Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: eAarzyLwqmWq+oCzQIYtAbh5bA0Mi6UmfTzaO5RAs38=
Subject key identifier: 9D:3A:C6:87:9C:D8:A7:D2:5C:2B:02:19:A4:DA:C5:20:FD:14:2F:3A
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019FA0E07207CCCCCBF9D9C22071D601AB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 08BF
Signing time: Mon 27 Jul 2026 00:01:31 +0000
Manifest this update: Mon 27 Jul 2026 00:01:31 +0000
Manifest next update: Tue 28 Jul 2026 00:01:31 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: ofbkQgRsgsGe0IhG07x2M0Fzs05ljK3gpNyxUanTdhk=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:72:07:cc:cc:cb:f9:d9:c2:20:71:d6:01:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Jul 27 00:01:31 2026 GMT
Not After : Jul 28 00:01:31 2026 GMT
Subject: CN=9d3ac6879cd8a7d25c2b0219a4dac520fd142f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:64:d4:65:09:bb:55:23:f2:be:17:70:52:
9a:c1:a2:69:fe:7f:26:a0:b1:d3:bf:c9:dc:f0:14:
7f:75:de:7b:e3:1f:17:16:f3:e6:1e:b2:fb:38:fc:
bc:45:77:ea:81:35:89:5a:ac:c0:83:07:97:e3:57:
d1:ac:0d:12:75:91:7f:3f:9e:0e:f5:58:85:eb:88:
cc:f2:36:89:fc:ca:72:96:aa:66:3a:89:ca:08:4b:
c4:a8:4e:f5:25:2d:4f:9a:8f:8b:ca:db:58:17:23:
21:87:1b:f8:f4:de:cf:e5:37:20:15:2a:a1:5e:2a:
fb:87:91:2d:11:a1:e0:19:b2:c2:b5:1b:57:dd:4d:
9c:5f:a7:66:25:8f:97:e0:48:3f:79:d5:66:e5:00:
30:4a:45:70:aa:f1:98:c3:16:86:92:cd:97:69:e9:
82:b8:8f:d1:3b:3d:93:8b:98:34:b4:d4:e0:26:25:
77:40:fd:ac:f1:4b:8f:a7:20:88:ad:5e:a5:d8:9c:
2c:c5:65:65:10:ea:7f:74:75:d8:62:e5:ee:08:d8:
eb:47:1e:cf:d8:8b:a5:ed:75:3f:aa:e6:b9:bb:73:
d8:71:5b:ca:57:fe:55:ec:42:81:f5:99:8c:a0:6d:
70:f2:54:ae:c6:36:39:36:5c:52:88:57:c9:8b:ba:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:C6:87:9C:D8:A7:D2:5C:2B:02:19:A4:DA:C5:20:FD:14:2F:3A
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:fa:d8:47:80:3c:cd:64:22:07:c2:85:c6:22:91:64:ff:5f:
7a:d8:ac:af:ca:43:9e:4b:43:11:84:3f:4e:78:dc:c3:7c:b2:
cf:39:ed:44:66:ad:a1:6b:bb:77:e4:be:09:ff:86:c8:4f:6c:
83:eb:ce:51:47:7a:03:e7:28:48:69:ee:81:f4:05:9e:7d:41:
00:dc:c4:39:c8:d9:a3:9f:9f:c4:f3:71:83:a1:16:ec:c5:e0:
37:9a:eb:1e:48:06:6d:37:02:59:19:24:52:21:c1:64:3e:0a:
4b:58:73:ec:c7:be:57:9e:7d:70:e0:0b:ed:cb:58:68:7c:ef:
c2:57:aa:00:53:56:ee:6d:5b:28:a0:d3:c8:2a:99:a0:88:ee:
28:3d:fa:2c:5d:97:21:9b:05:e3:72:b9:50:3e:96:ea:1b:65:
c1:27:05:27:80:e9:bd:2f:49:a0:e0:25:50:3d:a0:9c:42:b8:
a6:97:d3:de:22:48:31:ae:e4:70:06:e6:d2:94:57:8d:e7:6a:
2a:c9:c2:fa:10:28:2a:59:ff:64:6e:68:15:70:ba:4b:a3:82:
b5:a0:7b:fc:7b:44:82:69:7f:cc:31:33:06:7b:d3:d1:11:37:
d3:1a:a0:23:c1:9d:13:d3:8e:77:e4:c1:4b:bb:b2:4e:f4:b1:
15:a0:cb:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4HIHzMzL+dnCIHHWAauFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmIxNThkMjllMzc1MDBkNWMzYTI1ZGFkYTE0OWIyYTUw
M2Y2YTUwHhcNMjYwNzI3MDAwMTMxWhcNMjYwNzI4MDAwMTMxWjAzMTEwLwYDVQQD
Eyg5ZDNhYzY4NzljZDhhN2QyNWMyYjAyMTlhNGRhYzUyMGZkMTQyZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpdk1GUJu1Uj8r4XcFKawaJp/n8m
oLHTv8nc8BR/dd574x8XFvPmHrL7OPy8RXfqgTWJWqzAgweX41fRrA0SdZF/P54O
9ViF64jM8jaJ/MpylqpmOonKCEvEqE71JS1Pmo+LyttYFyMhhxv49N7P5TcgFSqh
Xir7h5EtEaHgGbLCtRtX3U2cX6dmJY+X4Eg/edVm5QAwSkVwqvGYwxaGks2XaemC
uI/ROz2Ti5g0tNTgJiV3QP2s8UuPpyCIrV6l2JwsxWVlEOp/dHXYYuXuCNjrRx7P
2Iul7XU/qua5u3PYcVvKV/5V7EKB9ZmMoG1w8lSuxjY5NlxSiFfJi7rG9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ06xoec2KfSXCsCGaTaxSD9FC86MB8GA1UdIwQY
MBaAFFC7FY0p43UA1cOiXa2hSbKlA/alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEt
NzQzMTEyYjBlNzcxLzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEtNzQzMTEyYjBlNzcx
LzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2vrYR4A8
zWQiB8KFxiKRZP9fetisr8pDnktDEYQ/Tnjcw3yyzzntRGatoWu7d+S+Cf+GyE9s
g+vOUUd6A+coSGnugfQFnn1BANzEOcjZo5+fxPNxg6EW7MXgN5rrHkgGbTcCWRkk
UiHBZD4KS1hz7Me+V559cOAL7ctYaHzvwleqAFNW7m1bKKDTyCqZoIjuKD36LF2X
IZsF43K5UD6W6htlwScFJ4DpvS9JoOAlUD2gnEK4ppfT3iJIMa7kcAbm0pRXjedq
KsnC+hAoKln/ZG5oFXC6S6OCtaB7/HtEgml/zDEzBnvT0RE30xqgI8GdE9OOd+TB
S7uyTvSxFaDLiQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:34 2026 by rpki-client