Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
File: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft (raw, json)
Hash identifier: Parr+f7WILonIxbKYvFbgl9xUPlv3+w6u0wjo7/7LLU=
Subject key identifier: C0:17:B9:B0:50:9E:6E:5B:94:28:AD:11:83:49:FF:DE:A5:07:35:0C
Authority key identifier: BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
Certificate issuer: /CN=ba58275572434893b9cbd14e4ade708929e467f8
Certificate serial: 019D3A547878E04ACA681AED5A308F3F8618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
Manifest number: 146B
Signing time: Sun 29 Mar 2026 16:01:47 +0000
Manifest this update: Sun 29 Mar 2026 16:01:47 +0000
Manifest next update: Mon 30 Mar 2026 16:01:47 +0000
Files and hashes: 1: ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl (hash: vggoT26z6+JY2BJ4cXVLj1yiDGk56TRpBwhgBygIcoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:78:78:e0:4a:ca:68:1a:ed:5a:30:8f:3f:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba58275572434893b9cbd14e4ade708929e467f8
Validity
Not Before: Mar 29 16:01:47 2026 GMT
Not After : Mar 30 16:01:47 2026 GMT
Subject: CN=c017b9b0509e6e5b9428ad118349ffdea507350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:65:95:dc:80:93:26:f8:01:e5:a3:ae:5b:
b9:9c:5e:8d:57:e3:bc:e5:e6:44:ee:e5:ef:14:c9:
93:30:1c:50:f7:18:7e:fd:dd:f4:7f:e7:b9:d4:b1:
2b:91:53:d8:d5:4c:bd:4a:03:23:57:24:66:8e:19:
e7:ea:0d:db:2d:01:24:2c:42:9b:76:ee:65:12:6e:
13:9b:46:a7:bc:f4:43:13:b5:d0:6c:aa:e1:ff:1c:
e5:ae:cd:38:57:d0:ef:fa:db:55:f6:9d:a8:7b:b6:
fb:8f:17:23:89:22:3c:03:e4:da:3b:47:f4:51:d7:
4a:81:f7:03:84:e1:4e:c7:07:82:fe:33:00:7f:7c:
fe:60:01:c6:e1:b9:f2:fb:9a:8e:91:2f:7c:50:a5:
56:12:54:97:2f:1e:fd:71:0a:ab:cc:23:76:fc:d1:
75:73:9b:44:ce:13:6d:7c:75:a3:0b:e6:3b:21:70:
3e:ee:12:17:c1:61:b5:e2:fe:4b:21:0d:0e:e9:44:
64:1d:a7:c4:d6:f1:9f:20:e8:fe:3d:96:8a:03:63:
91:ff:e8:c2:bc:3e:1b:25:18:2c:0e:c4:14:cd:b6:
24:59:09:77:47:bc:cc:c6:a9:71:7a:d8:91:e5:99:
10:9f:aa:b5:bf:98:67:25:52:b4:23:a8:14:e7:67:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:B9:B0:50:9E:6E:5B:94:28:AD:11:83:49:FF:DE:A5:07:35:0C
X509v3 Authority Key Identifier:
keyid:BA:58:27:55:72:43:48:93:B9:CB:D1:4E:4A:DE:70:89:29:E4:67:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/06ab3c-7f1b-4062-8792-262557c74d4c/1/ulgnVXJDSJO5y9FOSt5wiSnkZ_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0f:f3:40:39:b7:08:58:fb:8f:85:1a:e9:be:8a:8f:7b:10:
4f:02:f6:1e:ea:b7:0a:df:62:af:e5:9a:09:df:45:c2:8f:eb:
84:20:cc:ec:11:31:70:8d:6c:51:14:f6:d7:00:51:1f:88:cc:
f4:36:e1:a8:6c:b9:9b:05:5a:6d:3e:d7:29:d3:f8:fe:3e:f3:
20:f4:5b:7c:68:c4:85:ca:d6:45:9a:52:32:0c:aa:79:59:96:
19:8b:9e:11:8b:eb:44:17:8c:cb:c7:2e:52:30:38:00:93:ac:
3d:a7:c8:db:2f:8e:c0:f5:29:83:29:27:6e:98:dc:50:29:bb:
90:ba:1d:e7:1c:76:98:a7:cd:75:83:e1:71:24:ad:84:75:38:
cf:e7:e4:0b:57:f4:fd:8d:5c:d3:4e:52:cc:26:ff:b7:a2:b0:
d5:bc:88:a7:0e:cc:c4:73:a2:44:b3:6e:76:8f:1d:0f:31:b0:
f8:29:fd:a8:21:4f:4b:02:e3:d9:ee:78:b7:98:b9:0b:7d:1c:
3a:bf:fd:8e:95:e6:3f:61:a5:71:9e:a3:dc:8a:b8:5a:10:f1:
cb:64:28:5e:e9:85:a1:51:9f:32:97:c2:98:3d:21:fe:50:fe:
e8:ab:ac:d1:ae:92:09:57:54:2c:ac:3d:77:a2:c8:2f:23:82:
c9:6f:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:53 2026 by rpki-client