Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: uEUswuOjBjDgjD5rwSNFVK4VtdJKt0quLcfmj9EeoQo=
Subject key identifier: DD:B2:4E:28:FE:B2:73:53:60:4F:78:35:F6:2B:21:69:43:BB:A9:02
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 019CBA0276109837BC3730FCB8B3AB298C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 0F11
Signing time: Wed 04 Mar 2026 18:00:49 +0000
Manifest this update: Wed 04 Mar 2026 18:00:49 +0000
Manifest next update: Thu 05 Mar 2026 18:00:49 +0000
Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: YFBSujHIp6eoXXEex53QjHc7AHtyip5fYhNyJGug2Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:02:76:10:98:37:bc:37:30:fc:b8:b3:ab:29:8c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Mar 4 18:00:49 2026 GMT
Not After : Mar 5 18:00:49 2026 GMT
Subject: CN=ddb24e28feb27353604f7835f62b216943bba902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:25:dd:df:c8:ff:50:25:c7:fb:b9:96:9c:
01:0b:1d:80:e5:84:c7:cb:18:b2:e5:41:57:e2:c0:
29:df:cd:eb:d7:56:f9:95:96:c0:e6:ab:86:b3:11:
34:db:a3:9b:cf:32:c8:ff:a2:9c:fa:98:e6:12:1e:
08:48:d5:9d:f7:28:f2:27:fd:8d:04:b2:ef:25:94:
b1:a3:1e:8d:e4:a2:29:8e:50:60:4f:dd:ba:47:d0:
c4:2d:f1:16:d6:09:8c:55:01:dd:99:fc:e7:77:8f:
a6:5b:08:09:8f:b1:98:a2:0f:db:3b:e7:a0:a1:08:
4e:0d:aa:58:c7:d2:b0:ab:3c:14:6d:77:0c:3e:ea:
15:5b:1c:3f:6e:af:5a:84:5f:60:4e:be:ec:a7:5d:
cc:a8:cc:38:8e:2c:22:6d:36:d4:97:d6:7c:74:bd:
ba:1d:3e:44:7c:ae:71:a9:29:ff:6d:59:ce:95:b5:
2d:42:79:6a:06:10:30:ad:c1:36:9c:9a:f5:dd:0e:
55:d4:1c:ae:a6:8a:b6:ff:22:ae:5a:0f:2e:7d:c1:
bf:90:11:40:f2:33:a5:c0:2d:1d:96:31:f0:4f:3f:
3c:90:b1:47:02:e3:52:91:8d:0a:f5:8d:66:e3:5a:
9d:27:2d:7c:c4:4c:d2:37:49:9b:ef:8d:b8:ad:79:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B2:4E:28:FE:B2:73:53:60:4F:78:35:F6:2B:21:69:43:BB:A9:02
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:04:9e:29:51:b4:b3:cc:da:5b:64:5c:d2:ac:ea:99:3e:4d:
87:35:80:1a:a7:08:9e:d8:ca:91:e3:c5:07:59:c5:f0:bc:95:
b8:70:c1:e8:3f:0b:60:e9:df:0d:89:87:0a:94:cd:e4:37:1f:
b9:00:c9:b3:0a:46:38:3b:09:07:16:0d:e5:9a:eb:95:63:22:
15:f2:a9:d4:1d:48:43:a4:49:26:55:24:23:75:90:50:aa:4a:
07:22:be:2d:51:cd:13:7c:c2:42:96:fc:08:37:51:10:d0:ea:
17:14:c2:48:6c:7d:7f:b3:d0:dc:82:79:03:df:f1:9f:9b:4d:
4f:5b:04:de:49:f3:49:6c:c9:17:ab:f0:40:1c:63:0a:6d:15:
f5:ca:e9:11:a3:4f:16:44:1d:95:07:7e:ef:57:8a:bc:3b:06:
2e:d8:2b:fd:03:90:8d:a7:f7:31:41:7d:ec:43:a5:19:3f:ce:
c8:f0:82:a1:cf:2d:73:4e:47:51:b0:78:60:49:02:e0:f5:a9:
11:95:b6:dd:2d:6b:d1:68:dd:03:46:ee:02:dd:85:2e:b7:a5:
d2:da:19:20:db:8e:c5:11:d3:41:94:f9:4a:e5:eb:69:3e:29:
df:da:db:f8:4c:77:b3:9d:10:02:d4:b8:74:09:ff:f8:bc:17:
63:7b:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:51:05 2026 by rpki-client