Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier: NSWNJSZuWRUrlSxt2kZIJ1Q07ofE3VXPxcoxhlVDJVo=
Subject key identifier: 5A:15:A6:0F:A2:20:5E:A3:76:60:A0:44:31:D6:16:A1:CE:9F:FD:9F
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer: /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial: 019FA116EC8FAFA8BD85568FD9BE58B09C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number: 02D6
Signing time: Mon 27 Jul 2026 01:01:01 +0000
Manifest this update: Mon 27 Jul 2026 01:01:01 +0000
Manifest next update: Tue 28 Jul 2026 01:01:01 +0000
Files and hashes: 1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: GkqaINwJGLgJ23n4rHa8OaiSvCrhBwSdI3zlqbT4sGA=)
2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:ec:8f:af:a8:bd:85:56:8f:d9:be:58:b0:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
Validity
Not Before: Jul 27 01:01:01 2026 GMT
Not After : Jul 28 01:01:01 2026 GMT
Subject: CN=5a15a60fa2205ea37660a04431d616a1ce9ffd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:39:37:71:72:c3:c0:89:38:84:80:f2:9a:
fe:bd:b4:34:90:27:d0:71:ee:28:51:3d:e3:78:75:
7a:4c:3a:61:6e:39:6d:8a:b9:94:b4:c7:b7:1e:91:
9c:99:63:97:a1:2c:46:b7:5e:f5:ba:d4:8c:97:c0:
2d:38:59:57:ad:a0:5b:5b:a4:35:7b:29:a0:3a:d8:
e5:87:c8:d1:c5:7e:3e:ee:aa:90:3e:ab:32:2f:01:
60:63:3d:f5:55:e9:7d:f8:57:7e:30:90:6c:ae:14:
97:19:da:e1:ac:f5:eb:44:2c:1d:92:01:98:1c:71:
08:d1:69:a1:87:19:28:d2:a4:72:cf:03:a1:4a:c6:
32:45:e0:e4:e2:8a:ec:aa:ea:02:12:33:f4:34:38:
7d:0e:b0:e7:d3:16:13:be:8e:ba:58:91:39:4f:3b:
ec:6d:0b:ad:20:29:f8:e0:81:d0:84:fb:89:05:ea:
44:93:b7:85:fc:33:49:7a:b5:05:4c:71:35:81:c6:
35:dc:e6:1c:bb:dd:ab:88:d0:24:c3:0c:fd:5d:93:
00:bc:7c:20:9f:41:55:81:33:84:b8:c6:bc:ce:2e:
9a:5d:e5:5f:1e:8b:a2:06:9f:4c:22:0e:fd:30:4a:
f0:c9:5a:b3:36:bc:d7:8b:c1:4a:e0:f3:df:85:8d:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:A6:0F:A2:20:5E:A3:76:60:A0:44:31:D6:16:A1:CE:9F:FD:9F
X509v3 Authority Key Identifier:
keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c3:df:1d:44:78:a4:b6:37:63:30:a7:23:0f:b3:6e:f7:50:
41:e7:62:ff:e6:0f:8e:88:af:df:b0:15:34:70:20:d9:75:4a:
0b:42:0f:ec:b7:60:36:ff:8a:b6:3b:24:04:86:64:92:32:0f:
31:f6:33:9c:3d:5c:14:a5:e4:52:13:8d:52:12:a7:41:76:c8:
45:32:1a:34:97:2f:13:34:8c:c9:c1:09:07:2a:41:06:64:99:
80:68:f0:db:16:2e:0a:73:67:3c:83:f5:1b:70:a6:70:10:1a:
ff:ad:07:6c:d9:1e:33:d5:a1:94:e0:44:6c:78:2c:83:ef:9c:
0d:2b:b2:73:75:dc:96:d6:78:53:23:6d:19:21:44:a1:dc:44:
01:ce:fe:90:65:5c:6d:59:e1:4d:62:15:7c:70:0a:3b:55:58:
3a:08:a9:9c:13:26:e7:92:60:8d:cd:e7:20:56:1f:b0:ff:7b:
6e:e6:eb:c0:23:d0:88:3f:31:fe:8c:e3:ed:8e:8a:08:4f:aa:
3f:e6:cb:70:c4:c2:94:17:66:18:f8:5a:8c:78:49:2f:62:9f:
d0:a0:81:c0:28:16:ba:bc:30:0b:a1:d4:e1:c4:50:9d:85:fb:
91:59:f1:d9:ab:71:42:95:2e:d8:f0:53:d3:63:fb:2f:6d:33:
31:77:ba:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFuyPr6i9hVaP2b5YsJx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYjBlNzE1NzE0N2E5MGNlMzc0NjBiNzE5Y2I3NjA2OTRh
YjU0MTQwHhcNMjYwNzI3MDEwMTAxWhcNMjYwNzI4MDEwMTAxWjAzMTEwLwYDVQQD
Eyg1YTE1YTYwZmEyMjA1ZWEzNzY2MGEwNDQzMWQ2MTZhMWNlOWZmZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi085N3Fyw8CJOISA8pr+vbQ0kCfQ
ce4oUT3jeHV6TDphbjltirmUtMe3HpGcmWOXoSxGt171utSMl8AtOFlXraBbW6Q1
eymgOtjlh8jRxX4+7qqQPqsyLwFgYz31Vel9+Fd+MJBsrhSXGdrhrPXrRCwdkgGY
HHEI0Wmhhxko0qRyzwOhSsYyReDk4orsquoCEjP0NDh9DrDn0xYTvo66WJE5Tzvs
bQutICn44IHQhPuJBepEk7eF/DNJerUFTHE1gcY13OYcu92riNAkwwz9XZMAvHwg
n0FVgTOEuMa8zi6aXeVfHouiBp9MIg79MErwyVqzNrzXi8FK4PPfhY2sFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoVpg+iIF6jdmCgRDHWFqHOn/2fMB8GA1UdIwQY
MBaAFFCw5xVxR6kM43RgtxnLdgaUq1QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYt
MTRjOTE5YWQ4NzY4LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mNGM5NmUtNTIxZC00NGI5LTljZWYtMTRjOTE5YWQ4NzY4
LzEvVUxEbkZYRkhxUXpqZEdDM0djdDJCcFNyVkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8PfHUR4
pLY3YzCnIw+zbvdQQedi/+YPjoiv37AVNHAg2XVKC0IP7LdgNv+KtjskBIZkkjIP
MfYznD1cFKXkUhONUhKnQXbIRTIaNJcvEzSMycEJBypBBmSZgGjw2xYuCnNnPIP1
G3CmcBAa/60HbNkeM9WhlOBEbHgsg++cDSuyc3XcltZ4UyNtGSFEodxEAc7+kGVc
bVnhTWIVfHAKO1VYOgipnBMm55Jgjc3nIFYfsP97bubrwCPQiD8x/ozj7Y6KCE+q
P+bLcMTClBdmGPhajHhJL2Kf0KCBwCgWurwwC6HU4cRQnYX7kVnx2atxQpUu2PBT
02P7L20zMXe6fg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:56:10 2026 by rpki-client