Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
File: ULb-4OehTH4dOGCdm8PC78yvM6w.mft (raw, json)
Hash identifier: ztj/ZYBunXxSi7wQTuno7agpWC803ndCLYZEy8RYTKo=
Subject key identifier: 98:11:F4:AD:0C:0D:82:37:0F:F5:5E:EE:9D:F5:78:11:9D:E0:7B:72
Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
Certificate issuer: /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Certificate serial: 019D394199B019CD1E6E70C8C2E07F4136D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
Manifest number: 046E
Signing time: Sun 29 Mar 2026 11:01:33 +0000
Manifest this update: Sun 29 Mar 2026 11:01:33 +0000
Manifest next update: Mon 30 Mar 2026 11:01:33 +0000
Files and hashes: 1: ULb-4OehTH4dOGCdm8PC78yvM6w.crl (hash: JdyJ6NL1ZpL9F4lDRaJ9OtuKDn7Ek2lwsM/uWnRVXeE=)
2: bfthD07WPuBzuF8V8MFMquzZVxc.roa (hash: TQL/YwkJgVnHTckXmWXUYr+a7nIsqs2yfinw/Sf17kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:99:b0:19:cd:1e:6e:70:c8:c2:e0:7f:41:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Validity
Not Before: Mar 29 11:01:33 2026 GMT
Not After : Mar 30 11:01:33 2026 GMT
Subject: CN=9811f4ad0c0d82370ff55eee9df578119de07b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:fa:db:60:70:7c:22:fa:65:98:46:90:78:
f9:f1:f3:32:82:d8:6d:a3:f5:b2:3b:62:15:b3:c4:
e0:51:81:ef:7b:a3:a3:a6:73:1c:a6:21:9c:eb:c5:
92:50:b9:13:d5:64:e1:2f:6e:63:de:d2:89:32:b2:
fc:29:e0:d4:b5:0b:2c:a2:1b:98:2f:30:76:ac:99:
3f:65:1b:ef:52:49:38:e4:05:2c:b4:47:ed:53:f1:
ad:5a:a8:43:c5:7d:6b:37:a6:b3:f3:59:cd:38:c9:
b6:05:c2:9b:33:a0:e1:4b:93:84:4e:4a:78:95:fa:
d7:aa:32:3b:6b:4d:29:06:e6:f1:d2:92:aa:90:f2:
61:11:5c:73:73:cb:6a:d3:5c:31:fe:ca:e1:1a:ad:
37:4d:90:ae:01:48:ca:de:e0:77:fc:f0:fb:87:64:
3a:13:da:98:97:1e:b2:43:50:2b:3a:3a:02:e2:61:
02:09:68:44:94:e7:c0:d6:fe:86:97:5e:89:3f:81:
7c:6c:b2:a6:4c:cd:76:7d:35:00:c6:d1:42:a2:2c:
a7:12:26:cd:94:c2:2f:41:6a:f1:9c:78:8c:89:b9:
68:de:6b:88:12:a8:8f:eb:bc:8e:b7:28:42:a1:99:
b2:df:23:4c:ca:10:ef:7b:22:5f:21:54:9e:4b:a9:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:F4:AD:0C:0D:82:37:0F:F5:5E:EE:9D:F5:78:11:9D:E0:7B:72
X509v3 Authority Key Identifier:
keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7f:2f:f5:19:4f:fc:7f:ec:91:e7:a5:1c:b4:d4:82:3b:24:
6c:16:00:0d:f5:51:86:34:0c:cd:20:f6:f5:6c:94:33:42:45:
b3:9f:f7:1d:21:3a:db:a6:60:39:3f:f1:bc:e3:6f:2a:33:ee:
9d:c9:12:75:3f:5c:aa:3e:55:31:bb:57:1a:de:1e:bb:98:98:
ac:31:4b:c9:25:7a:a1:56:f0:1f:c5:55:39:ae:e2:7c:65:4c:
90:87:9b:d2:df:12:71:d3:45:4f:e6:d7:33:30:4d:aa:d2:1a:
8e:b6:dc:7f:d8:b9:ef:d1:27:55:2b:c2:25:31:a6:81:57:26:
da:c8:68:2c:05:00:16:3e:9a:02:cc:30:d4:c9:a2:06:27:46:
9d:a6:6f:8f:55:7f:29:d5:bc:bf:35:56:4d:60:45:53:16:f2:
a2:d5:7c:2b:21:e8:e7:53:11:8c:28:63:c9:b6:cd:33:4a:b0:
58:35:cf:8a:09:bd:36:41:ca:61:4c:8c:5a:1a:66:29:83:9d:
ff:db:d4:b8:41:af:76:73:49:5a:9f:1a:de:4a:35:37:65:80:
e0:bf:85:d5:73:ee:23:4d:bd:cd:a7:18:2f:f8:2c:74:6d:7e:
8e:31:ac:1a:be:2e:cb:07:da:33:1e:d2:a9:34:ac:fe:79:07:
a2:fc:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:03 2026 by rpki-client