Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: KUYpxxBgkgFH3Jqvq5ZHUhnwPlR8faQEYaWhv1d+AK8=
Subject key identifier: 46:FF:4A:47:F5:CB:6C:51:54:61:14:9B:C1:72:B9:1C:10:6B:4E:DF
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 019D29CE72B88FD19F084B74A6197FA1AE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:01:28 +0000
Manifest this update: Thu 26 Mar 2026 11:01:28 +0000
Manifest next update: Fri 27 Mar 2026 11:01:28 +0000
Files and hashes: 1: 5M_dzDXzTB3Y0brCjbUvwSZRed8.roa (hash: IY7K+wfx2bW1m/Ix+hlJ62XrT+AVkyx4H7HyP9JrVMM=)
2: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: nsPK0a6K4R5xNLzjWx2RKUsJciXhIythdVW7NUnLjPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:72:b8:8f:d1:9f:08:4b:74:a6:19:7f:a1:ae:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Mar 26 11:01:28 2026 GMT
Not After : Mar 27 11:01:28 2026 GMT
Subject: CN=46ff4a47f5cb6c515461149bc172b91c106b4edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:26:c0:72:a1:ef:be:e8:63:dd:5e:b9:7d:a2:
67:5d:19:17:b2:5e:62:71:bd:4d:a4:82:6b:d2:ae:
3b:e5:6d:ea:9f:8c:53:0b:27:39:4c:cd:00:aa:3d:
f1:ad:1f:78:38:88:a4:a2:31:0e:6f:21:ac:9a:e0:
75:a2:fa:df:a3:43:49:b9:fa:d3:60:a0:89:a5:54:
23:d9:fb:92:0f:4d:bf:c7:6f:cd:5d:42:a8:c3:8a:
7e:6e:27:3e:89:db:1b:d9:72:03:db:36:92:8e:45:
90:f3:d2:79:e6:7f:5b:c3:f2:61:10:35:37:d5:1d:
61:b8:74:1c:07:19:63:11:65:2d:ac:d9:39:0a:62:
ca:38:0e:ff:57:14:06:dd:55:2c:b6:f5:a0:3b:39:
09:15:a2:34:2f:fa:97:9f:97:b6:be:27:ae:6b:ea:
4f:ec:bd:e7:a3:91:e8:a5:36:9b:90:a5:28:f3:c9:
62:ff:94:e9:fc:91:0f:b8:c1:81:5e:eb:2d:73:b2:
34:c8:dd:b6:25:3c:02:cd:5a:84:ce:4e:01:9a:49:
c6:80:2a:7c:69:d0:c3:fd:28:73:6a:12:65:99:c1:
5e:01:78:d3:58:c9:c0:da:01:af:38:12:03:4f:ab:
3c:e5:ab:a5:e6:fe:99:ab:38:4c:ac:fc:30:a5:bb:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FF:4A:47:F5:CB:6C:51:54:61:14:9B:C1:72:B9:1C:10:6B:4E:DF
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:f0:cd:ea:99:e4:f2:98:b3:bc:3f:03:ba:b1:98:15:52:
a1:bf:b7:1f:14:de:a9:c1:b0:39:9d:47:62:46:9a:10:ab:45:
88:36:0e:b3:d6:fa:9e:e5:6b:83:87:cf:d0:a2:d0:24:40:08:
44:3d:ed:92:1b:e8:bb:85:a5:b9:16:41:ca:ce:05:b5:f5:88:
04:30:98:60:d2:10:ff:0b:d8:c3:8a:ef:ce:f4:a3:a8:27:d4:
c9:5e:d7:13:3f:5a:bc:d8:73:fd:48:b3:31:43:05:dd:fd:76:
48:44:a9:03:7e:77:38:6a:d9:41:0a:db:79:4a:e4:33:4a:cf:
ed:8b:5a:57:b5:26:fe:25:d4:bd:ab:67:18:65:50:b5:ca:3c:
e8:82:80:f4:79:86:0a:17:25:87:13:f8:03:52:53:0a:df:a7:
77:2c:c2:62:65:27:ff:47:71:a9:0c:28:34:5a:bf:d9:fe:b1:
25:cc:ca:1a:5d:70:27:01:55:c0:1c:0b:7b:40:13:57:a9:4c:
a3:34:35:5b:51:52:c5:a6:f0:03:b2:a0:d7:46:eb:f8:41:ab:
c0:69:42:16:a4:a4:16:96:7a:af:c6:6f:22:0d:2c:fd:ed:3e:
27:a7:2d:fa:e0:70:a6:8b:3f:c5:ea:6a:0f:1e:70:01:4b:6c:
b1:b5:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:44 2026 by rpki-client