Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
File: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft (raw, json)
Hash identifier: la4wkpfJ5fHVw685Ng3lxFB3U7NYbHUp6/iAeaITmhs=
Subject key identifier: 59:85:11:08:93:97:A0:AB:16:0F:4A:9C:3D:0A:2E:24:C2:99:9D:F6
Authority key identifier: 52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
Certificate issuer: /CN=5259796c5f60c55501e458008611623b5049d479
Certificate serial: 019D37C10841A002AAD16DCDFF5C2E7FD2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
Manifest number: 02AA
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl (hash: lDG2GAq7ZOqtyAyDDq+bq7Rj0ZP5XTnEVi+gj3fNAZY=)
2: nOWuyvy4DH6k1__anLzqIvUWrnI.roa (hash: FWTcgomuo2Jmq9gwKEXbH5ieQJwMr6YdtSlD/W2xnbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:08:41:a0:02:aa:d1:6d:cd:ff:5c:2e:7f:d2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259796c5f60c55501e458008611623b5049d479
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=598511089397a0ab160f4a9c3d0a2e24c2999df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:aa:74:fe:dd:d8:49:0a:c7:e5:f9:1d:53:
3d:5c:e6:f0:76:c2:4e:42:cd:53:14:fd:ec:41:73:
10:04:a1:e0:19:a8:fb:52:e2:30:c6:a4:ae:d3:6a:
17:51:01:01:0f:ea:f6:ba:43:9e:35:c5:11:86:2c:
17:c7:42:78:59:c8:e2:a8:1d:0b:50:f1:dd:9a:27:
18:8e:f7:f8:79:9d:c1:f9:5f:22:24:c2:56:d4:20:
f2:07:b5:24:b9:d5:c2:35:10:1b:82:c1:73:ae:b8:
b6:a0:9e:79:bb:d0:f0:e1:10:96:f2:34:38:bc:cd:
d5:63:8b:68:98:f5:af:1f:d6:67:a0:9b:05:c1:86:
b3:36:e3:dd:78:01:18:4b:78:50:c4:2a:b6:56:59:
6e:7b:4d:7c:a7:5f:e4:ae:20:89:69:9b:1d:4f:0c:
86:32:5a:99:11:60:2b:ac:cd:4c:53:d2:06:27:aa:
02:0b:e6:69:e4:72:4d:56:85:3d:69:f0:87:97:04:
1b:93:d2:cd:31:58:cb:9e:e7:df:62:86:16:36:40:
1f:23:bd:b8:2d:98:d9:75:fc:1f:1c:c7:a6:9e:65:
d1:8f:84:8c:a1:cf:7d:a0:c6:5b:24:77:63:f1:fc:
14:42:be:16:a8:b3:f4:3b:e3:ca:ee:0c:48:92:91:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:11:08:93:97:A0:AB:16:0F:4A:9C:3D:0A:2E:24:C2:99:9D:F6
X509v3 Authority Key Identifier:
keyid:52:59:79:6C:5F:60:C5:55:01:E4:58:00:86:11:62:3B:50:49:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fae05c-9a1e-49b8-8046-e8bbb5519236/1/Ull5bF9gxVUB5FgAhhFiO1BJ1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:dc:20:b8:4e:c6:13:25:6d:36:81:ad:c3:8f:96:d8:84:
dd:2f:c0:ab:fb:c7:e9:69:67:03:5b:3c:0a:b2:4a:24:36:f9:
a9:6b:f2:31:5f:5f:ab:fb:28:72:a5:0d:b4:a0:d8:fa:62:6a:
c1:2f:39:58:ca:c7:be:4b:c7:5d:4e:f7:9b:61:4e:aa:fc:3b:
64:e6:3a:5c:83:01:ba:aa:c5:b5:b1:3f:b2:cd:dd:bb:77:c1:
37:cb:5b:8a:a8:e0:f9:a6:93:be:03:7e:cb:84:ba:13:19:37:
59:58:06:a1:3c:b8:76:8e:83:12:51:ed:51:47:23:b4:e4:23:
f4:f1:a0:0d:8b:3a:a1:ec:58:ac:be:c4:2f:05:a7:d0:e1:e7:
30:cc:79:63:6e:f4:0d:0f:00:64:18:54:b4:16:dd:16:43:01:
5d:3f:c0:ac:05:bc:0a:38:10:a3:1a:5c:e0:9b:ab:95:c3:8e:
cf:96:8a:00:09:fa:71:b0:4b:6c:c0:3e:91:ce:44:47:51:35:
57:79:d1:ec:e3:00:a9:d9:c8:40:a2:f5:d8:a5:b0:d4:66:88:
e9:1a:cc:da:81:e8:4e:23:53:55:55:ba:49:5a:c6:b0:e7:1e:
50:18:46:83:2c:11:d6:d1:66:7a:ed:17:c6:3c:d0:3c:54:23:
42:1f:43:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:39 2026 by rpki-client