Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: moDgW9VxXOD4CiqIn5JL8RxvlaiSTB8EdfZYWr7TCas=
Subject key identifier: A0:D9:36:ED:DA:0F:0A:16:34:7E:9C:F3:B5:E7:EA:48:3A:47:DC:0E
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 01A13E268706B63853B8E241E7D6EB0F3981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 0995
Signing time: Thu 15 Oct 2026 06:01:14 +0000
Manifest this update: Thu 15 Oct 2026 06:01:14 +0000
Manifest next update: Fri 16 Oct 2026 06:01:14 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: fZXCfKsZD6O/JKspWH0ZKhNbBInwYzbZEqEX6hLe7W8=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:87:06:b6:38:53:b8:e2:41:e7:d6:eb:0f:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Oct 15 06:01:14 2026 GMT
Not After : Oct 16 06:01:14 2026 GMT
Subject: CN=a0d936edda0f0a16347e9cf3b5e7ea483a47dc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:14:1f:5e:bc:28:9e:60:ca:87:82:38:96:
75:61:5c:40:4d:fa:c2:2f:60:c2:10:df:46:ac:ce:
bc:c8:18:55:fb:b4:58:c5:74:94:44:22:4b:03:0c:
93:27:cf:c5:c2:c7:3e:80:35:f4:e8:b6:24:98:57:
73:c5:57:7f:0e:86:21:0a:28:87:73:af:f8:52:68:
1a:37:56:fd:d7:4c:67:64:df:f7:07:7e:58:9d:df:
46:45:fd:82:5b:9c:78:cc:ff:b2:5d:56:5b:fe:2b:
19:5b:ef:d4:dc:7c:7d:92:4e:b3:b6:69:4c:0b:6c:
89:d9:3a:d2:c6:73:c1:a2:6e:db:51:ba:69:5e:b9:
a3:83:ee:90:73:d9:8c:e1:8e:3f:d8:65:1c:6a:a4:
e4:ca:22:b1:0d:57:e9:4d:54:09:04:da:73:8a:ee:
f1:66:6d:f3:ea:d8:0c:e5:08:9d:7a:55:77:c2:cf:
b1:4a:02:26:3c:ed:76:23:ce:66:a6:7c:41:19:3c:
57:df:5f:7f:6f:77:1f:d1:ab:24:1c:9f:20:0e:81:
22:9f:25:3b:a3:4d:36:22:28:ec:4f:33:59:66:fa:
31:61:fb:df:5c:c9:a9:00:ad:34:f1:79:d7:4e:0a:
6c:c4:18:b6:af:4f:a1:72:da:67:3c:fd:0f:04:a0:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D9:36:ED:DA:0F:0A:16:34:7E:9C:F3:B5:E7:EA:48:3A:47:DC:0E
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fb:e1:f4:76:5b:cd:d1:67:69:35:dd:1e:98:1b:f3:da:ba:
fc:d8:81:80:9d:21:73:1d:f0:13:4a:d0:9e:49:a5:aa:25:45:
09:f7:fa:83:02:9e:00:19:13:ef:9e:a8:be:37:2f:e2:a9:1b:
e2:f2:8c:35:82:31:e5:89:50:47:73:1b:41:4a:31:1e:f7:ff:
f4:07:cd:d2:53:9f:49:5e:a4:a5:6d:17:03:94:c8:66:0d:a6:
45:6f:9b:1a:08:35:0f:8d:d0:7c:46:6c:fb:12:ac:74:ce:fd:
84:58:ea:51:cf:8d:4a:b4:e6:9f:dd:21:45:a9:15:2b:ee:01:
7c:2b:a6:2e:bc:8a:f4:41:45:c7:18:54:e9:84:87:a3:48:f2:
b0:ee:0b:3a:79:0d:ec:89:9f:bd:2c:42:27:fb:14:45:ce:cf:
b2:d0:f1:15:85:c8:c8:0e:93:6c:07:cf:85:9a:c1:b9:63:45:
46:b1:76:48:8b:30:f9:5a:89:90:59:f6:3f:77:96:c4:8c:3b:
23:00:2b:18:fa:a7:82:9c:d6:7d:33:2c:0b:15:2a:b7:0e:48:
70:2e:bb:df:ed:4f:56:90:fc:a4:58:99:0e:4f:3c:82:53:c0:
27:f0:1b:c3:70:98:9b:8b:1e:49:76:58:58:86:b9:57:4d:0c:
5a:e8:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:28:26 2026 by rpki-client