Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier: 658sEABpVaXO55z/xuxW5CLhYoRqo61CnGGbV7JH/TY=
Subject key identifier: 87:E7:02:93:59:93:D9:1C:40:9F:AD:80:62:CE:0C:56:7A:30:B8:A8
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer: /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial: 019DB3226C031C556EE2135062C3069128ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number: 0F92
Signing time: Wed 22 Apr 2026 03:01:10 +0000
Manifest this update: Wed 22 Apr 2026 03:01:10 +0000
Manifest next update: Thu 23 Apr 2026 03:01:10 +0000
Files and hashes: 1: DhAYsKxO8WwtTQM9qN9EaLihdkc.roa (hash: ITzy4zYg5ewXMnbWQKg/M27oXczLD0pz5gjZoCMokoc=)
2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: vZyFu8pPpx7TOmAAhML0Yssxd0cnsd7Yv+xcgDkFaBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:22:6c:03:1c:55:6e:e2:13:50:62:c3:06:91:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Validity
Not Before: Apr 22 03:01:10 2026 GMT
Not After : Apr 23 03:01:10 2026 GMT
Subject: CN=87e702935993d91c409fad8062ce0c567a30b8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:ab:47:b8:31:aa:74:67:81:93:a5:52:97:
db:f7:9a:6e:92:d9:50:d4:25:af:59:c6:1d:4c:c3:
84:89:5f:cb:78:e0:a5:df:a0:3f:5c:16:2d:9d:20:
ae:35:d3:ea:b6:7f:f0:b9:c6:b8:f7:45:88:c3:99:
a2:16:d8:52:3c:9d:7a:44:2d:c0:08:eb:0a:fa:ef:
05:29:46:78:99:e0:3a:59:e4:0a:0f:70:c7:2e:05:
d4:09:94:51:1e:48:14:86:69:ab:3b:43:b6:89:d2:
4c:88:e8:0a:e9:8e:4c:35:6b:d0:b6:44:74:97:0f:
97:53:6c:4d:fc:32:ab:5e:09:19:d0:fc:24:08:30:
5e:e2:6c:7e:ab:ed:aa:d2:24:e1:05:b3:49:c4:f1:
f3:c8:7e:05:ab:07:49:22:15:a2:3d:ee:8f:d8:2f:
24:29:fd:a4:65:fc:35:03:d2:3a:c0:5f:d3:90:8b:
5a:cd:f2:4c:59:25:f3:fd:f7:b5:4c:32:a4:14:c4:
f3:d1:36:af:9c:8f:82:de:f8:c4:0d:09:bb:e2:a4:
5a:2e:10:1f:2a:70:eb:73:54:50:43:ee:ed:38:59:
e8:8d:99:35:92:4d:7b:4d:b6:6e:6a:e7:3c:8e:38:
61:f4:77:52:97:9e:c5:10:4f:4b:cc:a6:a7:a3:a6:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E7:02:93:59:93:D9:1C:40:9F:AD:80:62:CE:0C:56:7A:30:B8:A8
X509v3 Authority Key Identifier:
keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:66:d7:41:ee:f2:d5:61:f8:69:ae:e7:76:f9:37:c4:1d:f5:
20:5d:df:e8:8c:e7:4a:0c:ec:3f:0f:17:71:f6:22:a9:26:1d:
9f:2c:be:de:0b:36:ee:e9:e1:00:ea:76:16:cf:c8:0a:63:ff:
4c:7c:e0:61:b6:23:3c:82:34:9a:e5:f2:e4:b3:93:de:77:65:
81:0f:5b:27:bb:fd:e1:ed:3b:3f:16:ee:69:6e:7a:83:65:dc:
17:9f:f8:8a:a8:c1:0e:2c:50:71:df:ef:7a:1d:8f:e6:f6:93:
59:e6:7f:4e:42:67:f8:2a:70:8e:8c:bc:f1:79:d0:49:40:06:
af:05:a4:d4:13:53:23:3a:6d:93:bf:eb:86:9a:3c:05:82:e4:
db:09:10:a6:43:a3:bf:e7:b7:8c:88:ef:e6:11:2e:8a:57:38:
a9:6c:22:14:dd:33:93:0d:8d:6b:33:a3:f6:aa:a4:a7:06:d1:
25:55:29:ac:76:19:bb:31:3d:59:fd:2c:d9:8e:9a:57:76:79:
7a:1d:6e:5d:88:9c:cd:77:e5:70:5c:16:7f:ce:96:55:6c:d4:
05:09:cd:5b:8c:35:40:fe:8b:1e:fa:c1:bd:64:72:54:0f:de:
f2:54:c8:87:9c:98:e0:be:a1:5e:d7:6a:ec:3e:95:ca:9a:b4:
5b:16:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:52:49 2026 by rpki-client