Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: KXO+m2YrqS1p89e3Br6yeElYqqAdjpLrjESauU+4ZJ4=
Subject key identifier: 02:13:94:EA:65:90:56:92:46:8A:0D:13:32:97:B4:F8:44:41:EE:68
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019D38D340DB6DA83C618FEF79F4FCAD6B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 0780
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: uPVPK8yRq6fSMJeN8qCy4rZUa0DVzMGTao0PMAQZliw=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:40:db:6d:a8:3c:61:8f:ef:79:f4:fc:ad:6b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=021394ea65905692468a0d133297b4f84441ee68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:02:98:d0:57:56:f9:88:64:fc:41:19:74:
3c:3a:fb:ac:23:4e:f2:5c:d7:5f:d9:20:b1:e6:97:
83:49:39:28:c2:7d:24:f4:df:54:6a:89:0d:7c:73:
e4:05:e6:ef:5b:65:83:9c:40:c4:fc:aa:16:c9:51:
fb:e1:a4:a5:5e:3e:fd:ba:15:27:2d:86:4e:42:7a:
c2:4a:1a:be:a2:03:81:e8:8e:44:3e:bd:6b:cf:74:
7a:75:75:aa:90:db:6e:f2:5c:d7:5c:b7:5a:7f:6a:
d2:a9:d7:b6:e8:d6:48:9b:9e:c4:21:f5:82:b6:63:
28:43:4d:49:24:9f:c6:6b:1b:0d:1e:37:b0:a3:2b:
5b:dd:ef:0e:1b:c3:e6:09:99:39:fd:d6:9f:55:76:
10:2c:e2:f8:98:1c:a5:c7:52:5c:ff:3b:cf:2e:b6:
99:db:bc:b8:33:99:d1:f2:f9:25:d7:7b:ee:60:2c:
ac:c9:67:5d:3b:d1:5d:93:f6:5d:bd:17:6c:b2:42:
26:01:b5:10:5d:22:8b:65:e9:37:99:35:30:12:f3:
3a:52:fb:47:76:53:95:8e:7d:9f:49:35:3d:5b:e4:
9b:0a:87:66:eb:9a:9f:a0:1b:df:1c:a4:8b:10:d3:
64:3a:e0:40:12:63:73:5c:06:dd:29:7b:e1:f6:2a:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:13:94:EA:65:90:56:92:46:8A:0D:13:32:97:B4:F8:44:41:EE:68
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:94:1e:9f:29:f3:88:e3:45:22:e8:4a:f3:c3:40:ff:e3:ac:
6e:e9:a3:bb:fc:61:f0:3e:a6:8a:f3:36:6e:5d:84:0a:ef:85:
cd:dd:5d:07:fc:ef:3f:cd:ba:92:8f:4a:14:37:d0:76:4a:4f:
6c:fd:99:62:80:fb:6f:0e:8b:1a:8f:63:b6:89:6f:6d:07:de:
07:6a:1a:a8:3e:4e:dd:71:d0:35:ff:16:c7:14:6c:ba:80:0a:
3c:c5:e9:4f:f4:7e:f3:ba:bd:ad:a3:8d:d9:d2:3a:76:d0:6b:
7a:45:6b:23:e4:02:0c:9b:50:c9:87:d9:31:a2:b6:01:da:17:
b4:8e:70:9a:48:35:87:4c:27:09:75:c1:10:0b:cc:3c:bc:5e:
02:63:d7:91:84:ab:84:1a:a0:44:0c:88:74:a2:ea:57:19:97:
6c:5f:a0:aa:70:ea:33:98:f6:21:b3:41:f7:d7:3f:c9:b0:f2:
05:33:da:ee:3e:36:94:20:61:a7:2e:6f:11:9b:d2:6a:99:dc:
fc:20:96:d9:1f:3f:27:e5:3f:56:0a:5e:88:97:61:5f:1a:fc:
ac:c1:55:05:87:c7:dc:d5:44:2c:21:87:0a:51:38:1c:a1:1a:
0e:d2:9e:91:a5:65:f9:16:fd:ca:0e:34:6d:8e:e6:48:02:1b:
1a:fc:6d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400Dbbag8YY/vefT8rWtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmIxNThkMjllMzc1MDBkNWMzYTI1ZGFkYTE0OWIyYTUw
M2Y2YTUwHhcNMjYwMzI5MDkwMTAxWhcNMjYwMzMwMDkwMTAxWjAzMTEwLwYDVQQD
EygwMjEzOTRlYTY1OTA1NjkyNDY4YTBkMTMzMjk3YjRmODQ0NDFlZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQgCmNBXVvmIZPxBGXQ8OvusI07y
XNdf2SCx5peDSTkown0k9N9UaokNfHPkBebvW2WDnEDE/KoWyVH74aSlXj79uhUn
LYZOQnrCShq+ogOB6I5EPr1rz3R6dXWqkNtu8lzXXLdaf2rSqde26NZIm57EIfWC
tmMoQ01JJJ/GaxsNHjewoytb3e8OG8PmCZk5/dafVXYQLOL4mBylx1Jc/zvPLraZ
27y4M5nR8vkl13vuYCysyWddO9Fdk/ZdvRdsskImAbUQXSKLZek3mTUwEvM6UvtH
dlOVjn2fSTU9W+SbCodm65qfoBvfHKSLENNkOuBAEmNzXAbdKXvh9ipOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAITlOplkFaSRooNEzKXtPhEQe5oMB8GA1UdIwQY
MBaAFFC7FY0p43UA1cOiXa2hSbKlA/alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEt
NzQzMTEyYjBlNzcxLzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEtNzQzMTEyYjBlNzcx
LzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5Qenynz
iONFIuhK88NA/+Osbumju/xh8D6mivM2bl2ECu+Fzd1dB/zvP826ko9KFDfQdkpP
bP2ZYoD7bw6LGo9jtolvbQfeB2oaqD5O3XHQNf8WxxRsuoAKPMXpT/R+87q9raON
2dI6dtBrekVrI+QCDJtQyYfZMaK2AdoXtI5wmkg1h0wnCXXBEAvMPLxeAmPXkYSr
hBqgRAyIdKLqVxmXbF+gqnDqM5j2IbNB99c/ybDyBTPa7j42lCBhpy5vEZvSapnc
/CCW2R8/J+U/VgpeiJdhXxr8rMFVBYfH3NVELCGHClE4HKEaDtKekaVl+Rb9yg40
bY7mSAIbGvxtZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:18 2026 by rpki-client