Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: jO8Xajeunn2X7DiUnBZ7IPSPQFMQuHmKTMKxPghLYbI=
Subject key identifier: 72:91:48:9F:FD:CC:8F:E8:FC:24:80:4A:8B:D1:65:E4:74:44:25:C8
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 01A089432ED09FE18488E1CEFC35A91C3A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 03:01:16 +0000
Manifest this update: Thu 10 Sep 2026 03:01:16 +0000
Manifest next update: Fri 11 Sep 2026 03:01:16 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: ohWwV9cgx/9GbU2zwSQgfGNxMZcy6Cw2qNqDlHsayro=)
2: aVXhAizmDepCVOoLPu585d5UOlQ.roa (hash: YB+GHVOhQos2qu1NUzfo9daXC5WuIe75DyabTVAx7KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:43:2e:d0:9f:e1:84:88:e1:ce:fc:35:a9:1c:3a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Sep 10 03:01:16 2026 GMT
Not After : Sep 11 03:01:16 2026 GMT
Subject: CN=7291489ffdcc8fe8fc24804a8bd165e4744425c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:f9:3f:ad:a3:3f:cb:29:c3:27:f1:2c:0d:
6f:a3:08:ad:11:9c:4e:43:6e:5b:88:ed:58:80:02:
81:40:9c:3f:67:80:20:84:e5:5e:a4:53:16:a0:ef:
81:0c:ee:cb:b7:a8:01:fe:68:d7:9a:90:2c:8c:4c:
da:79:10:5b:f4:20:70:01:39:0d:79:f0:0e:e8:ce:
e6:70:83:a9:de:0e:b6:1f:d0:36:59:3f:30:07:a1:
80:6b:39:a0:b6:15:85:5c:08:a1:bb:41:c4:68:c6:
b3:d9:54:c5:0e:da:9b:dc:7e:8d:5e:ca:7e:6c:8f:
23:91:ce:0d:a5:ee:b6:27:d7:75:24:dd:96:88:38:
d2:f1:17:09:38:66:0f:5d:ed:8e:6a:fe:74:53:d1:
ab:da:1c:4d:6f:af:a5:33:3a:f7:60:77:59:9b:aa:
e9:63:20:6a:1d:6a:58:21:0a:41:17:4e:e1:df:a3:
8b:09:7a:d7:b6:df:29:62:8c:ac:23:60:25:12:0d:
82:dd:ae:9a:ee:13:38:31:bc:cb:b2:5d:4f:85:3c:
e5:8a:28:c8:a4:5e:8b:4f:05:91:75:2f:01:72:f5:
15:28:94:fe:07:1a:dd:a6:b9:50:dc:7a:32:f1:7d:
e9:4a:d5:a2:29:ef:a8:d6:de:9e:3a:70:09:9c:1d:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:48:9F:FD:CC:8F:E8:FC:24:80:4A:8B:D1:65:E4:74:44:25:C8
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3c:fb:5e:29:ba:05:d1:f2:e0:ed:77:cc:41:4d:a3:bb:65:
ea:a5:70:00:34:bd:6a:bc:76:d4:af:7e:00:cf:79:0c:29:9e:
1f:49:58:39:10:c8:f0:8c:72:eb:f2:46:65:95:8a:9e:1a:54:
5c:d1:9c:42:d0:ef:5c:72:80:b5:41:cd:93:8d:03:09:1b:47:
c0:81:0b:67:eb:08:3a:4d:a8:00:03:8a:f6:17:25:ee:d3:77:
1d:d0:ef:9a:fb:9c:1f:1f:1b:ff:df:57:e5:7f:5e:99:c8:ab:
50:47:d4:3f:b0:be:a5:3c:c9:48:a5:d7:64:51:98:ac:1c:0d:
88:2c:23:50:81:f4:56:0e:36:c1:f5:fa:c5:e4:fb:d9:4c:2e:
1b:17:f2:45:4b:59:8e:38:d0:c4:f6:fa:4f:78:e8:8b:45:cb:
d9:cc:6c:71:3b:51:4b:3e:20:57:3a:9e:98:56:4c:7e:c0:71:
6e:aa:e4:84:ed:8b:1c:65:64:a3:55:45:3d:bb:15:2e:ec:85:
65:39:db:71:45:e3:c5:8e:a2:57:0e:04:7d:8e:31:af:15:a9:
c3:4c:0a:61:5a:2c:69:95:cf:e7:77:0f:0d:6b:27:20:d8:f3:
cb:2e:ae:14:7b:3b:20:ab:16:1a:62:d5:18:3c:d7:df:bb:67:
3c:f6:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:53 2026 by rpki-client