Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: rJwaY1AhylIH6sHHbPyM0jUdNcFWwxIdrUPOaje+sRA=
Subject key identifier: 35:B6:AC:48:FC:FB:F7:EF:6A:4C:86:01:D8:8B:22:37:5D:1D:EF:63
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019F935AFAF96104585D49456ED680F8779C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 08B8
Signing time: Fri 24 Jul 2026 09:00:40 +0000
Manifest this update: Fri 24 Jul 2026 09:00:40 +0000
Manifest next update: Sat 25 Jul 2026 09:00:40 +0000
Files and hashes: 1: E_v0bNYlLtVQM1--pIuT918H72U.roa (hash: aVGT5S1MCcaux4fm6OCR8ebJDDrb+WKy9ZF1A2XfnnI=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: VEPqPW5cppESQmmVz4leGIrAINyHhk1KGLTMx60LsxY=)
3: kubNMvofw6ZidLydO7BpZ0XnZR0.roa (hash: TKb/gNbcFLBmyxALg5scwMqg/Q4YSjcj7IUD9G4BIyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:fa:f9:61:04:58:5d:49:45:6e:d6:80:f8:77:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Jul 24 09:00:40 2026 GMT
Not After : Jul 25 09:00:40 2026 GMT
Subject: CN=35b6ac48fcfbf7ef6a4c8601d88b22375d1def63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:66:48:88:29:b9:68:7a:dd:05:29:87:94:
45:35:57:1c:7d:bd:aa:a4:13:e6:71:8e:50:04:68:
47:f0:40:76:79:aa:a4:e4:c9:0a:54:11:38:53:50:
07:d4:5a:d1:ac:3e:06:7f:1d:39:0a:c6:75:ea:26:
8b:8c:7c:9e:44:ee:0b:94:4d:5a:3b:a8:c3:16:d4:
b0:e2:90:47:70:49:6a:dd:cd:90:57:44:9c:13:5a:
50:ff:c9:0a:1b:37:fb:71:bb:31:6b:24:7b:1d:9b:
78:78:81:3c:7b:25:d0:7f:e5:67:ce:1b:a2:71:e6:
01:a1:1a:0f:7d:68:9a:ed:8b:e7:f4:a5:e9:4f:9f:
db:44:1e:2b:42:8e:bb:c1:ee:ee:2f:63:5b:33:4c:
47:54:19:14:5e:83:67:6f:00:c5:09:44:b1:6c:ff:
c3:c6:d6:6f:6a:41:37:0c:6e:f1:f0:eb:c8:de:ef:
b2:6e:e7:f5:1c:4a:13:51:96:e7:84:bb:f4:5a:3c:
0f:0c:86:fd:63:d1:ff:57:4a:9f:2c:d2:97:6e:6b:
81:b8:56:cc:58:a2:13:f6:ad:c9:39:8e:46:54:30:
09:9f:06:3e:0c:d7:cc:95:3e:f6:2f:1b:f5:1a:1f:
fb:74:b7:cc:c8:67:9c:71:8a:85:b9:7c:18:53:78:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:AC:48:FC:FB:F7:EF:6A:4C:86:01:D8:8B:22:37:5D:1D:EF:63
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:85:5a:19:af:ec:1b:da:1f:d3:24:04:51:4f:ea:52:e5:fd:
05:0e:6f:cb:d1:28:dc:85:80:77:f9:6c:84:6f:00:26:55:bc:
60:ae:91:0d:46:83:5d:d1:16:e7:1d:a6:be:8d:29:21:87:9b:
dd:d7:9a:14:fd:bb:0e:15:4e:55:62:b9:96:c9:f6:7f:4a:a8:
87:0b:0c:f4:df:e6:06:59:5a:2f:1f:74:e2:04:48:cd:8c:7b:
df:0b:19:1d:5a:6c:6f:c9:1e:f0:9f:bb:a0:4d:dc:b9:10:b1:
67:3c:8e:77:22:12:1d:f8:47:fe:64:02:f7:25:89:1e:ad:90:
51:f1:b6:5c:0c:25:79:00:7a:6c:9d:f0:2d:09:f4:11:90:b5:
3f:fe:b2:99:0b:b0:ef:7e:5c:b2:62:ce:29:b8:89:f3:6f:4d:
01:22:de:cd:0f:3d:ee:18:e3:78:45:a4:84:a4:c5:45:dd:ec:
fe:10:d5:5b:2b:71:30:21:ee:1e:e0:33:80:96:b1:2b:c5:5c:
47:a7:7d:09:5a:70:61:ce:3d:28:57:94:61:22:bf:bb:c4:df:
b1:46:c3:dd:68:8f:8a:b6:ef:b8:6e:c0:5d:ce:d0:9f:87:95:
b6:6e:22:03:89:3d:c8:48:99:a4:fd:01:7f:2c:41:91:59:c1:
e9:e4:35:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWvr5YQRYXUlFbtaA+HecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYmIxNThkMjllMzc1MDBkNWMzYTI1ZGFkYTE0OWIyYTUw
M2Y2YTUwHhcNMjYwNzI0MDkwMDQwWhcNMjYwNzI1MDkwMDQwWjAzMTEwLwYDVQQD
EygzNWI2YWM0OGZjZmJmN2VmNmE0Yzg2MDFkODhiMjIzNzVkMWRlZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6tmSIgpuWh63QUph5RFNVccfb2q
pBPmcY5QBGhH8EB2eaqk5MkKVBE4U1AH1FrRrD4Gfx05CsZ16iaLjHyeRO4LlE1a
O6jDFtSw4pBHcElq3c2QV0ScE1pQ/8kKGzf7cbsxayR7HZt4eIE8eyXQf+Vnzhui
ceYBoRoPfWia7Yvn9KXpT5/bRB4rQo67we7uL2NbM0xHVBkUXoNnbwDFCUSxbP/D
xtZvakE3DG7x8OvI3u+ybuf1HEoTUZbnhLv0WjwPDIb9Y9H/V0qfLNKXbmuBuFbM
WKIT9q3JOY5GVDAJnwY+DNfMlT72Lxv1Gh/7dLfMyGeccYqFuXwYU3hcrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW2rEj8+/fvakyGAdiLIjddHe9jMB8GA1UdIwQY
MBaAFFC7FY0p43UA1cOiXa2hSbKlA/alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEt
NzQzMTEyYjBlNzcxLzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80NWQyODQtYTM3My00NTUyLWJjOGEtNzQzMTEyYjBlNzcx
LzEvVUxzVmpTbmpkUURWdzZKZHJhRkpzcVVEOXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIVaGa/s
G9of0yQEUU/qUuX9BQ5vy9Eo3IWAd/lshG8AJlW8YK6RDUaDXdEW5x2mvo0pIYeb
3deaFP27DhVOVWK5lsn2f0qohwsM9N/mBllaLx904gRIzYx73wsZHVpsb8ke8J+7
oE3cuRCxZzyOdyISHfhH/mQC9yWJHq2QUfG2XAwleQB6bJ3wLQn0EZC1P/6ymQuw
735csmLOKbiJ829NASLezQ897hjjeEWkhKTFRd3s/hDVWytxMCHuHuAzgJaxK8Vc
R6d9CVpwYc49KFeUYSK/u8TfsUbD3WiPirbvuG7AXc7Qn4eVtm4iA4k9yEiZpP0B
fyxBkVnB6eQ1Rg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:58 2026 by rpki-client