2a:a3:78:e9:de:18:
e9:68:fa:cc:1e:2a:2d:ec:97:f9:9a:08:2f:e9:10:
09:e1:94:b3:11:42:7d:64:e6:f0:91:04:58:9b:79:
65:47:64:b9:62:68:5e:6f:d3:b9:55:12:46:04:59:
17:3b:45:ec:1f:65:0b:c8:8a:d5:e9:14:7c:b2:53:
2b:40:5f:c9:cb:ed:32:57:6e:7d:58:dc:f4:40:2f:
d3:11:0f:b9:a2:11:26:79:04:0c:62:66:13:f1:f4:
ea:4d:9c:fe:75:17:81:76:d9:c0:18:cd:c8:1f:3e:
dd:fa:4e:7e:af:e7:c4:ff:4b:f3:10:81:0f:7f:52:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AB:90:DC:CE:50:41:15:BD:8C:5C:AE:22:8B:1C:8F:34:16:18:49
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d0:e7:4f:14:da:7d:82:28:db:05:27:02:d2:d4:02:bd:15:
e6:92:22:36:da:12:55:12:cd:76:cf:d3:15:45:a9:15:a5:fa:
1e:93:eb:4d:20:cb:e1:e2:29:d9:7d:f7:b1:7d:7f:59:65:2a:
5d:0a:f5:ce:5e:a6:57:cd:c6:24:be:c8:47:83:6d:e5:03:a5:
f2:d9:32:66:ba:33:ae:5e:1f:e8:91:ca:77:06:b2:b8:a4:67:
66:a5:b9:91:d1:71:ef:fa:66:cf:54:2c:30:b0:ce:f7:fc:89:
cc:39:23:23:fc:b0:24:a1:be:1f:e0:e1:1f:77:e9:9e:2d:07:
af:7b:e1:b4:85:0a:b6:d0:89:09:2f:47:c4:eb:dd:35:51:5f:
49:f5:07:71:2a:94:ab:83:e9:6d:22:53:26:d1:ef:c9:bc:8a:
77:3b:e7:01:be:3e:25:20:e9:2d:66:1d:bf:6a:b7:64:cd:86:
7c:02:5d:0b:62:45:cb:7e:69:f1:ca:20:90:ac:b9:b5:6d:a1:
59:be:09:2e:c5:64:85:6b:83:10:de:7a:28:11:bb:4b:7f:2e:
ef:2b:68:46:17:98:8e:df:82:93:2b:48:1d:35:28:a1:77:82:
36:b5:6a:c3:a6:b1:94:a7:29:a1:74:7b:8a:13:f8:bf:9b:12:
79:91:5d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:22:41 2026 by rpki-client