Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: zUrb7HIhjqbRZP+nPriZiENh0GwdunCpMHaD69bVR98=
Subject key identifier: 34:DA:24:05:68:0C:A2:34:BF:75:E5:2B:1D:8B:8C:30:45:B4:83:F0
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 01A1A0A4C446D6EC9F7407AE9735A337E2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 09C8
Signing time: Tue 03 Nov 2026 09:01:54 +0000
Manifest this update: Tue 03 Nov 2026 09:01:54 +0000
Manifest next update: Wed 04 Nov 2026 09:01:54 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: eGzJhNSdhGyZsJNH3F21qQXApQRtJ4qW0g/hmJ0WF80=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:a4:c4:46:d6:ec:9f:74:07:ae:97:35:a3:37:e2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Nov 3 09:01:54 2026 GMT
Not After : Nov 4 09:01:54 2026 GMT
Subject: CN=34da2405680ca234bf75e52b1d8b8c3045b483f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:35:81:ea:f4:f2:cd:b1:ae:f1:b8:bd:d7:
9e:8f:27:21:f4:42:1c:7c:56:a1:24:7e:77:ca:b0:
8e:60:0e:0b:d6:66:35:18:ef:55:c6:67:70:57:a7:
33:ec:36:fb:58:4f:59:20:50:b0:83:02:d5:4e:d5:
3f:7c:45:c2:90:c8:c5:ea:36:59:38:7f:79:12:7a:
7c:79:8c:90:10:94:41:82:ab:f6:9d:15:f3:6a:cf:
1d:88:80:50:fa:81:fc:58:f0:26:17:8f:24:a9:f2:
e5:a8:9a:9b:3b:66:6e:9b:dd:1a:11:03:47:6a:a0:
3c:35:9b:6e:b5:6b:eb:2b:48:1d:a1:e2:5b:ef:75:
90:50:15:26:0f:b3:2e:e9:4a:4a:95:59:5b:d4:4e:
35:97:07:a0:a6:30:45:e0:ef:e6:38:6b:e7:80:8f:
cb:3f:ad:d6:d7:a3:95:0e:18:53:b3:e1:f2:8c:05:
25:bb:cd:a3:93:76:5d:e3:46:1c:98:35:f1:ba:54:
7a:06:74:42:0f:02:1e:43:de:40:8c:cd:08:15:a3:
23:cf:c2:01:01:24:a6:92:db:f2:ee:1e:2c:15:f6:
20:3b:c8:06:a7:8d:7f:91:9c:c2:41:8d:f9:3c:dc:
59:bd:8e:2a:54:62:ab:75:dd:96:aa:33:26:1a:ba:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:24:05:68:0C:A2:34:BF:75:E5:2B:1D:8B:8C:30:45:B4:83:F0
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ec:ba:a3:0f:9c:2c:90:12:b2:6a:af:3d:4c:ba:83:1c:ff:
40:02:71:63:ce:b7:da:6c:f7:e8:45:57:c8:e9:20:24:f5:55:
1f:82:9a:70:9e:98:c5:18:db:2c:55:1f:a0:e6:b5:46:42:1e:
9e:63:09:47:d8:cf:c7:60:56:ea:3c:c5:f9:20:f8:6d:a6:9d:
7b:af:5a:1f:ff:5f:a3:d2:f8:e4:ba:20:1d:1c:e2:ea:f2:60:
5f:fd:5d:18:a2:4e:0d:f1:c8:27:37:50:da:fd:4d:ae:ca:68:
e4:60:f6:f7:f0:49:eb:35:28:64:d0:79:31:46:5b:9b:f8:fe:
9e:41:4e:f5:21:2b:b9:cc:5a:66:47:0d:55:ab:13:45:43:95:
5b:83:9e:06:79:e2:d7:aa:ef:e3:c6:f7:16:9f:34:fa:d5:dc:
73:a1:57:50:a8:13:ee:f4:a5:23:31:41:18:f6:50:e1:75:34:
cd:44:c8:a7:57:87:14:cc:52:6f:e3:04:8f:07:17:d7:a4:5b:
a3:98:15:7c:47:6f:bc:34:c6:b6:b2:37:f6:c2:78:44:8a:98:
0d:d4:fb:d9:10:0c:f7:b6:4b:27:94:0c:fa:d0:ad:ef:7a:f6:
39:47:f3:09:f2:fd:5a:9a:f8:90:2d:b4:5a:9b:b2:98:1c:3e:
42:a1:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:07:15 2026 by rpki-client