Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: u+IQSLafMEyoG/DXzY+XTbxxmnl3yGh+mc/JjIdgnlM=
Subject key identifier: CA:5B:A9:4A:52:01:D6:02:53:C2:21:7F:8F:6F:22:2F:A9:ED:A0:1D
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 019D2583976E64075DFD2E1D661FA9722932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 038B
Signing time: Wed 25 Mar 2026 15:01:14 +0000
Manifest this update: Wed 25 Mar 2026 15:01:14 +0000
Manifest next update: Thu 26 Mar 2026 15:01:14 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: a/zJ1Om3Pq5U12bb9B8axb4iNrFTdr/CpzfGMfJCTbQ=)
2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:97:6e:64:07:5d:fd:2e:1d:66:1f:a9:72:29:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Mar 25 15:01:14 2026 GMT
Not After : Mar 26 15:01:14 2026 GMT
Subject: CN=ca5ba94a5201d60253c2217f8f6f222fa9eda01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:63:2e:f6:fb:10:f7:d7:17:ab:11:4d:7a:
e9:65:24:8b:b7:77:2e:c6:b1:df:39:da:17:43:7d:
9d:b4:89:44:63:f4:8b:ca:63:e7:8e:d3:c7:00:f6:
e4:14:70:05:4b:59:7c:4a:88:9b:c3:d8:f9:5d:de:
d6:34:2b:c7:fc:4f:9f:0a:45:e5:cd:2d:98:65:d6:
92:08:04:d9:df:b5:08:bb:ee:85:fb:20:85:f2:ef:
5e:03:25:29:a0:3e:1d:ea:b0:43:fe:78:d8:35:e4:
39:bd:a2:ca:33:d7:ef:f9:8d:a4:0a:92:71:14:99:
a0:65:30:7d:93:83:00:92:67:84:9b:dc:23:67:ae:
81:e3:38:b5:b8:9a:03:14:53:01:89:b4:1a:4a:72:
83:38:9b:99:13:d8:31:40:73:30:60:1e:d1:e7:07:
e8:a9:7c:22:03:e8:4c:7a:a2:87:7a:b0:8a:89:1e:
91:91:53:11:25:be:82:64:7c:c3:d1:f4:ad:9d:86:
a4:7f:fb:2e:8d:e0:a5:51:aa:a0:15:dd:09:a1:fd:
4c:99:68:6c:31:68:71:33:75:e3:ba:34:39:9d:b5:
f7:ec:98:de:a0:dd:8a:0c:7e:ba:7d:9d:42:f6:92:
54:a1:34:ed:76:63:df:46:31:ac:c3:80:fa:77:ba:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:A9:4A:52:01:D6:02:53:C2:21:7F:8F:6F:22:2F:A9:ED:A0:1D
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:e4:df:f2:d6:d4:d3:c3:c8:2d:14:b8:ae:a6:0b:97:bc:
6a:ba:96:78:fc:fe:18:9d:99:c3:03:a8:dd:c1:66:38:3c:99:
68:dc:03:24:9c:64:a8:20:8d:b8:33:2a:d5:b8:53:94:92:21:
68:7e:ab:41:fa:e8:37:90:97:7b:a7:c3:76:e2:14:5e:ce:1e:
86:45:50:7e:e1:bf:a7:d0:31:a1:ed:59:19:9b:96:ee:f5:4a:
b9:9b:11:19:3e:a0:7a:e3:fe:66:da:46:a2:20:8e:2f:09:05:
94:64:e0:22:df:bf:64:75:7e:0e:89:20:cd:a8:81:41:95:df:
4f:a6:00:bd:d4:50:e8:ba:39:10:91:4d:48:b1:93:0a:d1:e7:
7d:3f:ba:b4:db:cb:91:74:6f:6f:7a:80:b9:99:46:61:d0:6f:
0b:86:71:25:a8:8e:d9:ce:b9:7a:b4:9e:6f:8a:55:28:76:5a:
1e:e2:1a:b3:9f:e1:26:5e:44:1d:0c:c7:ca:e6:91:7f:33:69:
4d:4b:0d:21:32:e0:26:08:3a:b2:e7:9b:d3:79:90:22:0a:4e:
41:44:e0:a0:57:7e:c0:15:6e:97:ed:53:fb:45:c9:4c:64:23:
cf:1c:a8:c6:4f:84:43:58:98:6f:58:7b:ff:78:ef:a3:82:64:
d2:e7:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:53 2026 by rpki-client