Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: JLtVCSdGSfpxVuMPqHdrcx6BqO6KlJ0ZEBLfbP85QGo=
Subject key identifier: 52:19:5B:29:4B:2B:78:32:70:1C:17:BC:1A:E6:49:85:89:BB:F8:42
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 01A0E0CF351B5B3570960CDB7DE46686F5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 03:01:10 +0000
Manifest this update: Sun 27 Sep 2026 03:01:10 +0000
Manifest next update: Mon 28 Sep 2026 03:01:10 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: K8FcVf5AZcDAYjvcHOb8DbFJsUKbqDzmjFfLNIyVx18=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:35:1b:5b:35:70:96:0c:db:7d:e4:66:86:f5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Sep 27 03:01:10 2026 GMT
Not After : Sep 28 03:01:10 2026 GMT
Subject: CN=52195b294b2b7832701c17bc1ae6498589bbf842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:3e:30:94:14:d4:cf:2a:0a:fd:7a:7f:e4:
58:80:67:bd:5a:10:c1:67:4a:3b:23:1a:d9:08:97:
5d:88:da:51:62:f7:01:49:16:59:a8:b9:42:85:d4:
17:ca:0b:36:a4:ef:be:63:9c:b4:42:c9:eb:b0:c6:
e3:7a:4c:a1:58:d4:f0:18:aa:49:46:44:f7:55:3a:
90:78:8c:f5:03:cb:ed:c8:f8:f6:42:0d:ee:6c:62:
d7:52:13:11:7f:51:6c:e6:e8:9c:31:f0:9c:2e:c5:
50:ff:33:01:4a:27:8a:e8:2f:c8:79:2d:af:86:64:
cc:cc:14:f9:a8:44:e4:48:79:94:7d:47:b0:6d:ee:
70:5a:eb:53:30:71:62:ad:f8:ef:84:72:27:82:1e:
5b:86:29:b4:0c:0c:28:11:8d:81:d3:96:eb:78:fa:
8c:c4:10:e7:0d:15:ac:d9:c7:e3:62:ec:fa:13:84:
0a:8e:1f:a7:4a:6b:ce:b2:aa:df:d8:fd:49:96:c8:
92:4a:8e:fd:81:15:9a:d5:c1:b0:63:dd:a1:ff:a5:
79:13:03:0e:b0:98:4f:09:67:42:e8:e4:6c:2c:d1:
3a:0a:6e:13:24:ac:6b:43:93:7f:0a:a4:69:de:f8:
1d:59:67:12:0c:5d:83:2f:4c:62:2c:c0:f1:37:c7:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:5B:29:4B:2B:78:32:70:1C:17:BC:1A:E6:49:85:89:BB:F8:42
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ce:bb:24:30:43:78:05:f2:fd:1d:ee:61:d4:15:8f:99:77:
83:96:64:ee:98:e1:ed:e0:fb:95:b2:35:54:70:e2:81:cd:bc:
1c:cf:27:07:65:ee:a8:c3:35:9c:83:71:1c:ee:cf:10:dd:27:
cb:65:58:8b:76:56:3d:fb:d7:22:4b:52:c1:65:9f:4d:f3:64:
29:53:6a:73:71:54:4e:e5:ef:ac:14:ba:88:a6:f9:de:f9:27:
d5:df:9c:f5:69:c3:69:17:fc:db:e4:59:47:6d:cf:c8:a7:77:
d4:7e:93:ee:65:a0:1d:43:25:96:84:39:3d:d5:21:51:4d:8b:
f8:41:b9:23:f6:a6:b7:d7:59:77:d5:9d:48:89:f7:99:48:7c:
9a:7e:3e:2c:14:bb:41:07:8a:73:5c:8d:65:ab:85:bb:e8:87:
f6:f9:8b:eb:b3:af:92:96:e2:56:79:d5:b0:69:ec:f2:56:8a:
07:d5:bd:cd:3b:7c:79:6c:a6:55:50:52:55:a3:17:e0:07:42:
ac:1a:8b:5e:5c:4b:a5:3c:66:28:d5:05:0a:fc:40:bc:ae:44:
e8:e3:7a:e2:cd:f2:0b:89:3f:d0:be:e8:05:1b:7f:df:5f:10:
c7:5b:b2:43:84:3f:8d:52:bc:f8:74:c0:90:ca:a1:68:67:1f:
3f:4c:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:47:26 2026 by rpki-client