Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: 2KG69wnJCTNm8yHJLjwBO+urVQe+XSrhaF39vwbQzo4=
Subject key identifier: 38:03:BF:56:B5:53:25:92:2C:7C:B4:F8:0A:3C:E3:DF:97:27:7E:CF
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019CD7317B3E410EAAD7E414BC68D6371B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0C24
Signing time: Tue 10 Mar 2026 10:01:10 +0000
Manifest this update: Tue 10 Mar 2026 10:01:10 +0000
Manifest next update: Wed 11 Mar 2026 10:01:10 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: /HVtjXfOsGznpDEHPGio/covydQIgEZLeToIbKW/Ni4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:31:7b:3e:41:0e:aa:d7:e4:14:bc:68:d6:37:1b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Mar 10 10:01:10 2026 GMT
Not After : Mar 11 10:01:10 2026 GMT
Subject: CN=3803bf56b55325922c7cb4f80a3ce3df97277ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:5b:2d:bb:40:6c:13:cd:2a:b8:9a:f6:34:
fd:d2:cf:1b:a9:a7:c7:62:7f:12:13:cb:05:68:0a:
b7:f8:17:3c:46:66:7a:32:54:4f:6b:d6:19:82:65:
5a:5f:76:1c:c7:d9:c2:df:0d:e3:b7:6e:e9:8b:aa:
ae:5d:51:b8:0a:1c:6b:fa:74:e0:9e:62:af:61:fc:
5c:79:84:e5:e9:bb:c7:c4:64:49:71:2f:2d:29:71:
82:e1:a6:0f:d6:3a:6e:cf:70:2d:a8:90:1d:bb:a2:
c7:64:19:55:a2:3a:7c:e1:3d:1c:02:b4:e7:c4:a2:
79:f9:67:07:44:19:f8:72:88:97:78:71:54:cc:96:
d5:72:9f:c4:15:02:44:7d:36:58:07:ab:6c:d5:b5:
8f:87:3d:7a:91:c9:13:44:97:d1:e0:d5:75:7b:fe:
33:e6:d1:ed:01:28:b1:39:5c:01:a1:24:a3:b0:f1:
59:47:09:b5:82:47:89:f4:56:0d:e8:3b:40:0e:68:
7a:63:64:78:31:51:fa:97:6d:ef:08:5f:c8:35:9c:
11:74:95:33:e0:e4:84:3e:0e:77:e5:f0:cc:18:b9:
1f:68:0c:3e:98:99:e7:ee:46:0f:28:03:4f:c4:9c:
ee:8a:9d:a1:2d:4b:dc:f9:73:e3:84:f4:eb:69:57:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:BF:56:B5:53:25:92:2C:7C:B4:F8:0A:3C:E3:DF:97:27:7E:CF
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:81:0d:e8:f1:8c:6c:e3:40:65:b4:95:64:65:fd:d2:c7:41:
8f:7c:bf:67:a0:1e:7f:3c:a0:14:fb:ac:b3:ec:46:91:39:91:
48:33:8f:5e:0d:e6:07:df:86:18:6b:0d:4c:74:28:44:a0:91:
ce:7c:0c:af:a8:5f:b1:8a:63:ea:f3:6c:87:a3:65:77:95:86:
e4:77:e4:7a:64:8e:e8:50:84:da:3e:ba:32:da:a6:cc:99:51:
e5:42:4a:97:4a:25:a8:a3:a1:af:35:b6:64:30:a2:93:6b:91:
c5:d3:a0:85:aa:aa:0f:7d:ae:98:fd:68:e3:96:4b:34:b5:24:
bd:67:5a:dd:9d:bb:83:d4:a4:a7:cc:09:88:60:52:1a:e7:a7:
e5:a4:ef:ac:29:62:13:40:00:b8:fe:c0:bb:e1:c9:d5:4c:b6:
81:02:03:73:39:e5:56:29:1b:34:70:2a:da:98:be:ef:3b:9d:
f0:65:8b:9d:9b:d3:88:29:fa:27:67:6d:65:ad:1e:16:f8:f6:
65:3c:8e:d5:cd:3b:bc:05:a7:5d:c1:62:aa:74:5c:d8:7d:7c:
88:a1:8a:b1:90:6e:46:2b:29:2e:eb:c8:8f:e5:e3:4e:39:c0:
7b:b1:32:12:c3:a7:f2:a7:52:e4:68:cc:1a:58:0c:ed:c8:99:
18:2a:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:30:35 2026 by rpki-client