Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: Sb4PmPEH+Bph5A+Su0DTFAo8/BN4PKoDqnbIuRcROdg=
Subject key identifier: D3:A7:60:34:CF:09:79:FD:30:29:FB:0E:BB:D1:69:A8:97:FD:03:1B
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 01A0D0B6CA83FB92B140DD376A07AA68F2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 00:00:35 +0000
Manifest this update: Thu 24 Sep 2026 00:00:35 +0000
Manifest next update: Fri 25 Sep 2026 00:00:35 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: /6WMVrdkTk4jzGX0Ac6B7x8/gkfVud7ig1373LLeURY=)
2: aVXhAizmDepCVOoLPu585d5UOlQ.roa (hash: YB+GHVOhQos2qu1NUzfo9daXC5WuIe75DyabTVAx7KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:ca:83:fb:92:b1:40:dd:37:6a:07:aa:68:f2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Sep 24 00:00:35 2026 GMT
Not After : Sep 25 00:00:35 2026 GMT
Subject: CN=d3a76034cf0979fd3029fb0ebbd169a897fd031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:e8:a0:6f:27:23:c6:7d:9f:4b:ff:8b:4d:
e5:4d:31:92:da:54:94:7f:a6:b3:3f:c4:31:f8:b9:
06:38:dd:04:5c:77:03:cb:a7:ad:c3:4f:92:9d:a6:
2f:25:88:5b:1a:82:7a:6d:a1:93:29:d6:09:bd:25:
13:ef:1b:bd:ac:1d:e8:be:0d:a1:22:8d:c4:5d:d8:
46:d7:4a:a1:75:2d:ff:43:9f:0f:05:3b:34:d5:2f:
4b:0a:d9:7c:ec:c6:7d:c2:ec:90:8c:15:0d:a8:12:
d7:e2:47:14:86:67:32:fd:60:33:13:86:12:0d:d5:
d4:18:a5:0e:64:ec:08:e7:22:7e:02:8b:63:7d:7c:
84:46:cb:9c:50:dc:d9:11:16:72:a4:59:20:46:86:
63:11:51:c5:d4:5a:b7:c4:7d:f0:da:48:67:cb:12:
fb:00:13:66:e2:df:d7:60:3c:8c:92:18:5e:29:e0:
b1:2e:67:43:0c:a7:76:83:f7:c1:72:30:09:c3:1d:
66:dc:75:62:4c:79:26:75:32:53:18:e6:df:46:f2:
f7:07:e7:6a:9b:37:05:1f:a2:60:2c:ac:c2:59:c1:
9c:19:16:89:b3:e5:0a:dc:a8:fe:1b:4e:c7:4f:11:
bc:24:ad:18:82:91:89:d5:5a:5a:33:dd:19:9c:97:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:60:34:CF:09:79:FD:30:29:FB:0E:BB:D1:69:A8:97:FD:03:1B
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:43:5d:58:b3:41:73:04:32:bd:21:81:c0:c1:df:84:a7:
f4:d2:f0:aa:74:a2:a6:cd:36:6c:26:fe:f2:94:e5:22:e4:dd:
fc:03:49:4b:4d:02:14:1d:32:04:43:72:9c:88:2d:76:d6:86:
05:41:9e:23:4a:22:22:44:ed:c3:a7:92:b8:45:de:bd:b7:e6:
26:39:23:af:c0:e9:61:19:d4:6b:fb:9d:ea:2e:af:c3:d3:46:
ff:7e:10:34:bb:b5:e2:f7:8d:ef:74:c2:44:50:c7:ee:ee:f7:
8e:b3:22:19:b8:98:91:92:1f:f1:eb:2b:c2:6f:b1:bb:8c:fd:
e0:f5:df:72:02:3f:3d:99:12:60:ba:a1:65:92:9b:43:d3:63:
67:8f:c1:d3:c8:d2:0e:85:29:bb:c4:da:90:26:63:9f:d6:d2:
a4:07:9d:7d:3f:eb:83:6b:b4:81:24:f8:da:62:1b:d3:8b:35:
df:61:70:d5:f6:5e:ce:58:07:70:23:21:2e:ac:b1:0b:99:34:
a4:9d:dd:e7:56:7b:13:bb:de:5e:8e:15:ef:a5:06:ba:ab:28:
d8:ea:67:74:f7:d4:e0:f3:e5:e6:f8:83:86:47:7e:80:61:a5:
a7:5f:da:6e:47:fb:e5:eb:84:fc:c8:f2:ed:4c:3d:3c:36:64:
c1:1f:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:05 2026 by rpki-client