Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier: ZtaqKClzrgiTQtmL9GK3Q8EdbkTyIzmIFgcYk9NlqYY=
Subject key identifier: CA:2B:06:30:DC:7E:D7:62:3A:08:6E:D0:62:EF:F8:B4:62:FE:10:36
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 019D265F7D37941A0E94285BEA01650157FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number: 1547
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa (hash: /Rb7W1hiZzDM8zy+jiVsugvOM6pnTRPvaLJxUTo+MJw=)
2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: yqa2VhWLQ9D2lpErKCCZyZCuRKkUU87YyipCJMTQuMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7d:37:94:1a:0e:94:28:5b:ea:01:65:01:57:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=ca2b0630dc7ed7623a086ed062eff8b462fe1036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:79:f8:12:9f:bf:ea:ba:cf:0d:5f:09:16:
2c:37:0e:06:48:1a:88:0e:f7:26:6a:9d:2a:70:14:
63:c0:ea:b0:a7:b0:0f:27:eb:b2:a0:74:76:34:73:
11:f1:5e:97:c1:55:a3:a7:7d:c8:64:94:14:a1:67:
31:13:8d:1e:94:b7:d6:7d:c0:2e:0d:58:db:91:43:
fd:12:9a:ec:59:c2:0b:70:a1:a3:e1:8c:20:9d:ef:
8e:bd:9b:07:7a:5c:d5:98:5f:27:3b:ed:02:0f:18:
5f:f2:b9:d6:c2:ce:5a:d4:f4:7f:ef:2f:4c:43:4d:
18:cd:f8:97:5b:4d:ce:07:b0:92:d9:bc:31:2d:0f:
5c:eb:62:97:df:1a:5e:8f:2d:41:98:a4:26:3f:b3:
88:31:95:fb:f3:2f:a1:8f:13:45:a1:60:56:a3:67:
83:3b:1a:d3:29:ca:88:c3:2e:35:bf:6b:f7:c0:97:
67:63:9d:20:96:0c:9c:82:1a:97:16:ee:42:11:88:
e8:43:8e:de:f4:0b:32:6a:df:88:33:aa:92:53:df:
af:9c:9f:4e:a7:33:74:6f:59:1a:52:91:2f:d6:ed:
e5:38:68:5b:a6:ec:43:61:62:6f:42:a7:c4:c9:67:
d0:44:e3:37:5e:7c:5a:88:9c:8e:46:19:31:58:10:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:06:30:DC:7E:D7:62:3A:08:6E:D0:62:EF:F8:B4:62:FE:10:36
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:ed:2f:bc:f1:c6:1e:99:0e:f9:e8:99:a6:89:cc:ba:fe:
c2:ec:c4:fb:2a:8b:92:17:f0:1f:67:fb:37:56:cc:51:c7:ed:
a6:b4:f0:18:00:d7:87:54:eb:23:eb:e1:31:ad:65:1e:57:6c:
a8:77:29:68:70:06:4f:2d:e3:fc:08:a7:8c:8d:31:63:80:0e:
3f:08:7a:ea:05:42:d3:7a:ba:12:79:55:07:4b:15:a9:bd:91:
1b:e5:c9:91:ca:48:83:ee:6b:44:df:11:35:5e:ac:81:2f:6e:
51:a7:4f:2c:4c:e2:b5:18:17:bc:8f:cd:57:df:cd:80:ad:c0:
35:d6:2c:d6:ea:ea:64:1b:10:0e:3a:f5:88:ea:b7:9f:2f:cb:
50:a7:34:70:ba:28:89:8b:b4:43:01:d8:2d:7b:58:4b:2e:b3:
44:47:db:f5:a1:bd:2b:e3:5c:bf:3b:a7:7a:08:97:aa:13:33:
f3:fd:41:12:ee:b1:58:8b:af:12:1e:77:61:5c:c2:fc:c6:62:
68:df:59:fd:03:45:4b:b7:c1:19:24:5e:36:fc:ab:39:90:a4:
cd:4e:71:8a:25:cf:91:71:18:cd:19:bc:ae:d0:0b:d9:b7:68:
e0:3a:78:f1:e4:08:10:85:82:f6:10:e3:70:c2:7b:10:c0:04:
09:bd:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:02 2026 by rpki-client