Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json)
Hash identifier: pyQNMlkQoTjBC9ql2fHbNkRramHfZ9r9WI1W5xTJj+A=
Subject key identifier: DB:94:3D:42:B2:5A:8F:BA:F9:D3:90:85:ED:DB:BF:8D:D5:23:BB:DC
Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Certificate serial: 019CACEB6A35C53BEE5F4DD3A90E4AC741C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
Manifest number: 05B8
Signing time: Mon 02 Mar 2026 05:00:35 +0000
Manifest this update: Mon 02 Mar 2026 05:00:35 +0000
Manifest next update: Tue 03 Mar 2026 05:00:35 +0000
Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: KIAJYdC/24gDL5jsilblcITYlcGUTM+/I9yWqtPhCpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:6a:35:c5:3b:ee:5f:4d:d3:a9:0e:4a:c7:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Validity
Not Before: Mar 2 05:00:35 2026 GMT
Not After : Mar 3 05:00:35 2026 GMT
Subject: CN=db943d42b25a8fbaf9d39085eddbbf8dd523bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:3b:21:4e:38:9f:a8:72:27:c1:03:8e:8b:
1a:b7:c8:e4:b8:59:eb:b8:24:d9:e9:e9:60:4e:33:
4e:94:78:1c:e9:7f:1a:9b:45:74:f6:30:d2:0e:b3:
a9:ca:64:50:3c:de:d7:04:56:ea:6c:84:e0:50:57:
08:ca:f9:1b:af:ab:dd:1b:bc:03:2a:3c:08:89:d0:
17:cb:3e:7c:e7:08:f5:d9:94:67:04:60:e1:84:9b:
5b:76:a0:34:0d:10:63:0e:c6:4d:c6:d7:29:27:95:
52:d5:4c:6c:81:4a:47:eb:76:9d:dc:59:71:e8:e3:
e9:79:45:a7:64:f5:3c:8c:24:9b:43:87:e6:a7:e1:
52:cf:d4:74:94:bc:7d:7f:19:3c:1c:a5:16:a1:fa:
3d:39:e1:1e:99:40:aa:93:26:72:05:9b:43:37:1b:
2f:a4:f6:d7:d2:2a:71:36:c0:93:2f:96:51:4a:26:
b2:23:10:93:0b:07:f7:99:7a:ea:5e:55:f3:da:0c:
52:c4:95:7e:d5:41:58:ca:80:09:9b:d5:53:4a:d9:
7b:19:4a:a3:0a:61:c2:73:17:36:2c:f6:3a:93:97:
83:03:44:6d:c0:3b:79:0b:a2:c7:53:19:e9:a6:c9:
c0:32:3f:c6:a9:c8:69:8a:c8:06:3f:7f:32:2e:73:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:3D:42:B2:5A:8F:BA:F9:D3:90:85:ED:DB:BF:8D:D5:23:BB:DC
X509v3 Authority Key Identifier:
keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9c:05:01:1c:17:3e:fc:43:80:90:9b:ad:be:d8:b4:ed:2c:
f8:be:40:f9:49:ef:01:38:46:30:96:3a:a1:3b:50:62:7f:ab:
ba:04:4a:86:6c:57:9a:50:15:69:c3:d5:5d:16:70:db:33:cf:
d2:50:0d:c6:75:cc:2d:3c:f4:8f:3b:76:db:37:d5:a8:76:35:
e6:b1:09:a9:6e:db:6e:5d:dd:3e:20:99:cf:b7:98:a3:a5:92:
09:c6:7f:77:77:5c:5e:1a:44:09:16:91:20:53:4b:e4:2e:17:
38:66:4a:c3:47:fe:48:6c:05:a9:41:3c:3c:6b:f6:b7:49:2a:
d1:34:2f:17:d9:dc:fe:5e:2b:41:ba:ee:fa:5c:6c:91:0c:64:
cb:d9:7c:07:d0:ab:8c:6c:ce:3d:28:df:82:68:43:06:50:a0:
3e:64:ea:e8:a0:c0:b3:de:8b:8d:59:e8:51:83:b4:c5:f1:93:
4d:58:58:13:1d:85:4d:15:55:51:13:9c:82:26:b6:bc:5f:ae:
5f:d5:e4:da:e1:39:ae:65:1c:af:0d:1f:b0:9b:44:d1:bf:53:
e1:39:19:7d:b6:05:eb:f8:67:fe:cd:f4:dc:70:68:49:de:80:
c1:68:f5:32:75:8d:a0:e1:eb:e0:12:5e:b9:e3:3c:62:a5:1b:
c8:fa:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:31 2026 by rpki-client