Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: IYbDjZhTVl/u3VLS7NXe25TBBWQ0s3Gq0TXGfDnBx9M=
Subject key identifier: EE:D3:29:E6:C7:4D:C8:19:CB:C0:F8:53:95:5F:5B:6A:42:FE:DC:D7
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019E1C0FCC56C0CBA4E2D057132950BE0FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 12:00:57 +0000
Manifest this update: Tue 12 May 2026 12:00:57 +0000
Manifest next update: Wed 13 May 2026 12:00:57 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: IT6/TAUeF0ZNrXy2FkBFQKPDdiugreRmnm8t4kf0+yA=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:cc:56:c0:cb:a4:e2:d0:57:13:29:50:be:0f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: May 12 12:00:57 2026 GMT
Not After : May 13 12:00:57 2026 GMT
Subject: CN=eed329e6c74dc819cbc0f853955f5b6a42fedcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:1b:a2:a9:c8:0f:fc:0e:2f:e5:6d:32:20:
b0:d8:f7:8c:20:35:e3:b8:4d:14:d5:c0:3a:c2:02:
5e:2d:c6:0a:d9:a4:10:e4:c2:53:36:3a:8b:df:d1:
3b:c3:ee:41:77:48:e8:df:25:c6:dd:ab:01:e1:43:
b8:76:81:dc:d6:37:f8:55:cc:8e:9a:d9:f1:8d:2a:
b6:d2:a1:b0:e2:07:ee:1c:ec:0b:44:98:21:c4:71:
34:23:cd:c7:bf:e9:a4:ad:9d:13:b1:dc:4f:71:58:
f3:b5:05:a5:9c:6f:63:01:ae:10:c4:68:f4:42:63:
48:4d:02:9a:cd:b8:6b:fb:f6:7a:f4:16:f4:b9:77:
09:36:71:62:39:14:a6:a2:25:4e:f9:28:bb:d6:92:
11:ca:e5:84:13:e5:f3:07:cf:12:c4:bf:f8:7f:20:
ce:8a:97:d3:be:de:74:b1:5f:ad:69:49:02:fa:49:
c0:0e:f4:7c:66:b2:ec:a3:95:4c:4f:47:56:6f:23:
d9:1e:83:8f:51:40:2a:e2:19:73:e8:65:a7:63:f1:
8c:ec:6d:bd:35:71:0a:c9:86:5f:2a:7f:e6:e1:df:
9c:b8:0f:81:dc:71:b9:ad:c1:e0:26:c4:9d:4e:b1:
40:39:5a:16:8e:5d:ec:97:d7:c9:ed:6c:0f:da:32:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:29:E6:C7:4D:C8:19:CB:C0:F8:53:95:5F:5B:6A:42:FE:DC:D7
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:ba:16:04:be:4c:d9:66:4c:97:93:79:8c:12:e9:b5:93:
39:0b:9b:7f:b0:f0:ab:c7:19:7d:74:46:ec:b6:c1:06:48:84:
7d:ff:f2:21:3a:b4:57:2b:39:01:81:e7:6f:b0:d0:b3:6f:ed:
6d:f0:63:5c:7c:2e:5e:78:40:b6:d7:85:0a:7a:67:58:5a:93:
b9:3e:af:e1:a9:7d:1e:30:1e:9f:bd:82:77:f6:d1:c9:38:a8:
84:1d:f6:8b:31:01:7c:66:35:da:06:b3:54:38:56:5b:b8:33:
be:18:ea:71:dc:ba:80:0a:1e:66:79:57:9b:57:cd:d1:7e:12:
75:85:8a:2b:ee:18:5a:37:b5:87:6b:5e:d7:c6:2e:0a:b1:fc:
4c:a0:25:a0:ed:e1:e7:ef:6c:2d:30:ff:a9:fb:99:97:ee:80:
6d:25:3d:49:4e:4b:62:bd:35:29:6c:2e:ca:63:b2:87:96:7e:
19:da:2e:66:02:a7:1c:c0:af:fb:02:b1:a6:73:72:00:d8:df:
e5:5f:4b:58:ee:7b:b1:78:15:fb:fc:51:26:d3:40:c0:de:40:
ba:37:6e:02:e5:50:f7:82:85:75:46:f9:59:65:01:63:45:30:
fb:4a:20:08:8c:52:6d:32:aa:ef:69:fa:77:c6:a2:e5:67:e3:
b6:5f:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:48 2026 by rpki-client