Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: s8NwuSIx1mw6thnJ5k8Q/xH/o15vLJ4x2qY+glj3nF4=
Subject key identifier: 23:ED:8A:D7:50:4F:97:B8:1F:D6:0D:CE:E1:9A:09:05:83:BB:86:33
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019D9B50A63E863B7FCC95FC2A30F1B322F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 07B3
Signing time: Fri 17 Apr 2026 12:00:46 +0000
Manifest this update: Fri 17 Apr 2026 12:00:46 +0000
Manifest next update: Sat 18 Apr 2026 12:00:46 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: o+7iYeK+bgNtuVSZ1KDXPPC2RAZQ0O6Vogjua2Od0e0=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a6:3e:86:3b:7f:cc:95:fc:2a:30:f1:b3:22:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Apr 17 12:00:46 2026 GMT
Not After : Apr 18 12:00:46 2026 GMT
Subject: CN=23ed8ad7504f97b81fd60dcee19a090583bb8633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:d5:3d:3e:bf:6a:e5:f6:3b:39:16:f3:9b:
2d:e6:b8:f5:14:e0:74:4d:a5:b4:40:e1:59:31:78:
2c:7c:a0:1f:c3:1f:eb:c2:74:62:6c:8d:b9:6f:de:
19:a8:dd:dd:e9:7e:61:e4:2d:da:f4:01:9c:b2:1d:
3e:b9:1a:56:3f:74:2c:1e:7b:88:df:75:54:ae:ee:
41:e6:2f:6d:27:86:df:75:fe:fb:a6:43:45:8f:76:
9d:5c:9c:fb:2a:a1:59:4f:22:c1:b1:73:17:9b:64:
d9:e8:97:b3:da:75:7b:a8:53:9b:50:ea:ef:ef:4a:
b1:fa:1a:8d:e6:3f:ff:fe:fd:7c:2a:20:b5:7b:71:
2e:ed:d5:6f:e5:da:f3:dc:06:80:ef:e4:1d:f8:72:
ff:a8:e0:4c:e4:7a:fd:1a:8d:9b:a5:77:0f:eb:ac:
49:a1:33:60:ea:ef:28:cb:b8:78:9d:6c:4f:fa:58:
1a:6d:e8:aa:53:2a:78:d6:46:4d:6b:0d:93:4f:29:
ff:dd:5e:5f:4e:4f:e2:37:a9:61:b1:5e:f3:61:90:
e9:cf:8b:5a:7e:9c:5a:f1:53:33:09:61:14:5c:3b:
f4:20:23:15:ab:e8:0f:39:3e:d8:7c:6e:9a:7c:93:
ab:d7:e2:37:49:a1:07:71:b4:3c:2b:c1:8f:76:6f:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:8A:D7:50:4F:97:B8:1F:D6:0D:CE:E1:9A:09:05:83:BB:86:33
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:90:53:d4:5d:de:34:ba:a9:e6:35:fc:5c:0a:1f:8b:87:e2:
4d:87:72:58:d0:03:d5:d2:41:a3:0d:67:e3:71:ad:98:ce:51:
54:bc:fa:7c:d4:45:03:f2:9a:94:c6:50:05:4e:ce:88:d6:1c:
83:e3:00:47:28:9f:f8:7e:b1:35:2b:d6:25:d3:fc:e4:e0:44:
1f:2e:76:49:eb:c9:07:51:73:ce:90:96:a4:46:a0:51:ec:76:
eb:e1:d9:07:7e:aa:2e:23:1a:7a:da:30:60:fd:e9:5e:eb:09:
eb:5e:ce:70:b2:d2:9a:4a:c1:cd:8c:be:d9:6e:3b:9b:ea:f7:
40:d7:d2:b4:ea:fc:44:18:30:64:cc:35:a0:25:b6:97:cd:94:
de:e8:30:52:ac:ea:f0:d6:45:a8:a4:c0:d5:3b:e8:17:a3:fa:
46:a6:80:2f:68:c2:ba:03:fc:2d:fd:00:35:83:3a:74:c3:df:
85:37:cf:58:43:91:35:83:a8:78:40:7f:7b:50:72:ec:8d:b6:
2f:c1:a9:b6:02:7d:b6:9d:8b:ac:a9:41:39:0f:47:34:ec:fd:
57:63:bd:79:a9:e6:10:03:54:82:7f:38:e8:76:d9:48:9d:0c:
b9:1f:d7:57:22:6c:af:ef:27:0a:fb:cd:17:da:0b:f9:b2:8d:
cb:07:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:59 2026 by rpki-client