Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: RmAd5ELakXramvUNk+a2isouQcmxRhDBI505uXjmOms=
Subject key identifier: 35:BC:32:4B:10:A7:68:0B:F7:56:74:A6:C3:DA:F8:16:75:40:36:2A
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 019D27040DEA1459D3CC53BCEC1CEC545F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: O9BJ2ztILVC1UqXRxSGNaGTWOucpQliyqNlSLgCXvbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0d:ea:14:59:d3:cc:53:bc:ec:1c:ec:54:5f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=35bc324b10a7680bf75674a6c3daf8167540362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:c3:45:87:a6:17:72:76:a6:e3:32:c4:b9:
97:4a:31:96:e3:70:0d:37:94:5f:c9:b5:e0:9d:ad:
fd:4c:a2:02:e1:64:c0:7a:8a:29:38:de:52:33:d5:
10:10:7b:a7:8e:1a:a1:ee:6a:1a:e9:97:bd:cd:80:
28:ab:ba:40:30:45:55:87:20:ff:c1:67:87:e9:ce:
ef:80:56:56:99:1b:a8:53:c3:31:5f:f5:38:a5:e2:
68:84:fc:1a:ed:6c:91:31:62:dd:44:89:e1:eb:85:
32:9b:69:02:23:f5:0e:d2:63:e0:7c:85:eb:c1:b5:
86:1a:df:65:3d:b5:35:12:d7:0f:8b:cd:7d:20:f7:
28:20:5f:10:8a:86:6b:4f:36:7d:a9:6f:9a:41:46:
f4:06:40:22:b5:11:d2:57:73:50:d8:d4:d6:73:40:
8b:6a:5d:82:00:37:8d:96:93:03:cb:b9:97:4b:6d:
b0:29:3f:fe:a6:9e:e3:6e:83:79:21:3d:b8:77:eb:
c4:20:56:7c:7a:69:8e:42:ef:16:58:5c:aa:04:33:
17:fb:1e:e9:ef:21:80:8b:73:b2:fd:c8:28:f8:6f:
ca:41:b0:96:5b:7e:ad:89:ec:da:cc:ff:62:a5:66:
ae:f7:7c:4a:06:d8:2f:78:56:96:cb:8e:60:32:1e:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:32:4B:10:A7:68:0B:F7:56:74:A6:C3:DA:F8:16:75:40:36:2A
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:50:33:74:e9:21:b6:6f:f0:0f:db:68:8a:7f:0d:33:dd:
27:13:1b:79:32:a1:53:39:a2:8e:87:50:33:37:16:4a:64:e2:
20:f4:db:4d:b8:da:69:aa:84:f2:c8:61:28:e7:16:85:d9:90:
34:2a:0d:c9:ae:02:ce:7e:90:ec:34:0e:37:02:d1:ed:74:70:
f5:65:c8:2d:fd:cb:06:6c:d5:a2:a5:f3:4c:cb:ba:58:e6:cc:
d7:6f:98:b1:8f:b9:ae:97:99:c1:fd:3b:c0:16:13:09:5b:93:
c6:0d:09:f4:66:84:a5:f1:30:48:dd:77:31:ad:8c:f7:a3:7e:
32:2c:60:c3:00:bf:1c:0d:2e:1d:3f:9d:15:4a:61:b2:d3:83:
9b:ed:ec:03:b1:28:b8:2d:5a:74:44:51:ed:a7:97:49:ba:0a:
88:83:92:f7:d5:f5:a6:fe:89:ec:09:e0:ff:c5:42:93:ad:ef:
94:89:b5:a7:6d:6d:61:30:32:e1:15:fe:57:f3:8f:e8:95:13:
00:38:4e:f2:dd:74:0e:c4:a1:a1:5f:d5:a2:39:70:9b:ff:a2:
b8:3f:a0:b2:75:83:11:58:8b:4f:ae:e3:fe:a8:43:93:6f:28:
2d:11:87:b4:27:18:d4:c5:1d:9a:eb:d2:5a:02:98:3e:60:de:
f4:ea:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:06 2026 by rpki-client