Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: ME6BhpuXj7bdoaXfvduUBmTcuzoejYqVIZrE56vIZz8=
Subject key identifier: DF:0B:BB:B3:70:56:95:AB:AB:46:A1:6B:55:0B:A4:50:45:1C:3B:B5
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019F9EF1643017FEA99627130D3792BECA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 08BE
Signing time: Sun 26 Jul 2026 15:00:47 +0000
Manifest this update: Sun 26 Jul 2026 15:00:47 +0000
Manifest next update: Mon 27 Jul 2026 15:00:47 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: NxpowTPvnOzVyzzAhtTZIrRE8Fzl4fkjZq+9YjV8YdM=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:64:30:17:fe:a9:96:27:13:0d:37:92:be:ca:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Jul 26 15:00:47 2026 GMT
Not After : Jul 27 15:00:47 2026 GMT
Subject: CN=df0bbbb3705695abab46a16b550ba450451c3bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:5f:41:a1:36:e8:24:c3:f4:8b:5f:0e:4a:
b9:65:3c:61:7d:af:b8:05:2e:82:59:33:43:a2:22:
bf:75:18:e6:02:aa:f8:f3:ce:98:a1:35:95:96:19:
31:2b:3e:4e:20:f6:ed:cd:49:c6:08:82:c8:15:78:
49:3e:ba:c3:20:52:77:43:20:a2:13:09:c5:69:3e:
40:0d:10:c1:e4:93:16:38:b4:cb:85:6e:c3:36:70:
be:43:97:dd:89:aa:21:3c:74:2a:a4:a6:14:3c:33:
03:85:3d:63:90:9b:43:96:85:91:91:62:e7:e0:b2:
34:88:8f:3a:5b:4e:31:fa:2a:69:72:e2:9f:6f:3c:
81:5e:23:06:2a:c2:ce:0e:a6:be:80:9d:3d:ad:71:
0d:6f:db:40:f6:7d:bd:40:16:ac:fe:97:2e:f6:49:
5e:b7:34:9e:8d:53:5c:d2:bb:36:db:30:01:4c:f3:
eb:00:1d:72:e1:78:e8:c5:07:25:1d:e2:81:69:f2:
8a:d2:94:06:74:e6:4c:a5:3d:3e:94:4e:f1:a8:f6:
6d:f0:90:55:d9:b2:44:15:7f:7e:d8:25:b0:18:87:
25:ea:b3:9a:6c:fc:5f:2b:f5:d6:7c:c0:84:b0:0e:
2f:48:29:da:e8:40:c0:97:5c:2d:9f:62:e7:d2:cd:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:BB:B3:70:56:95:AB:AB:46:A1:6B:55:0B:A4:50:45:1C:3B:B5
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:aa:19:c7:d6:c0:af:3f:6c:51:82:17:c9:bf:a6:54:ea:31:
83:82:75:30:03:2f:30:f7:9d:1d:ed:fc:48:56:d9:21:f3:d9:
75:0c:a6:70:03:4d:ba:98:6e:fb:ba:16:7b:74:e3:e9:2b:0a:
fc:85:ba:78:cb:32:8f:37:3d:ff:56:de:b4:3f:b4:77:b3:be:
40:50:4d:fa:c2:22:fe:5e:c1:9c:04:e1:b8:7e:39:5d:f3:a0:
4d:bb:81:ce:aa:5c:60:e3:da:76:2b:c8:60:f7:0c:fb:dc:8e:
df:43:2e:41:1c:1e:88:b7:6c:92:58:99:63:89:b7:b9:8b:36:
4b:11:0c:f7:4e:92:c4:93:b2:7b:b3:98:0c:b2:c5:ce:f8:0e:
cd:67:52:eb:97:e8:8d:94:f8:69:f0:84:3c:00:20:3b:01:60:
79:23:24:28:07:57:b9:cf:af:b3:e0:12:19:90:64:2f:4a:4d:
19:48:51:af:33:00:75:84:d4:13:62:9f:89:63:dc:cb:7e:41:
59:3a:6e:d4:20:b1:63:5c:e7:64:4c:b8:58:5e:f3:06:eb:7f:
9e:73:9a:e2:2e:ac:c6:d4:52:c2:56:f0:21:de:a6:69:b7:a5:
f9:96:38:5f:74:e4:e4:4e:e0:26:3e:7f:15:ae:53:6e:24:31:
ea:d6:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:32 2026 by rpki-client