
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier: TpMp4I+01ngMA0NOMaiCqwKIXd9poVd6Mbaw+RSRmNo=
Subject key identifier: 2C:4E:88:00:1E:B7:7A:3D:3F:F4:E5:FD:F4:1D:E1:F7:72:18:24:99
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer: /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial: 01A18D8A989C085831E429BD20DB35F3AD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number: 03D5
Signing time: Fri 30 Oct 2026 16:00:32 +0000
Manifest this update: Fri 30 Oct 2026 16:00:32 +0000
Manifest next update: Sat 31 Oct 2026 16:00:32 +0000
Files and hashes: 1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: Q3DPQ8FCKutaB8o+SL9mqOLXQAAphlXCnP/bQZ6GTkw=)
2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:8a:98:9c:08:58:31:e4:29:bd:20:db:35:f3:ad:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
Validity
Not Before: Oct 30 16:00:32 2026 GMT
Not After : Oct 31 16:00:32 2026 GMT
Subject: CN=2c4e88001eb77a3d3ff4e5fdf41de1f772182499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:d7:64:80:91:9d:36:6d:3e:b2:9c:b0:35:
5d:18:30:0b:07:23:53:f1:eb:d3:a2:c6:53:23:8f:
22:69:3e:fe:63:c8:f1:72:36:3b:dd:5b:fe:54:7f:
ab:36:20:a8:e6:65:fd:0c:b0:72:d8:88:11:6e:a1:
53:ee:a4:d2:73:85:cf:e7:26:06:fd:13:6a:4c:e8:
06:cc:87:6c:2f:af:af:a0:84:40:65:e9:bb:e4:59:
33:f5:58:21:97:32:17:df:76:49:86:f9:53:65:a2:
52:81:60:20:36:03:0e:c1:ed:2c:1d:34:65:82:8b:
6a:a2:f6:33:b2:02:05:6d:81:6b:b6:8d:8c:81:a0:
8c:c2:b4:87:a1:a7:57:3e:a2:af:90:78:24:bb:7d:
26:ca:cf:1a:13:39:27:48:dd:e1:c3:c4:1f:65:2e:
c3:d6:ff:73:41:f7:da:9a:8e:e3:6e:95:33:db:e4:
68:f4:b3:88:8c:dd:8a:c9:75:18:6d:9a:93:87:26:
0b:7b:c8:1f:1e:03:62:c8:da:fc:f0:53:09:1f:9d:
ba:77:a8:f6:16:a6:e1:d2:cc:f9:3a:a9:88:c7:13:
8c:0c:4c:6e:74:da:2d:9c:fc:78:86:b9:60:fe:66:
ce:2b:f8:9f:4b:52:53:77:c9:f2:e2:c3:2d:fa:ba:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:88:00:1E:B7:7A:3D:3F:F4:E5:FD:F4:1D:E1:F7:72:18:24:99
X509v3 Authority Key Identifier:
keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:47:b3:f4:05:6e:ce:9e:b5:ea:84:e5:9d:39:db:83:7a:5b:
bb:b4:d1:67:33:43:3b:9c:80:24:bf:ad:90:2c:29:f4:64:c6:
9c:5a:8c:72:f1:59:45:f8:f4:9f:70:2b:14:db:e8:4f:46:41:
f1:68:23:4f:68:0c:22:c1:f6:fd:94:99:b8:79:93:0f:76:53:
d8:8b:46:55:42:a7:62:96:62:d5:2e:1c:3b:c0:4e:1b:87:05:
94:f9:88:6e:0b:ca:0b:2c:10:b4:32:6c:e7:bc:7c:d7:9a:1f:
fc:c5:bc:71:fb:fc:d5:ae:ff:8c:58:17:1e:f1:ed:c2:75:ea:
fa:dc:a5:c6:f6:a1:9f:af:e3:d3:a7:fb:d2:17:4a:60:79:1e:
a7:7e:bb:a8:49:6d:d6:ee:ad:6b:35:63:b5:62:8b:1a:ba:9c:
d1:21:4e:83:ed:98:65:38:8f:c5:fc:c8:61:0f:8c:00:18:e9:
80:76:a1:86:af:59:4b:98:93:ab:15:8e:3a:98:91:8b:90:f4:
64:4a:d5:c1:38:d3:8b:90:6e:7d:e7:18:05:3b:19:d9:95:46:
fa:ef:d8:06:c8:2d:5d:bb:b6:99:9f:7a:f2:f6:ea:eb:8f:78:
9e:55:09:78:64:62:c3:7d:ae:c7:f1:71:67:ab:c6:cf:a7:2f:
83:18:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:17:31 2026 by rpki-client