Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: /qfYE7sp9GYuY2b8ErOigmxKYJZ93gzgFfAQL1Rzso4=
Subject key identifier: 52:40:6D:B3:5C:EB:8C:3D:E0:3D:B1:50:44:53:59:81:2D:95:4E:8F
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 019D38667E50225853DEEB151BEBAD9A093E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: U9HC9a/k/C+MYTrsxLIqAkKANtRbXv6GEikhN+StM9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7e:50:22:58:53:de:eb:15:1b:eb:ad:9a:09:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=52406db35ceb8c3de03db150445359812d954e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:75:1b:d5:21:9a:ca:9e:bb:03:60:3a:64:
8d:27:39:40:cb:be:99:4d:3a:90:73:bc:5b:eb:cc:
c7:41:5e:5d:da:7a:91:f4:c4:2e:37:86:a5:40:fe:
14:e0:0f:47:41:ef:eb:9f:a8:6e:df:3b:17:c5:f0:
71:c6:cb:db:4e:95:5f:8c:7a:f8:3b:49:9f:b3:90:
67:e6:f6:6f:62:11:72:d6:a2:7d:45:7a:1b:ae:d6:
a4:d2:c3:df:13:50:85:07:40:0f:07:91:c5:a8:49:
71:00:bc:3d:cf:e5:aa:f0:12:d7:4e:78:57:b5:a7:
11:1d:76:ad:54:21:40:67:69:89:b3:a2:d7:1d:d2:
c5:eb:39:64:e6:c4:2d:e5:b2:43:7e:b3:f2:c5:d9:
b5:81:39:f7:35:4e:7f:d1:1f:c8:0a:56:cb:2f:53:
2e:82:36:5b:3f:56:32:78:34:0a:91:e1:eb:3e:15:
7c:fe:44:c3:e6:00:bf:59:60:3f:1b:1d:69:28:c0:
43:b5:b0:a3:60:b5:ad:f4:1d:e7:e2:31:07:9f:f1:
a5:2d:38:41:78:91:6a:1e:f8:c4:d1:2b:ca:a4:83:
5d:c8:dc:51:ef:b8:0b:44:0e:c6:5d:37:b0:43:95:
4e:3d:3a:6b:2d:ff:c5:41:69:bf:c6:26:98:78:10:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:6D:B3:5C:EB:8C:3D:E0:3D:B1:50:44:53:59:81:2D:95:4E:8F
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:82:9d:01:87:63:4a:a8:1b:12:8c:07:b9:47:45:f7:d3:a9:
a5:f0:6c:85:16:f4:56:34:8a:b7:55:df:2c:71:8c:7a:98:2e:
07:a7:84:ab:cc:f6:ef:71:0c:ef:4b:2b:ab:00:be:46:2a:a0:
cd:ed:09:ef:09:13:9a:87:4b:2e:94:fc:fb:d2:e8:29:98:02:
bf:05:ed:5b:84:2e:60:16:99:e1:b2:cb:87:e3:f6:78:28:a6:
e4:d5:c2:6b:cc:77:1a:d6:16:e4:3a:6d:d1:9c:f1:5c:87:94:
aa:ad:df:93:b3:46:53:60:29:80:c7:15:3f:8f:ec:dc:28:32:
40:cd:6f:50:79:d4:4c:1b:59:20:00:7f:87:e6:76:38:e7:a9:
00:49:89:f2:d6:10:c6:c1:77:d1:01:ad:d0:70:cd:21:73:24:
e7:14:fa:4b:b2:d6:37:3b:00:90:61:c8:00:4e:dc:25:fc:74:
f6:39:20:fc:82:2c:54:5e:35:0e:2b:21:3a:c2:33:b2:d7:f3:
f0:7a:0d:c6:fe:65:d6:45:cc:7e:5a:8e:03:6c:e3:c9:c0:79:
20:ba:3f:c7:e7:40:f2:8d:31:01:35:6a:ff:a8:35:4d:12:90:
c0:3f:69:94:c6:d2:0e:5e:65:a6:ce:af:aa:e8:c6:38:eb:27:
6a:5c:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:25 2026 by rpki-client