Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: BS2Zd0dJnqPau3zumRreLW9/CRfTtd8MgJzJteHjXhk=
Subject key identifier: DF:5B:13:44:AF:65:DA:B5:E5:F1:4E:75:FE:F6:3A:C4:33:F7:05:D2
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 019E1E35799B50D4D8531FD1ADB34BCF99E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 22:01:21 +0000
Manifest this update: Tue 12 May 2026 22:01:21 +0000
Manifest next update: Wed 13 May 2026 22:01:21 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: BE1SiLyLuzXd2BXsVCGQeDLojiaMHFHXG/DtiUC9Iu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:79:9b:50:d4:d8:53:1f:d1:ad:b3:4b:cf:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: May 12 22:01:21 2026 GMT
Not After : May 13 22:01:21 2026 GMT
Subject: CN=df5b1344af65dab5e5f14e75fef63ac433f705d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:de:94:51:9b:7f:3a:e0:c9:51:ef:10:18:
65:11:27:98:74:fb:46:a5:bc:c4:2c:cb:39:46:3d:
b2:3b:8e:94:04:5b:fe:ca:0b:99:f9:b2:58:39:76:
01:70:d2:c9:73:71:4f:88:55:d6:06:04:b5:cd:5f:
52:af:b9:e9:6e:0b:28:38:76:ef:e3:b3:40:86:c7:
61:3c:c2:e1:12:1e:ff:3b:26:f7:29:3f:7e:54:61:
b2:73:9c:6d:43:b3:88:54:46:78:2d:11:eb:d8:3c:
5e:4a:e1:13:91:b3:67:33:41:a8:b8:1c:3b:58:1a:
73:0f:b9:6e:ca:60:7c:b7:f1:d4:0f:e7:60:f3:f4:
3c:0c:f7:9e:de:43:5e:18:b9:ac:b5:52:10:94:83:
ea:10:8f:fd:4d:e3:80:20:e1:2c:67:bc:8d:ea:55:
53:65:e1:ba:9b:51:aa:7e:26:79:55:cf:4c:91:e3:
fd:63:43:6e:92:63:71:5d:e1:44:11:6d:db:97:21:
a5:48:fa:bc:1d:b2:9b:90:35:20:65:b3:ea:5e:36:
56:0e:dd:32:05:37:4a:d5:fa:07:81:a3:73:95:34:
86:b6:f9:6d:3b:e0:77:70:b9:96:4b:fb:45:a3:71:
35:d3:fd:39:79:cc:35:0b:0a:b9:49:81:46:93:63:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:13:44:AF:65:DA:B5:E5:F1:4E:75:FE:F6:3A:C4:33:F7:05:D2
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:5f:65:0a:8f:2b:45:f7:cf:f0:28:0e:b0:d7:94:5e:5a:ce:
26:6d:73:7e:71:fe:de:14:e0:6f:2c:8d:f9:a2:72:27:45:42:
e6:05:11:e7:d9:96:97:e2:75:7c:a3:d0:f5:b8:63:c3:50:81:
d8:b1:4d:21:d8:4f:c8:f3:3b:fa:aa:42:8a:16:1d:3b:cd:26:
54:17:87:79:53:a2:a0:c1:c6:78:6e:94:13:89:73:c6:f0:c9:
59:c7:8f:c7:e3:f4:48:b3:2a:7f:b0:85:01:e4:d6:77:da:1e:
8b:0c:bf:f0:88:79:b0:b7:4e:45:c0:83:4f:ba:0e:3f:ca:f1:
3c:dc:3e:c8:11:5f:4c:b2:ea:7f:54:bb:d8:3e:60:c6:14:a3:
f4:e9:83:28:e2:22:ae:0e:35:e0:00:d1:ae:d3:c9:cf:3c:6b:
43:c4:64:f7:66:9a:47:a1:0e:88:2c:85:0c:6c:a6:41:01:4c:
55:6f:62:45:27:aa:38:ee:81:0e:80:cb:6b:d3:09:b1:40:91:
9b:46:58:06:19:21:24:b9:f2:c5:70:90:6d:31:f6:be:50:9c:
6b:19:cd:dd:10:e8:f6:71:fc:f7:d1:cc:22:07:85:15:e8:63:
ed:15:d7:4e:24:d3:57:a8:a7:73:38:3a:af:25:bb:11:f3:0b:
5e:29:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:17 2026 by rpki-client