Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: jYtp6SDeATu2Swhj1+vQqkMOoZ0iNw6/MZDGbZQNB3g=
Subject key identifier: FC:62:64:64:29:DA:2A:F5:5B:73:0F:0C:37:9F:57:C0:38:34:93:E9
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019DC0DDA6F465F1CE2E2B6B2744614C4C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 0C9D
Signing time: Fri 24 Apr 2026 19:00:44 +0000
Manifest this update: Fri 24 Apr 2026 19:00:44 +0000
Manifest next update: Sat 25 Apr 2026 19:00:44 +0000
Files and hashes: 1: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (hash: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ=)
2: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (hash: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0=)
3: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: lraikJk9vQMmxXDGhOGl27pi8//IS+2p4wKLn/AgEPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:dd:a6:f4:65:f1:ce:2e:2b:6b:27:44:61:4c:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Apr 24 19:00:44 2026 GMT
Not After : Apr 25 19:00:44 2026 GMT
Subject: CN=fc62646429da2af55b730f0c379f57c0383493e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:91:7a:a0:ea:1f:38:2f:a9:81:f4:93:30:
b3:c1:9a:c4:27:6c:1a:d1:4e:b5:c4:13:cd:ea:49:
9b:23:aa:51:60:84:76:2e:1c:ee:8a:e4:53:93:7f:
f6:fe:d5:e0:89:94:16:1d:1e:63:ba:dc:b3:25:09:
4d:48:31:20:2b:76:3a:14:6f:6a:8e:07:a5:33:0c:
04:5f:31:96:89:90:3a:d5:fa:c6:ea:c8:c5:c4:c8:
eb:19:5d:71:98:d9:97:cf:b9:40:ad:83:a2:41:19:
b0:ac:68:91:c4:f7:71:df:91:b0:0b:5b:c6:68:10:
4c:ac:99:8c:26:47:90:11:2f:80:65:25:b2:ef:b0:
ba:7b:b8:bb:ea:bd:de:53:bc:74:fa:46:e9:df:0d:
bf:73:2e:c0:21:ec:80:9c:e1:a1:3d:b6:2d:69:f9:
3c:2c:71:d6:9b:ed:a9:ea:c5:fb:24:5d:3d:34:34:
23:43:27:6d:a9:3b:32:80:f4:1c:d7:31:22:04:91:
f9:7f:f2:aa:2f:7e:3f:4e:d3:e6:3a:28:bc:18:9e:
a1:7e:40:03:e5:c1:81:f6:30:a3:8d:6a:01:a3:8c:
b0:8a:71:a7:4f:b5:ef:1c:6f:7d:8c:83:42:74:4d:
65:5c:56:8e:82:dc:2d:5a:1a:4c:26:5c:92:b3:e8:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:64:64:29:DA:2A:F5:5B:73:0F:0C:37:9F:57:C0:38:34:93:E9
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:16:ee:78:20:5c:c3:d0:62:4a:38:de:23:9a:46:56:dd:
92:17:0f:c0:e0:8b:52:e8:8c:43:88:09:eb:a7:44:6b:5c:9b:
c4:44:a9:c6:56:fd:80:f8:a0:5c:db:0d:86:ea:b1:44:d7:16:
9d:b0:39:d9:70:76:15:fa:12:22:88:68:7d:79:49:b4:27:b2:
f8:e8:c2:60:3d:68:ff:7b:2a:94:82:9c:2b:be:9d:7c:e7:1b:
57:16:bb:46:5a:9c:e0:1a:4d:5d:4f:ef:4d:6c:53:ef:85:d3:
18:ed:7f:32:e1:58:3a:37:34:3c:00:2a:e1:82:38:3c:8f:11:
41:b4:ee:30:8d:a1:e2:1c:c1:1f:fa:dc:d1:30:d6:7a:10:13:
67:2b:ee:25:6d:b1:b8:f6:10:bd:76:2f:46:18:d4:ff:37:2f:
86:68:b8:ab:f1:db:0d:28:d9:40:3c:96:66:5e:f1:90:88:7f:
86:38:95:cc:b5:08:de:77:e3:03:65:3b:cc:05:17:a3:c4:6e:
9a:7e:85:04:31:19:bf:e1:76:0e:38:34:17:ac:f9:d8:28:35:
9c:15:37:31:b2:ab:23:8e:a7:fe:86:2c:8c:55:5a:00:43:94:
20:b2:01:8e:72:87:0a:ef:9e:43:a2:be:1f:d8:3e:02:25:e7:
46:f3:dd:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3A3ab0ZfHOLitrJ0RhTEyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5
NDA5ZTYwHhcNMjYwNDI0MTkwMDQ0WhcNMjYwNDI1MTkwMDQ0WjAzMTEwLwYDVQQD
EyhmYzYyNjQ2NDI5ZGEyYWY1NWI3MzBmMGMzNzlmNTdjMDM4MzQ5M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW6ReqDqHzgvqYH0kzCzwZrEJ2wa
0U61xBPN6kmbI6pRYIR2LhzuiuRTk3/2/tXgiZQWHR5jutyzJQlNSDEgK3Y6FG9q
jgelMwwEXzGWiZA61frG6sjFxMjrGV1xmNmXz7lArYOiQRmwrGiRxPdx35GwC1vG
aBBMrJmMJkeQES+AZSWy77C6e7i76r3eU7x0+kbp3w2/cy7AIeyAnOGhPbYtafk8
LHHWm+2p6sX7JF09NDQjQydtqTsygPQc1zEiBJH5f/KqL34/TtPmOii8GJ6hfkAD
5cGB9jCjjWoBo4ywinGnT7XvHG99jINCdE1lXFaOgtwtWhpMJlySs+i/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxiZGQp2ir1W3MPDDefV8A4NJPpMB8GA1UdIwQY
MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt
MDQ4M2QxYzAxYjI1LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1
LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq4W7ngg
XMPQYko43iOaRlbdkhcPwOCLUuiMQ4gJ66dEa1ybxESpxlb9gPigXNsNhuqxRNcW
nbA52XB2FfoSIohofXlJtCey+OjCYD1o/3sqlIKcK76dfOcbVxa7Rlqc4BpNXU/v
TWxT74XTGO1/MuFYOjc0PAAq4YI4PI8RQbTuMI2h4hzBH/rc0TDWehATZyvuJW2x
uPYQvXYvRhjU/zcvhmi4q/HbDSjZQDyWZl7xkIh/hjiVzLUI3nfjA2U7zAUXo8Ru
mn6FBDEZv+F2Djg0F6z52Cg1nBU3MbKrI46n/oYsjFVaAEOUILIBjnKHCu+eQ6K+
H9g+AiXnRvPdzg==
-----END CERTIFICATE-----
Generated at Sat Apr 25 00:34:32 2026 by rpki-client