Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: HysI/o9bSrvaxAMCq3/Pszyz0enxK9tjEk7qAWnv5fQ=
Subject key identifier: 9D:DE:60:2A:71:3C:1B:4B:75:36:D6:ED:8F:AE:55:16:7D:DE:CD:9C
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 019D389C13697862EFA6F2424D2A5B78D60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 0C12
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: sICtzvgHOfjE61zPkmdaObhuF_w.roa (hash: yLzVc8wYL4bjob1Nz0UNQRkDAIOchQwZ/HOQ+w5x5Ik=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: /sXKDGKuP1Bt3s3ldL/Rm7+aYo3gdBVIv6iky5JHdYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:13:69:78:62:ef:a6:f2:42:4d:2a:5b:78:d6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=9dde602a713c1b4b7536d6ed8fae55167ddecd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:dd:09:f3:31:cd:51:2f:f1:11:60:33:9a:
0b:51:cf:c1:5b:32:ce:a3:99:0a:ea:6e:c9:91:0b:
ce:6b:df:37:eb:01:39:9e:80:f9:2e:c2:f9:16:a4:
ee:4c:7c:ce:b5:85:6c:f7:e3:5b:6f:db:2a:3c:f2:
0d:fa:0a:f2:3b:83:8f:b9:01:df:62:bb:5b:0e:3b:
05:33:c7:5f:66:11:e9:92:9c:26:ee:94:e3:38:44:
4a:ed:13:0f:16:e9:c6:b0:1c:19:c9:18:06:82:1b:
d3:f2:d4:e1:ba:5a:d9:f1:8d:20:d0:3e:f8:56:af:
e4:35:c1:d6:8e:81:b2:d0:a9:f4:40:3b:70:2b:58:
bf:cd:a1:7a:7d:fc:32:65:07:59:c9:6f:dc:f5:d5:
31:50:b2:ee:2b:dc:6f:71:fd:a6:41:be:03:03:61:
05:8b:01:a0:90:0b:c7:15:6f:e5:49:99:2d:a3:7c:
0c:fb:db:58:60:36:e8:9d:67:cf:c2:e1:db:f0:b0:
22:39:3b:a6:34:e9:dd:58:08:89:f7:24:86:1b:40:
69:ca:bb:34:df:fb:64:f7:e9:d5:ab:92:1f:08:59:
c1:b5:21:28:1f:8e:7b:26:25:b7:e2:b0:58:4d:0d:
6f:f9:94:f1:a1:65:24:08:93:3d:b2:04:19:f3:b2:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DE:60:2A:71:3C:1B:4B:75:36:D6:ED:8F:AE:55:16:7D:DE:CD:9C
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a1:9e:ec:32:f4:31:56:f8:4a:3b:83:8b:57:4b:28:55:6c:
cf:36:fd:68:30:7a:55:76:41:a5:61:69:00:89:2a:50:ab:a4:
95:58:c2:84:82:40:0a:3f:0e:66:a0:66:c1:c4:44:ca:85:9e:
c2:b4:0a:b8:7f:2d:23:26:de:f7:1f:4a:f3:2c:fc:aa:83:d8:
d8:70:91:0f:5d:0f:60:61:7c:01:a4:21:74:f4:71:d5:06:25:
8f:37:b5:79:28:0a:67:9b:ab:b3:38:13:5d:08:9c:b9:59:e7:
d2:03:94:db:f0:23:dd:1c:4c:d2:be:4e:bf:6b:8b:ff:18:e7:
14:e9:90:cd:f1:be:36:87:a6:0a:df:9f:8b:73:6c:d2:ae:3b:
a2:81:4a:ba:62:3e:a4:b2:04:c9:55:da:83:a4:a3:a7:00:c0:
c0:99:1c:da:93:cb:7d:0d:f9:a7:9b:94:13:0c:3c:68:f3:56:
a3:e9:4f:ad:92:0b:f3:eb:3e:5e:45:c7:b8:c3:18:05:55:3a:
7c:56:c3:d1:5d:62:0c:93:97:6e:d5:f9:98:00:eb:0d:24:04:
e6:65:11:83:47:f0:fa:a8:37:da:ae:af:e1:9b:e9:99:3a:a3:
a6:fa:6d:0d:77:9f:b2:1c:89:18:99:9b:eb:14:a2:bb:b9:5a:
b8:6b:2d:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBNpeGLvpvJCTSpbeNYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNWI2NTE3OTExMTlmOGViYWEzYmUyNmYxYzc1NmI4NjMw
OWJlOGUwHhcNMjYwMzI5MDgwMDQ1WhcNMjYwMzMwMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZGRlNjAyYTcxM2MxYjRiNzUzNmQ2ZWQ4ZmFlNTUxNjdkZGVjZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA7dCfMxzVEv8RFgM5oLUc/BWzLO
o5kK6m7JkQvOa9836wE5noD5LsL5FqTuTHzOtYVs9+Nbb9sqPPIN+gryO4OPuQHf
YrtbDjsFM8dfZhHpkpwm7pTjOERK7RMPFunGsBwZyRgGghvT8tThulrZ8Y0g0D74
Vq/kNcHWjoGy0Kn0QDtwK1i/zaF6ffwyZQdZyW/c9dUxULLuK9xvcf2mQb4DA2EF
iwGgkAvHFW/lSZkto3wM+9tYYDbonWfPwuHb8LAiOTumNOndWAiJ9ySGG0Bpyrs0
3/tk9+nVq5IfCFnBtSEoH457JiW34rBYTQ1v+ZTxoWUkCJM9sgQZ87JUtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3eYCpxPBtLdTbW7Y+uVRZ93s2cMB8GA1UdIwQY
MBaAFLpbZReREZ+OuqO+JvHHVrhjCb6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQt
MTk2ZjhmMDY0ZWU0LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS80Y2M0ZDgtODA5MS00NTgxLTkyZjQtMTk2ZjhmMDY0ZWU0
LzEvdWx0bEY1RVJuNDY2bzc0bThjZFd1R01Kdm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqGe7DL0
MVb4SjuDi1dLKFVszzb9aDB6VXZBpWFpAIkqUKuklVjChIJACj8OZqBmwcREyoWe
wrQKuH8tIybe9x9K8yz8qoPY2HCRD10PYGF8AaQhdPRx1QYljze1eSgKZ5urszgT
XQicuVnn0gOU2/Aj3RxM0r5Ov2uL/xjnFOmQzfG+NoemCt+fi3Ns0q47ooFKumI+
pLIEyVXag6SjpwDAwJkc2pPLfQ35p5uUEww8aPNWo+lPrZIL8+s+XkXHuMMYBVU6
fFbD0V1iDJOXbtX5mADrDSQE5mURg0fw+qg32q6v4ZvpmTqjpvptDXefshyJGJmb
6xSiu7lauGstQg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:11 2026 by rpki-client