Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: IoU/iUqNwCD65mAlZ6u2bKYwn2K5H5+dfMLRD/mx6/o=
Subject key identifier: A4:F3:77:38:C5:4B:F8:00:2B:64:DF:EA:40:79:F9:F3:00:83:24:EA
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 01A130A20BC3DE479007FA4EDFA665B309CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 098E
Signing time: Mon 12 Oct 2026 15:01:28 +0000
Manifest this update: Mon 12 Oct 2026 15:01:28 +0000
Manifest next update: Tue 13 Oct 2026 15:01:28 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: Hpu9oj+uPcFmM5JL3AkYArxSOO7UqnICL1FNpZDWpv4=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:0b:c3:de:47:90:07:fa:4e:df:a6:65:b3:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Oct 12 15:01:28 2026 GMT
Not After : Oct 13 15:01:28 2026 GMT
Subject: CN=a4f37738c54bf8002b64dfea4079f9f3008324ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:f9:33:8a:c2:4c:e1:8c:14:b8:4c:47:c9:
c0:2c:14:ec:a6:d7:76:72:6a:3a:41:56:dd:20:51:
de:73:d5:40:87:ed:d0:6c:41:dc:12:72:e6:ad:e5:
23:5f:a8:8a:d6:18:fc:9c:46:e6:0a:d6:c6:fd:2d:
c4:a3:87:98:fa:c9:53:d6:9f:b4:f6:06:b6:46:f6:
8b:6f:02:48:6c:6d:be:bf:f7:5b:74:6a:31:23:ea:
69:19:00:43:94:ee:e1:94:34:0e:f7:04:1e:73:96:
f8:f0:57:16:0f:a7:06:67:d3:52:ee:96:ce:f1:0f:
4c:d1:da:72:9a:e5:13:4c:04:2f:15:7b:af:12:a5:
27:58:13:e2:a8:90:ff:66:78:d9:39:4c:27:76:ca:
fa:c6:5a:bd:2b:d2:c3:18:5d:e2:0b:9c:87:5d:fc:
e7:1d:48:e7:62:12:94:8c:b0:fd:7a:d3:bc:45:a8:
46:81:c6:72:ed:a4:50:83:92:dd:09:38:7e:61:e3:
42:93:51:4f:e4:52:ed:26:e0:21:09:3b:cb:ce:78:
50:e2:fb:93:2f:56:86:ff:c5:53:59:f2:88:47:45:
38:d4:5b:19:53:d3:70:c3:49:78:fa:9e:06:87:a1:
3c:03:0c:e4:ac:a6:0a:b3:ff:07:89:0e:61:ed:90:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:77:38:C5:4B:F8:00:2B:64:DF:EA:40:79:F9:F3:00:83:24:EA
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:d1:51:88:70:3c:ab:15:a2:a5:41:a3:31:cd:2e:40:31:
e9:86:37:39:2c:18:34:80:bf:fc:0b:9b:fc:2e:45:31:61:09:
d7:80:81:05:d5:1c:53:de:96:01:cf:7a:31:d2:89:fd:cf:de:
e5:77:49:c5:5d:6e:86:cb:8a:c1:45:a1:5a:7c:38:bb:a6:45:
64:d5:5a:09:7a:b7:b3:2a:d5:9e:86:a4:b7:a3:73:3e:e5:57:
a2:1c:4d:db:8f:d7:f1:22:a3:d9:89:07:43:45:02:25:b5:86:
78:d7:d1:db:c6:1d:2e:e7:a6:76:d6:30:49:2d:5b:c1:e8:0b:
50:86:02:94:1f:d0:a5:c4:d4:e1:f6:95:61:81:c4:52:9d:7b:
cd:cf:65:7b:5a:48:9a:1a:c1:14:d5:52:b4:00:c4:49:28:cf:
bf:d5:79:2b:df:2e:3a:ea:0d:e9:56:2d:7f:e3:eb:02:6f:87:
28:16:36:e4:1c:3d:e7:55:fb:4f:87:4e:b2:6c:45:4c:05:6d:
1a:5d:61:26:c4:40:38:1d:73:8c:ea:cd:99:7b:4f:1f:25:fe:
52:49:0e:39:18:3a:aa:6b:41:01:e1:27:af:f5:6c:77:14:97:
3e:c0:c0:a9:54:f7:81:21:bd:56:40:90:86:e0:30:8e:5f:45:
51:a0:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:29:57 2026 by rpki-client