Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier: JGiTBWHqhMAbmn0oqwWYdY8R73+RN7zCt4wYwzpw1p0=
Subject key identifier: 5A:94:5A:C3:65:39:83:A2:83:D3:9D:12:BE:63:16:BF:DD:BE:86:0B
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial: 019D37C073727429EF86BABBB0E70FAD1813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number: 1550
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: UYQCKBIJs_jm7bQEQlMrwuHX6Ds.roa (hash: /Rb7W1hiZzDM8zy+jiVsugvOM6pnTRPvaLJxUTo+MJw=)
2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: 9MqnZ06hFU0faZTn0yBQSx6sDZO29/+E6/uEPsGKDVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:73:72:74:29:ef:86:ba:bb:b0:e7:0f:ad:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=5a945ac3653983a283d39d12be6316bfddbe860b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:bd:f0:79:ca:dc:87:5a:d7:83:1c:4e:ae:
8c:26:2f:99:12:85:9c:93:83:d6:f9:27:f3:6e:3b:
55:19:b1:6b:79:27:50:ab:9a:9f:0d:9d:61:76:f7:
d5:6e:1e:68:72:45:20:5e:7a:6c:81:87:70:26:cf:
e5:2a:85:e5:4f:44:15:ab:b5:5e:df:75:97:0e:a5:
83:0b:a3:1c:8a:3d:4e:04:2f:09:90:62:a4:f9:65:
f3:81:5d:d4:d4:96:47:b9:19:1b:fc:bd:63:30:53:
6c:5b:e5:aa:95:06:44:61:b9:48:30:27:cc:aa:77:
26:d5:6b:cb:b5:7b:bf:24:e8:f1:9d:12:22:13:87:
15:fd:8d:13:57:d2:48:a1:19:06:fa:2a:de:4a:25:
49:95:57:59:5c:59:7a:d7:59:a1:a1:8d:e2:72:31:
91:93:65:58:5d:da:bc:70:51:b4:d5:4b:5e:4e:54:
8c:c3:0a:8f:4c:b2:94:d6:15:59:dd:aa:d0:8c:13:
7d:57:7d:f3:68:82:4a:69:c7:21:b4:ae:1a:ae:a5:
a4:9d:aa:d2:61:e2:71:84:af:c2:00:72:09:b4:47:
5c:57:37:24:b6:ae:bf:69:f9:3f:25:0b:3a:bc:64:
fd:c3:5e:7f:0d:c9:0f:16:9e:74:a0:31:f2:38:be:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:5A:C3:65:39:83:A2:83:D3:9D:12:BE:63:16:BF:DD:BE:86:0B
X509v3 Authority Key Identifier:
keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:68:13:30:a0:f2:94:c6:ce:60:51:c3:9c:60:2f:72:f2:ac:
36:1d:32:b1:50:db:ce:f2:28:d6:db:c3:0a:78:e9:7a:c7:63:
10:4f:23:72:bd:6b:a0:b1:07:c9:33:51:4f:25:0b:12:e7:f4:
06:c5:94:bb:5b:1b:2d:12:4a:ea:ff:1b:ea:56:44:f7:a3:69:
5c:b4:52:2c:d2:11:b4:b3:65:c0:b9:98:18:21:3d:18:44:f0:
e9:1c:02:ca:5b:43:60:ed:b2:da:86:2d:8d:75:ed:c4:44:71:
db:26:97:d6:6a:2d:4e:d4:7f:65:67:c3:5f:71:4c:b2:20:c0:
ff:e4:f9:75:ed:91:14:6e:58:c9:41:3c:5f:97:ea:a6:bb:44:
e4:e6:8f:4a:d4:9c:03:e9:36:8e:14:0f:3a:12:22:78:ca:f7:
ee:e5:76:3e:07:61:57:ff:d4:80:42:e7:46:12:40:21:c2:9b:
89:99:24:fe:81:82:25:57:f2:46:11:14:26:1c:8a:46:e6:62:
ca:d4:54:b3:a8:3c:41:72:bd:19:bc:26:c7:1c:a4:f2:3f:10:
67:9f:17:8f:2d:92:63:96:50:94:af:2b:69:0e:cb:d7:ef:81:
6e:84:dd:38:6a:4d:16:d1:b1:26:39:d3:b2:ae:dc:fa:13:be:
4a:d6:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:12 2026 by rpki-client