Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: hAf0rdj5eo5dsqTL5TU1RkRSE5QGglvnC2AbznE2czY=
Subject key identifier: 33:EB:66:AA:07:92:9B:CE:70:D5:F0:44:B6:9A:92:56:1A:A7:C8:F7
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019F95EDCFC0767FB6DA0616264121E568DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0D91
Signing time: Fri 24 Jul 2026 21:00:17 +0000
Manifest this update: Fri 24 Jul 2026 21:00:17 +0000
Manifest next update: Sat 25 Jul 2026 21:00:17 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: YL++lEDnNQZLxJ/W3ZRyeIndMKZLDcEVj7SRYtJo+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:cf:c0:76:7f:b6:da:06:16:26:41:21:e5:68:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jul 24 21:00:17 2026 GMT
Not After : Jul 25 21:00:17 2026 GMT
Subject: CN=33eb66aa07929bce70d5f044b69a92561aa7c8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:71:0a:21:95:6a:32:00:90:e1:f2:14:12:
5b:07:b4:79:30:9d:f2:13:27:22:56:b3:29:6e:2c:
8e:2a:d0:e4:89:ce:08:ef:b0:cd:5c:81:f5:a7:86:
11:a4:61:c8:4a:60:e5:f6:31:bd:7b:5c:29:e8:49:
25:de:dd:f4:c1:c0:06:b2:ce:33:54:a9:bd:03:f8:
e7:74:4e:70:1a:fe:42:07:c3:56:69:dd:c1:0d:61:
0b:26:17:2f:cf:e7:6d:b7:0f:18:d2:94:ff:4e:d3:
2b:84:4b:28:7f:e4:f5:f1:05:e8:46:e6:8f:40:51:
d3:81:9a:71:e8:8f:82:1c:c9:89:04:41:19:25:66:
e1:a7:78:e6:06:7b:e7:95:0e:1b:ed:14:0e:28:44:
27:da:e3:37:e8:f3:07:c8:79:1f:6a:2b:23:64:59:
6f:06:c3:72:5b:e8:80:9a:a6:21:5e:01:bc:d5:91:
d0:ed:1a:f2:c0:75:a8:f4:c0:2f:5a:4b:ec:56:0c:
db:ce:4b:8a:bd:03:21:12:b2:bc:82:76:06:35:75:
5a:7a:a1:de:b2:0e:00:db:0a:12:de:9b:2b:dd:7e:
9c:63:c1:a9:7f:d3:8f:ff:55:40:d0:9a:2c:dd:32:
d5:18:03:a7:c0:ef:6c:85:f5:e0:67:be:9e:a8:46:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:66:AA:07:92:9B:CE:70:D5:F0:44:B6:9A:92:56:1A:A7:C8:F7
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:91:b6:2b:38:83:44:d1:39:d3:5f:ad:82:fc:3e:b8:80:
83:7d:8f:51:29:d1:d0:21:74:f0:97:1a:8e:35:88:f6:bc:ee:
bd:17:33:0a:90:bf:df:2e:44:bf:5e:61:05:93:64:10:3c:aa:
07:7c:57:c9:dd:09:e8:a1:94:56:69:14:91:8e:f2:77:29:cb:
25:28:38:23:f2:e5:45:b7:95:f7:a2:75:91:7c:ce:7b:53:2b:
e2:52:bf:b7:8b:43:b7:af:ba:2d:9e:7d:97:7c:4d:02:42:d5:
61:7f:08:07:61:c0:4d:f9:fd:d9:3d:59:2a:b2:6e:67:13:2b:
38:d2:3e:11:a6:7c:a7:3f:47:2f:47:c8:27:6b:21:de:5a:ce:
82:d6:f8:af:fc:2e:c1:e6:62:ef:4e:3b:52:3f:b2:3f:85:99:
37:f0:28:27:de:11:62:66:fe:68:45:8b:15:1e:85:bf:41:28:
19:75:a8:9f:65:a4:f8:7b:f7:fe:9e:9e:eb:c7:60:f7:3d:5c:
cd:a5:0f:d4:b3:2f:60:42:7f:c1:e1:79:50:91:7b:42:0c:99:
3c:77:24:a8:6f:cc:b7:9b:ac:4f:29:49:ba:14:f4:4d:57:99:
30:a7:f4:df:38:3b:05:11:0d:73:9f:c5:06:05:5a:9f:27:33:
57:ab:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:39 2026 by rpki-client