Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: 9x1b+EEqVczfyRVWFMZUR8RcgRrp453e6UA1y+ZTH1A=
Subject key identifier: AD:33:52:AC:98:08:AB:98:9D:1E:92:AF:24:A9:97:0E:38:62:11:C7
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 019D2A044C136AB2AA1198757257CC6EE5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 12:00:17 +0000
Manifest this update: Thu 26 Mar 2026 12:00:17 +0000
Manifest next update: Fri 27 Mar 2026 12:00:17 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: iKZjlYZo04797H7tm9Kzv6pmZUsYogqR7Lylm6j2X+c=)
2: aVXhAizmDepCVOoLPu585d5UOlQ.roa (hash: YB+GHVOhQos2qu1NUzfo9daXC5WuIe75DyabTVAx7KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:4c:13:6a:b2:aa:11:98:75:72:57:cc:6e:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Mar 26 12:00:17 2026 GMT
Not After : Mar 27 12:00:17 2026 GMT
Subject: CN=ad3352ac9808ab989d1e92af24a9970e386211c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:1d:11:7c:55:53:9c:8b:50:0f:1b:42:e9:
9f:ff:07:86:f8:83:98:92:af:b7:eb:70:7d:e0:48:
b2:0a:12:48:b9:99:e0:29:86:f0:3d:74:6b:ce:a1:
df:b2:ef:d9:d0:9b:e8:a8:d4:ee:65:ab:8e:a8:86:
c4:ce:c7:49:01:99:73:d9:f0:01:f3:ba:87:6a:e7:
7a:cf:d3:7f:3e:31:2d:0c:18:18:97:a9:ea:a9:a7:
08:12:43:7a:ef:b8:d3:09:90:1a:92:4e:10:39:05:
d0:b8:75:d5:ac:e2:1a:16:68:2a:4b:eb:aa:a8:0b:
b6:5f:f0:fa:5d:a9:34:9e:5b:c9:1f:25:6d:66:ee:
0d:82:f0:3e:b5:c7:28:27:35:fd:dd:9f:19:5d:8d:
21:2f:42:25:11:15:0e:a7:7d:65:ee:08:60:1d:de:
63:be:03:11:49:5e:12:eb:c9:61:ed:9f:e2:f8:3d:
3f:dd:5f:15:90:19:e3:05:07:e1:4f:e9:e1:44:16:
b2:b7:7e:8b:54:01:73:c3:0d:40:ed:9e:77:c8:86:
b2:a8:64:62:f6:1f:22:c6:89:c6:7e:48:8f:82:00:
11:7d:53:e2:fd:d4:48:5c:05:4c:2a:d9:e3:bc:5d:
4d:5c:7e:71:8a:06:3d:e2:48:28:1d:b0:63:61:ed:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:52:AC:98:08:AB:98:9D:1E:92:AF:24:A9:97:0E:38:62:11:C7
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:38:9f:8c:5a:59:b3:b2:bd:de:45:f7:3b:c0:e3:cf:c1:c2:
70:9a:a3:5b:91:30:d6:71:da:3a:ba:d8:a8:0e:43:03:5f:41:
8d:dc:1c:bd:a6:b8:5d:f1:11:bd:43:fb:9c:8d:04:5d:9a:7a:
e7:74:75:78:a8:35:c3:34:e0:aa:4c:7e:01:f6:ef:6a:24:3d:
f6:c8:1a:90:70:cf:4c:28:73:f4:c8:68:45:68:49:5b:cf:11:
33:ca:0b:05:6e:32:b7:c1:d4:f0:6b:8c:98:62:3e:3c:58:51:
ef:2e:2f:f5:bf:9a:04:3b:8c:f3:94:ee:0e:c7:fe:e2:8a:47:
53:79:7d:0b:67:6b:ae:33:7d:17:da:1d:df:a1:b3:54:f3:e9:
09:cc:19:99:a7:c1:32:54:9d:cc:69:8f:86:74:29:38:0e:52:
3a:4d:67:bf:38:08:29:01:83:19:4c:94:38:5b:d8:3f:53:88:
bb:b9:09:37:5c:c7:a3:0d:16:87:ff:c0:e6:2e:1f:3b:4f:34:
58:ad:3b:dd:83:22:9f:ca:57:ca:38:0f:f1:2b:1f:8e:4b:43:
2c:46:80:39:4c:7c:b0:d3:2b:4d:19:e8:8a:72:5d:28:5f:31:
e3:67:e2:92:c7:40:f9:da:8b:c9:86:d2:a4:a6:7e:13:bb:5c:
d1:d2:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:58 2026 by rpki-client