Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier: NEvry2+6U7ZhE02FGnpz1GhlSvHgxJaTVN8iVb1k0ec=
Subject key identifier: A6:81:68:E8:7F:88:CF:4E:E5:A7:11:A0:A6:83:43:EC:BA:D2:99:38
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer: /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial: 019CE41145C5FA4FC5B7FE2B49F7B2A3AD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number: 016B
Signing time: Thu 12 Mar 2026 22:01:03 +0000
Manifest this update: Thu 12 Mar 2026 22:01:03 +0000
Manifest next update: Fri 13 Mar 2026 22:01:03 +0000
Files and hashes: 1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: hTpQWQMDCdlAlkw0JEUT2nMckBU1IuXctabmoJj97tQ=)
2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:45:c5:fa:4f:c5:b7:fe:2b:49:f7:b2:a3:ad:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
Validity
Not Before: Mar 12 22:01:03 2026 GMT
Not After : Mar 13 22:01:03 2026 GMT
Subject: CN=a68168e87f88cf4ee5a711a0a68343ecbad29938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:a4:64:31:6a:fa:f2:79:e6:6e:97:fd:30:
af:ad:15:fe:43:48:8f:b2:26:fa:06:f0:80:9e:b5:
b3:81:04:b2:f9:f9:12:d4:0d:2c:98:05:6b:61:54:
60:70:17:48:c8:a8:b5:31:f8:a9:80:d6:31:fb:00:
f1:33:67:f5:11:7c:f0:f0:a1:e3:21:50:a1:ec:99:
e8:8c:87:63:e2:e7:34:2a:a1:d4:fa:cf:ca:75:ab:
da:bd:ed:c7:f8:55:91:fb:47:30:7d:a0:ac:e3:62:
08:46:6c:ec:8d:df:69:10:72:83:8d:46:43:ed:ec:
51:ac:3b:d6:f7:dd:67:db:53:3d:e2:a9:8b:3a:a6:
bd:7a:9e:4a:42:e9:6f:10:ee:7e:5d:8b:ca:5a:62:
e4:fa:6f:0b:f1:cc:69:31:f1:18:a6:f6:5c:55:ec:
2c:aa:f0:46:f7:b6:83:bf:19:a0:31:32:e3:1f:6a:
a7:49:db:74:9e:f3:6e:de:08:5a:9b:e1:ce:f8:04:
3a:fa:59:27:69:64:7e:d0:88:84:45:f4:9d:a7:3d:
b4:5f:09:02:71:06:24:31:ba:67:d2:22:3c:9c:cf:
3f:40:86:41:92:08:5c:a7:a0:66:b4:03:b7:4b:1b:
e3:29:42:ee:14:f8:88:5c:93:37:80:38:f8:da:03:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:68:E8:7F:88:CF:4E:E5:A7:11:A0:A6:83:43:EC:BA:D2:99:38
X509v3 Authority Key Identifier:
keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7a:71:33:31:49:e1:09:1a:9e:3b:be:45:65:84:65:9d:d3:
74:51:88:a5:5d:09:11:bc:61:70:d5:db:eb:70:8c:2c:c3:02:
83:2c:88:d7:38:15:ec:49:2a:6d:06:e1:50:da:ea:cf:bb:4f:
d8:e6:6b:a4:f9:d7:2e:3d:70:0a:9f:50:36:0e:7f:04:09:f4:
23:d4:bc:7e:cb:9e:5a:72:64:a3:d2:26:51:97:a7:b7:1c:85:
f2:77:da:07:27:0a:5f:c0:08:aa:4d:14:06:6e:40:ea:70:55:
86:14:a4:d8:05:37:0d:bb:18:1e:8e:63:1b:d7:be:8d:00:97:
0a:2b:11:7b:8a:ab:97:d7:4b:fd:64:f9:9a:db:68:08:04:2c:
9b:e9:57:ff:05:e2:b0:c5:6d:af:70:fb:88:7d:38:15:d0:c0:
3f:bd:83:24:87:ec:22:7b:bd:21:fd:9a:e1:c2:21:70:cc:e8:
ea:9e:93:a1:56:20:4e:2d:e1:59:24:80:50:5e:d4:31:d6:24:
ab:e9:78:2f:ed:9b:f8:f7:7b:07:b1:5c:76:e9:59:6f:95:e9:
b4:bb:55:30:b3:16:32:2e:ee:ca:54:c5:6b:b5:10:94:6b:96:
be:6f:8b:ea:86:de:0c:a7:2c:96:1f:27:b0:51:5c:d9:1c:a8:
ff:54:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:55 2026 by rpki-client