Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
File: ULb-4OehTH4dOGCdm8PC78yvM6w.mft (raw, json)
Hash identifier: cAMkzRq8MP2YFm6xCuIAIbJx/17eAWqSZysaOJJlClU=
Subject key identifier: AC:5A:90:26:BF:D3:7B:C4:D7:8E:80:D1:98:81:73:A9:07:6C:64:26
Authority key identifier: 50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
Certificate issuer: /CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Certificate serial: 019D25F164557462B6F7C7E6FF8E142D1680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
Manifest number: 0464
Signing time: Wed 25 Mar 2026 17:01:09 +0000
Manifest this update: Wed 25 Mar 2026 17:01:09 +0000
Manifest next update: Thu 26 Mar 2026 17:01:09 +0000
Files and hashes: 1: ULb-4OehTH4dOGCdm8PC78yvM6w.crl (hash: EvjmvnB605gOYCp0ui0g2Jx5heQNweChKXiOyukuS4s=)
2: bfthD07WPuBzuF8V8MFMquzZVxc.roa (hash: TQL/YwkJgVnHTckXmWXUYr+a7nIsqs2yfinw/Sf17kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:64:55:74:62:b6:f7:c7:e6:ff:8e:14:2d:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b6fee0e7a14c7e1d38609d9bc3c2efccaf33ac
Validity
Not Before: Mar 25 17:01:09 2026 GMT
Not After : Mar 26 17:01:09 2026 GMT
Subject: CN=ac5a9026bfd37bc4d78e80d1988173a9076c6426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:ba:7d:b2:d3:81:20:c3:71:d6:d7:f5:12:
3a:47:22:ae:39:77:48:a2:d4:90:1a:d9:4a:26:3f:
e1:a6:63:5b:81:65:23:b0:53:d2:05:69:33:44:64:
96:7b:d1:32:73:db:c1:be:18:56:3c:d5:4a:da:4c:
a5:dc:ef:19:44:e0:8e:7a:09:96:21:4c:28:86:ff:
c1:e4:90:22:5a:6b:9e:9e:f8:3b:54:76:ba:58:db:
ca:2b:57:d0:60:9e:ca:c2:bf:ac:48:73:51:27:6d:
18:a1:30:85:24:fd:b4:f4:8b:6b:6e:c7:aa:76:de:
7d:8f:ad:c1:3c:42:57:89:89:83:db:47:d7:21:a8:
65:90:dc:ba:4c:44:0b:87:d6:7f:b6:50:f5:08:17:
58:18:84:d2:44:79:b7:5f:2d:3c:81:d1:fa:41:da:
63:2d:42:41:f2:33:2d:85:9e:38:5b:15:3e:18:32:
63:12:5b:77:73:55:bd:40:9a:10:58:0a:b7:43:eb:
e2:c0:e5:3d:86:1a:fb:41:fa:95:94:5d:25:ab:29:
ac:67:de:39:6f:01:3f:92:b0:52:26:1e:a7:7c:6f:
e6:c6:bf:4c:cb:83:69:97:5e:1e:7c:a0:43:e1:35:
e2:4a:ca:d3:2b:7a:62:6c:58:b3:07:a3:41:8b:e8:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:90:26:BF:D3:7B:C4:D7:8E:80:D1:98:81:73:A9:07:6C:64:26
X509v3 Authority Key Identifier:
keyid:50:B6:FE:E0:E7:A1:4C:7E:1D:38:60:9D:9B:C3:C2:EF:CC:AF:33:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULb-4OehTH4dOGCdm8PC78yvM6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cd8fe8-8c08-46b2-b57d-fd664f032980/1/ULb-4OehTH4dOGCdm8PC78yvM6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:d9:38:ef:41:df:44:75:23:c3:dd:5b:e3:9c:4e:a5:59:
68:e8:35:fe:7f:8f:3d:3e:a4:65:cb:ef:16:e6:7a:6d:a3:ca:
1c:90:e4:ff:03:47:fd:80:28:6f:32:eb:6f:bb:60:6a:a2:e1:
fb:38:61:4d:30:a2:a6:68:3b:3a:d1:d6:d2:3f:0e:90:a1:ac:
ab:b5:f0:60:1c:42:a7:26:29:11:e0:e2:7d:51:fe:a4:b3:8d:
d2:69:c7:3d:5c:70:88:de:71:39:ff:84:47:7e:41:c8:04:c9:
61:08:96:8b:db:0c:af:66:db:af:be:ff:99:83:17:99:87:d1:
65:da:71:29:40:56:bc:71:10:2c:ca:12:c5:71:63:99:23:65:
bd:93:0b:bf:fe:27:f0:ac:2b:fb:39:7e:03:46:cf:34:4b:36:
10:39:c4:5d:0e:f6:dd:7f:d4:56:32:82:78:b2:d2:e6:24:bd:
29:a7:43:db:0e:68:a8:7f:ed:62:d0:b7:01:a1:f0:da:d4:08:
c4:60:0f:ab:f8:06:6a:58:5f:8a:55:ee:07:1e:da:cc:ee:27:
5c:94:a0:75:b2:29:ce:4b:8c:34:39:c7:0d:a7:28:df:4c:fa:
22:85:0b:f6:f1:2e:78:cf:47:61:ab:d6:03:3b:82:4b:f4:66:
a9:42:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:55 2026 by rpki-client