
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: WJXk8sc5ZMeilnhTri3HqYRNf1OiWx2sI7wzdHU99QY=
Subject key identifier: 0F:A9:C5:00:20:C4:2F:89:61:85:2B:09:43:BA:6F:2D:2F:2C:D0:DA
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019D2B4E4A137C39A42313D4E0B63ECBEB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 0779
Signing time: Thu 26 Mar 2026 18:00:44 +0000
Manifest this update: Thu 26 Mar 2026 18:00:44 +0000
Manifest next update: Fri 27 Mar 2026 18:00:44 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: HImrP5oZTBo1FpR+NCD48/Mlk5Rf39pKXo4TEg90NHM=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:4a:13:7c:39:a4:23:13:d4:e0:b6:3e:cb:eb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Mar 26 18:00:44 2026 GMT
Not After : Mar 27 18:00:44 2026 GMT
Subject: CN=0fa9c50020c42f8961852b0943ba6f2d2f2cd0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:8a:85:c2:46:5a:08:0d:8b:08:ec:31:99:
2f:ef:50:81:cc:d2:ab:01:1b:0a:86:83:5d:fb:8d:
1e:7b:02:b6:71:ae:aa:c4:8e:b0:0f:2e:05:68:20:
59:1e:6a:8d:a7:5d:d3:2a:2d:69:06:c7:6a:c9:ad:
db:ed:c4:53:81:29:13:6c:c7:60:66:ee:7c:93:b0:
55:0d:e1:4b:eb:44:81:1b:f9:75:d1:22:31:2e:51:
06:ce:d4:62:14:f5:d0:9e:f0:4c:51:aa:c7:0d:de:
f3:17:2f:97:b6:61:cb:17:3a:cd:10:8c:3c:52:44:
ca:83:92:7e:e1:76:7b:b8:06:68:da:72:2a:4b:a4:
df:de:08:a1:24:c8:63:05:78:1d:3f:75:e2:4f:d3:
48:d7:cc:8d:69:16:1c:89:38:cc:70:ea:7d:33:e2:
6b:26:ad:33:f1:32:db:f7:85:4d:a5:c8:dd:5c:29:
11:85:a5:91:98:33:8e:c3:34:01:37:13:f7:d0:86:
f4:36:e8:fd:63:df:7a:d6:9c:7f:4a:78:9f:99:a2:
95:c2:fc:79:9a:94:03:e4:73:82:ab:27:f3:79:45:
f6:b5:15:ed:be:b0:15:f7:3e:cf:08:ca:f5:1b:b2:
1e:b7:ec:05:b1:eb:29:a8:71:fe:fc:78:c7:e3:d8:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:C5:00:20:C4:2F:89:61:85:2B:09:43:BA:6F:2D:2F:2C:D0:DA
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:45:4f:c3:77:75:59:29:89:03:63:56:80:ad:eb:ad:ce:02:
61:a8:5d:27:f2:23:fd:a2:de:ed:26:7d:b9:a9:fc:1c:8e:2d:
73:bf:1c:58:56:db:80:dc:93:a9:3d:07:a8:1c:d3:bd:23:30:
4d:3e:1f:f3:7c:f4:55:d8:44:59:6b:2e:1a:ef:4b:b2:f3:64:
b7:ba:ea:35:23:82:b4:20:44:99:77:64:5a:64:0d:d3:49:c8:
d5:b0:31:2e:6f:86:8e:a5:0b:23:0e:b6:45:9c:2d:87:e2:01:
1d:4f:6f:c1:1d:84:3d:1d:bc:5a:6a:85:c3:47:40:b8:fa:30:
54:4a:10:67:77:b9:54:ee:5c:92:7a:23:3c:3a:ce:ae:47:92:
22:18:40:d8:f0:11:ef:81:09:f6:c9:4c:9c:a3:17:6f:f2:a5:
04:06:5c:b4:b2:ac:d5:cd:38:8a:0e:1f:6c:6f:c3:cc:4a:e4:
4c:ec:1c:8e:bd:e7:72:bc:f8:c0:22:a9:b5:77:0e:d3:d6:48:
ee:a4:13:8c:30:33:7e:7f:ec:c7:69:ba:11:43:8f:e6:97:b6:
e0:54:02:43:41:7b:e6:ac:2b:12:86:95:b7:de:c5:09:56:51:
92:c2:1a:85:45:1a:f2:77:64:76:8d:10:a0:e0:67:d6:05:4c:
2d:27:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:57:02 2026 by rpki-client