Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json)
Hash identifier: FzvjFLEmoyRxbKv0jBFFhrc93Lqd/A6neQc3WzzGDf0=
Subject key identifier: CF:44:2D:4D:D8:8C:41:37:73:13:D2:CC:D5:9A:64:D2:C8:F5:8A:58
Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Certificate serial: 019D37F7722B83BA8E806760157040A2A823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
Manifest number: 0600
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: TF5WI5sO2zdF0wx3siaOSMKV1XdX8uzWAH98fzI+mPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:72:2b:83:ba:8e:80:67:60:15:70:40:a2:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=cf442d4dd88c41377313d2ccd59a64d2c8f58a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:58:38:5d:47:55:57:63:c4:e4:b3:c8:61:
7b:68:bf:7a:d0:a8:af:fb:85:d0:da:94:75:25:d7:
c4:7f:e0:e0:ab:c2:04:70:e6:cf:82:fb:aa:17:c2:
aa:ab:df:d8:cb:d3:d1:8a:1f:80:0c:4c:de:e4:07:
be:83:e3:8b:06:be:43:9c:24:6e:07:dd:d1:8e:21:
0c:97:aa:52:d6:27:28:45:b6:87:4e:b8:6f:2f:7b:
4b:44:11:cd:5c:86:24:38:b4:c1:ae:bd:a5:c9:aa:
36:5b:d4:13:d4:93:48:5d:2c:ca:43:6a:d6:27:f6:
79:4e:32:e8:76:af:f8:9c:0f:42:3f:4d:da:a7:87:
11:b2:67:0b:cc:7f:d8:b6:66:c9:73:ec:bf:94:e6:
05:ed:1f:23:6b:c5:c6:19:98:40:1c:95:5d:89:fd:
48:7a:34:f1:b7:22:40:d0:14:8a:0a:4e:6c:79:cc:
03:6d:f2:08:ec:03:95:97:25:10:7b:5a:b9:80:18:
eb:8e:22:71:a6:51:ac:c4:17:bb:c3:d7:e2:d5:51:
2e:a1:fb:87:91:56:ad:95:ff:24:95:52:a1:f2:3b:
ef:44:47:d7:2f:11:af:26:c8:f5:77:8f:61:be:60:
22:21:ba:0f:a0:1a:ff:16:cd:12:43:2f:e0:1b:c4:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:2D:4D:D8:8C:41:37:73:13:D2:CC:D5:9A:64:D2:C8:F5:8A:58
X509v3 Authority Key Identifier:
keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:d6:52:72:06:11:d5:17:d8:68:a2:e9:33:61:75:75:e6:
49:bc:6d:99:f5:9b:02:50:0e:44:f6:0e:46:c1:8d:24:30:f2:
16:04:26:8e:a5:1f:af:e5:e0:22:60:4a:86:11:f8:70:1c:69:
1b:07:69:7d:eb:c3:c9:ea:15:d3:85:bd:25:33:0e:d7:b6:78:
ff:66:b6:c6:2d:c8:f6:ea:f4:40:3a:1d:45:55:d5:23:ab:16:
06:c2:2b:cd:88:dd:33:7d:e5:4e:4a:31:45:67:46:bd:c7:79:
97:f5:41:38:97:0d:17:92:c1:6b:c4:43:6b:15:3e:82:de:a9:
e9:81:83:58:73:63:6f:98:35:69:8f:e9:65:6e:4f:9b:b7:cf:
c6:99:aa:05:87:c1:64:0f:89:f6:17:4b:ba:a5:89:86:ce:72:
4b:d9:8c:c8:d0:77:29:af:47:48:10:09:dd:0c:60:54:7e:cc:
f0:fe:0b:be:25:35:57:ed:46:37:27:b4:82:9c:dc:f8:80:97:
da:aa:90:66:3d:f5:27:4c:04:2f:a7:4a:40:39:c5:73:ed:54:
3a:20:40:c3:13:a8:2d:e4:51:ba:58:8a:1e:87:c2:72:c0:87:
d9:9c:58:5f:b5:63:64:34:54:28:85:aa:3f:6d:2c:dc:48:60:
4d:4e:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:22 2026 by rpki-client