Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: SE9zP2dLiokf3Gfy6oaqOZRy39jXr1I2HFmWDwmmA8M=
Subject key identifier: AF:D5:D2:76:A6:A1:B4:4E:D2:A3:EA:2E:88:B0:C8:77:8D:61:FA:80
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019CABD9A07E8263B1DBDF2699B28475640B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 0737
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: 7UO7lN/waDvqMB9WI1hxwVaejDZpJJM7f98hfAua0Kk=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a0:7e:82:63:b1:db:df:26:99:b2:84:75:64:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=afd5d276a6a1b44ed2a3ea2e88b0c8778d61fa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:13:65:85:c4:c9:4c:26:17:89:50:99:03:
d8:d6:fa:b4:94:4a:bc:58:e5:d6:93:45:5a:6a:d4:
a0:15:3b:f7:e4:9f:6f:87:7b:81:03:65:3b:74:ac:
aa:20:51:97:91:01:21:02:95:5e:ab:17:82:5d:4e:
af:a9:b9:4f:09:23:3e:fc:0e:30:2b:e2:a5:36:b8:
75:98:24:d0:f3:ef:40:87:aa:ac:9a:d8:3a:aa:ba:
97:c7:10:d0:5d:82:4b:78:8d:cc:c0:97:12:e2:e6:
a6:d7:09:f1:b0:49:04:b0:29:54:d9:01:77:48:03:
00:7a:8f:e2:76:0c:e6:d7:4d:30:58:20:49:1c:b0:
08:1d:a5:e0:28:c9:82:de:b5:96:20:2d:30:b1:3f:
a9:1d:47:ef:e3:55:d1:cc:42:a3:a0:b1:b9:95:61:
00:96:be:51:2f:6a:ea:a0:a9:87:c4:55:93:3c:f0:
71:73:54:95:fc:43:e2:5d:11:4c:02:06:76:bb:c8:
ac:ad:d2:07:4f:8e:c5:e4:6b:ff:f9:34:83:6c:4a:
3a:cd:5f:68:57:ed:1e:0b:0c:20:19:d0:be:3a:43:
8a:21:ca:c6:72:db:76:b1:12:8a:01:59:f4:dc:2a:
61:dc:e5:dd:6d:fb:91:4e:ae:e5:d8:a3:45:8c:60:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:D2:76:A6:A1:B4:4E:D2:A3:EA:2E:88:B0:C8:77:8D:61:FA:80
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:62:8c:c3:19:08:d8:83:da:f0:ff:16:c0:35:a2:69:39:6b:
1c:fb:fa:6c:7c:ce:0c:8e:e7:bd:b4:48:cb:ff:8c:c6:1b:51:
da:88:92:9a:4b:0f:0c:10:5a:d6:3c:cc:c6:72:f6:66:60:fa:
45:f2:80:d7:50:67:c5:99:90:4f:4f:42:32:97:7c:9f:63:b4:
db:01:87:f2:6d:c3:ac:85:2e:b4:65:ce:ca:bb:85:c4:42:a3:
5a:38:18:0b:16:56:7b:3c:86:79:36:7b:87:97:a5:66:41:72:
ae:74:8d:cf:e3:76:17:51:6d:13:3f:7f:56:af:45:47:ea:17:
08:2d:58:bd:c5:eb:57:26:a0:81:b0:35:1b:cd:d0:45:44:ab:
be:3d:45:59:d1:c7:16:80:dd:7d:59:02:30:f6:47:99:25:cb:
17:8b:7e:1b:6d:f7:f8:c7:05:e8:07:3c:a5:6d:fb:d2:55:50:
32:9a:1e:d2:4a:ff:d4:6a:aa:c6:b6:39:13:e7:52:fc:3c:dd:
62:eb:ca:c4:23:74:65:6c:6c:9f:0f:d4:da:07:80:f1:2b:d2:
f5:1a:41:d9:2d:2b:19:62:81:a9:cf:dc:4d:a9:a8:30:47:7b:
63:a5:d3:b6:40:0a:4a:8b:15:91:f2:22:66:83:f6:27:f0:03:
a8:23:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:13 2026 by rpki-client