Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: 0XZccuSoQUQ/NqeOCSFqDSIp+FkZMYMdJPREi63BXAo=
Subject key identifier: 05:98:E1:55:9A:F4:07:77:9C:CE:22:68:C2:AB:F0:DE:7B:94:DB:14
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019D28BB40DF00515B84B033CA69EC514DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: SsVkz2mUsN+jr0BXuoObPaJejxH1a2rOHRTpNsCr42Y=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:40:df:00:51:5b:84:b0:33:ca:69:ec:51:4d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=0598e1559af407779cce2268c2abf0de7b94db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:8d:45:59:ad:9f:bd:b3:11:41:6f:67:47:
02:dd:e0:59:ee:d2:56:d6:13:fe:29:e5:2b:e1:06:
2e:85:13:90:2b:92:d1:ea:97:49:bc:a0:b9:0e:11:
d5:ef:f7:6d:1a:d1:2e:28:e9:88:ec:88:2e:66:0b:
74:f1:dc:a0:c2:38:37:66:03:a8:55:9d:02:0b:e2:
51:07:83:59:02:4d:ea:6f:f4:7f:c4:2b:99:23:ff:
d3:86:42:3b:75:84:17:68:c7:f9:97:74:f9:e3:84:
24:b8:46:4d:d9:2f:ad:e7:75:16:64:e1:3c:50:cf:
5d:89:8a:aa:6d:82:f7:76:50:d7:26:4c:38:24:0a:
c8:6f:b5:6f:b1:23:d9:64:1a:39:33:63:c5:73:d5:
78:e9:78:6a:a8:b9:f5:0e:e8:71:f5:09:7e:3e:1e:
1b:b6:ba:6b:b2:77:b5:d8:82:bb:1a:bb:a5:ba:9a:
5a:71:d4:09:f8:66:1e:a1:7f:86:b9:81:f7:16:bd:
fd:9e:fc:4b:34:2b:93:90:5c:8a:08:ac:5c:87:23:
29:97:3d:3c:44:0e:41:b7:85:03:86:0f:6a:7d:a9:
02:91:2e:6f:5b:aa:63:3e:38:6f:15:76:82:fd:71:
81:02:ff:7a:70:ad:d7:74:d5:90:90:33:56:17:e6:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:E1:55:9A:F4:07:77:9C:CE:22:68:C2:AB:F0:DE:7B:94:DB:14
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:cc:31:03:67:0b:4d:06:91:b6:aa:69:c9:f5:13:e0:87:
64:8e:b5:c7:81:1d:27:18:4f:6c:74:56:43:9e:98:af:ba:1c:
f2:07:59:f5:fd:63:3d:aa:13:4b:6d:ce:40:37:c3:7c:4e:6a:
7a:cb:3a:32:4a:4b:dc:19:5b:08:1c:92:58:a0:18:f3:94:90:
79:5d:0d:ed:17:93:b5:90:53:d2:ae:70:c9:62:b0:8f:f1:b2:
10:6b:8e:89:66:f7:7c:b9:2e:51:0e:7d:ac:57:ea:a2:08:fc:
5b:b9:07:00:ff:d8:01:67:64:7b:5f:f0:07:4b:e8:d7:69:e6:
bc:61:fc:1c:2f:e4:0c:d7:28:e3:92:f9:81:4e:39:e3:88:27:
14:84:20:20:63:b3:6b:2d:58:b1:fd:b1:38:7a:a4:58:4d:f1:
c1:50:b9:2a:15:6b:b8:e2:07:44:8b:7b:74:41:2f:2c:ad:bb:
52:13:de:50:af:c0:e9:f1:39:ba:09:7c:00:d2:57:a6:93:24:
97:67:22:8e:1e:7e:7a:b0:d9:a2:eb:14:90:49:09:bf:95:5f:
46:7c:97:5c:fc:51:70:18:0c:6f:28:b0:ee:08:17:49:3f:39:
98:bb:5b:4d:de:c5:8e:c1:50:47:3c:c8:0e:e7:2c:07:28:70:
29:1a:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:07 2026 by rpki-client