Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: DQXtegXnDXOIVyaOvvlOFVXp5HJr+MI4feKwUs5SkE4=
Subject key identifier: 3B:53:E4:AD:AC:8E:55:FB:21:7C:3E:70:9A:DE:0C:CD:C9:5A:D4:71
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 01A0D5DE8BC29E6FD05A891FCC890FDFF01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 0574
Signing time: Fri 25 Sep 2026 00:02:06 +0000
Manifest this update: Fri 25 Sep 2026 00:02:06 +0000
Manifest next update: Sat 26 Sep 2026 00:02:06 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: lxQf6DdieWkPOcPc79mub5xCE/gkKm/VmzU4H8VKzQQ=)
2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:8b:c2:9e:6f:d0:5a:89:1f:cc:89:0f:df:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Sep 25 00:02:06 2026 GMT
Not After : Sep 26 00:02:06 2026 GMT
Subject: CN=3b53e4adac8e55fb217c3e709ade0ccdc95ad471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:b8:68:9d:c0:35:6b:fa:9b:ef:fc:ab:45:
d7:70:65:e2:77:42:14:b6:7a:47:c2:25:a9:ad:02:
2d:20:64:6b:bf:d2:55:a6:80:61:dd:e5:89:19:b3:
35:57:9a:a1:0d:92:34:af:63:84:b8:39:3a:6b:5d:
55:c5:02:aa:10:17:b9:8f:aa:b5:2b:37:59:6b:a2:
91:4d:0d:88:9a:27:9b:7b:c8:30:c2:8c:9f:c5:93:
19:da:94:41:bf:0b:93:22:1a:fa:27:74:85:c7:36:
aa:fa:e4:72:a2:59:4c:46:ea:d5:f0:9c:09:e2:3c:
bf:8d:06:cf:03:d7:b3:c4:c7:3c:64:a5:0f:27:a9:
19:45:94:ca:f0:50:a5:d3:67:64:1c:ff:9e:2b:54:
5e:67:51:0f:68:c6:ab:38:24:a8:09:21:27:73:2e:
32:d8:6e:2d:d2:e1:3a:ba:f4:3c:ba:5c:cc:78:78:
d4:65:58:36:89:24:93:85:e4:66:2b:2b:50:43:1a:
e8:ba:0e:1b:dc:05:14:e7:5e:4f:89:b6:fe:7b:22:
a6:3f:e3:ca:8b:2d:92:9a:35:a1:a6:39:36:7e:1b:
f8:58:a6:99:07:8f:b7:79:2d:f3:57:57:8c:4b:60:
fe:e5:e2:a1:c2:d8:43:b4:f6:3d:45:32:93:d7:ef:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:E4:AD:AC:8E:55:FB:21:7C:3E:70:9A:DE:0C:CD:C9:5A:D4:71
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7b:8f:15:0b:3a:11:cf:37:72:df:c1:4d:f0:d3:e9:b8:83:
f0:87:11:92:ad:8f:ad:22:c1:ca:b8:e9:97:09:c0:6b:8b:25:
48:7c:1d:01:39:0c:18:a4:8f:f3:aa:b4:ed:bc:6d:52:25:0a:
d1:fb:49:91:2c:f6:b6:22:40:98:77:ac:1b:5b:1d:72:c8:df:
17:aa:6e:ba:46:cf:09:29:e3:7d:f0:9c:e2:70:16:ab:61:86:
fb:0c:cf:0d:b9:95:08:fc:7e:a4:78:b6:e0:2b:9b:3f:54:59:
02:03:de:8c:03:df:e5:72:12:13:13:da:a9:ab:a0:1c:09:17:
bf:97:e0:e4:fb:b8:38:e2:a3:f8:25:46:73:7f:37:a0:f3:ed:
1e:d6:80:f9:ae:7f:b7:22:87:9a:ce:0b:dd:78:d6:bc:36:c5:
fd:b7:d1:25:5e:1a:10:7d:32:ae:d9:2c:63:3f:f0:ca:58:72:
4d:d2:bf:ca:53:18:f3:0d:34:24:7f:23:b6:29:12:4f:7a:23:
d0:23:c0:f2:c6:20:8c:d5:a6:8a:f5:3a:bd:50:b6:17:0f:9e:
24:4d:21:96:1a:c5:88:d0:42:53:b3:29:41:9b:dc:72:db:f5:
0a:b2:20:b3:a3:e1:93:b5:a0:53:05:0c:e1:2a:f1:84:ce:af:
89:1c:3d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:43:49 2026 by rpki-client