Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
File: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft (raw, json)
Hash identifier: e8FR1ZcvbotFOty1ycLwg+8F6zCYs/rj4rrFdBSe81o=
Subject key identifier: 0A:BA:C2:A0:7B:6B:04:3C:F3:84:13:DF:3B:3C:E0:3C:57:D6:8C:34
Authority key identifier: 50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
Certificate issuer: /CN=50b0e7157147a90ce37460b719cb760694ab5414
Certificate serial: 019CAFED26DCA303DA1877B910558ECAE166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
Manifest number: 0150
Signing time: Mon 02 Mar 2026 19:01:20 +0000
Manifest this update: Mon 02 Mar 2026 19:01:20 +0000
Manifest next update: Tue 03 Mar 2026 19:01:20 +0000
Files and hashes: 1: ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl (hash: ncJWdFMgZ5omBKXuEElCuqJOd9C4YzTZ1KMHZNq4zIo=)
2: YTZnwgX1fpqLaA8u7GzOIk6ue1k.roa (hash: mBjPd/UyUtpVQP57vDWgcX+PhPNfMg70eOHjoJqEsnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ed:26:dc:a3:03:da:18:77:b9:10:55:8e:ca:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b0e7157147a90ce37460b719cb760694ab5414
Validity
Not Before: Mar 2 19:01:20 2026 GMT
Not After : Mar 3 19:01:20 2026 GMT
Subject: CN=0abac2a07b6b043cf38413df3b3ce03c57d68c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:90:c6:79:5f:19:5f:97:1f:bf:2e:6f:d8:
e9:83:ca:0f:5f:f2:ed:cd:05:d0:87:19:23:43:80:
0f:df:17:0a:ed:0e:52:3b:f6:a7:c3:b0:1b:a8:4c:
58:b2:8e:97:1d:f7:69:13:9c:41:26:cd:0d:dd:5b:
31:65:c6:d9:6f:62:7f:11:69:5c:a2:2c:6c:64:1c:
e4:16:3b:4f:c8:5c:71:a0:af:03:61:62:73:80:96:
ca:cb:a8:f2:91:2d:38:8d:76:fa:df:d2:94:a6:a1:
a1:e9:b5:35:f4:13:87:00:92:af:00:e2:9e:47:90:
df:18:e6:80:b0:ff:00:43:4d:85:a0:c4:b8:52:e1:
57:2e:1d:c5:0b:66:45:13:df:96:ee:ba:fc:74:c0:
8e:4b:71:cf:cb:c6:f7:e7:6a:23:87:69:af:5a:89:
01:8d:11:2b:55:59:52:8a:5a:f5:8f:32:bd:ad:47:
53:05:0a:4d:8a:0b:27:ce:9b:c6:31:ed:a9:75:91:
18:18:84:f3:52:de:5b:b4:94:d1:75:81:57:41:31:
bb:9e:95:de:e2:ee:06:39:6b:a9:bb:e4:45:b3:b4:
3c:48:57:a7:ca:d7:65:bf:d1:5f:6f:e0:75:47:9a:
17:b1:b8:e0:d6:cc:a1:36:d6:1b:06:48:78:0c:68:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BA:C2:A0:7B:6B:04:3C:F3:84:13:DF:3B:3C:E0:3C:57:D6:8C:34
X509v3 Authority Key Identifier:
keyid:50:B0:E7:15:71:47:A9:0C:E3:74:60:B7:19:CB:76:06:94:AB:54:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4c96e-521d-44b9-9cef-14c919ad8768/1/ULDnFXFHqQzjdGC3Gct2BpSrVBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:58:10:f9:f5:2f:8d:0a:94:df:07:c1:db:53:6e:e9:ab:21:
5d:60:41:30:52:11:4d:d3:2c:5d:97:88:0d:c2:a0:6d:49:3b:
f4:77:5d:24:c7:73:65:32:ab:c3:6f:12:69:06:0a:cd:eb:8c:
dd:53:82:5e:6f:c7:78:67:71:8e:02:37:6d:c4:64:8a:4a:db:
34:d8:c3:79:86:d0:58:d9:64:27:de:c6:66:6c:18:d3:17:55:
e4:77:db:e6:a3:87:5b:b7:b0:99:e7:67:5a:a5:e2:5e:26:0d:
44:26:05:77:be:c6:ae:3f:8e:4b:2f:4f:92:02:f0:33:4e:a0:
3f:7b:52:97:1c:cf:e2:c4:2d:5f:d0:bf:e4:af:ba:ea:7f:73:
26:d2:89:ef:2c:4e:1d:a1:65:5e:75:af:80:f1:52:d3:07:81:
5d:d7:56:30:71:76:d5:81:f4:8f:71:dd:0f:89:ba:c0:c4:df:
7f:a1:1f:03:e6:7e:88:d1:2f:dc:c8:09:c8:27:27:d1:2c:ea:
45:68:74:22:83:a6:6a:10:90:c6:c9:b9:5f:57:d6:7b:e2:14:
55:24:11:cb:c6:15:4b:f3:e9:ad:30:83:d4:32:d8:6c:30:92:
5f:91:5d:5d:ee:fd:dc:a4:a8:c7:10:7b:26:37:f3:e3:ae:79:
af:6d:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:39 2026 by rpki-client