Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: UKg8j5Kmnjd1Xj4Guuh3PLLh7e7PRY+eOuO1RgdCt10=
Subject key identifier: A0:F3:C7:7A:C7:32:E4:96:3F:15:9C:7F:4E:5E:B6:2E:B4:49:BA:AD
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 019D3940CA379071862E003F85FEC6FC5D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 1016
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: QIRneEwmfIdrg3Mvj67pWwlAywssKSbcGPY5he2mhRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ca:37:90:71:86:2e:00:3f:85:fe:c6:fc:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=a0f3c77ac732e4963f159c7f4e5eb62eb449baad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:79:d6:ca:45:d1:46:92:4e:f3:c6:3d:d7:
f4:d1:02:19:ff:ee:32:4b:6d:42:6d:36:96:e7:32:
bc:19:e5:42:15:1e:df:5a:81:9f:25:73:8c:1c:4a:
01:5a:ad:d7:ea:5c:ff:3c:2d:95:9e:55:e4:bb:42:
d5:30:aa:93:6f:d9:da:ec:07:eb:30:65:46:b0:e7:
86:fc:7b:84:43:81:07:00:e7:93:a3:2c:4d:97:8a:
92:be:81:6e:57:b8:72:4a:51:e9:52:8e:b3:70:7d:
10:1a:d5:5d:10:6d:a1:d5:07:59:31:ed:65:10:96:
05:da:eb:c4:aa:4d:e9:c5:42:96:37:77:5a:b5:a3:
0f:58:c9:8c:15:64:44:0a:89:17:75:cc:6f:03:d2:
73:cc:75:96:c4:ef:d9:da:60:d3:cd:51:2d:9a:d9:
4c:e0:54:4d:1a:52:72:b0:3f:07:55:37:45:03:c9:
41:48:e8:91:08:63:07:fd:64:e6:f6:5a:fd:90:41:
6d:d2:18:35:8f:69:ee:23:6c:fc:44:55:18:f1:e1:
09:94:ab:64:ae:df:4c:5c:f2:d9:ff:e8:2c:9d:ac:
da:ad:5a:f1:c0:06:46:74:71:88:80:45:70:c5:33:
0a:53:96:6a:09:53:76:08:d5:c4:93:5b:dd:1f:18:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:C7:7A:C7:32:E4:96:3F:15:9C:7F:4E:5E:B6:2E:B4:49:BA:AD
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a5:15:13:d4:7e:02:3b:03:9e:6f:ae:8e:13:a7:73:c9:50:
4a:7a:37:78:13:e1:2a:f3:6b:72:08:86:9c:ba:81:3f:84:b0:
a7:58:4a:38:8a:93:57:c3:34:a7:a6:81:27:65:04:7e:7d:b9:
a7:da:d3:40:44:10:4e:22:7f:a8:11:9a:bb:60:4e:96:6b:bf:
2b:72:d9:58:6d:ac:39:2d:5c:0d:02:7a:43:91:18:2a:c1:7e:
ee:8c:49:85:06:48:79:6f:08:b2:e9:8a:39:8e:e0:d6:16:6c:
95:a6:40:dc:b7:2a:44:1a:56:a3:c4:d2:b9:39:e4:df:df:fd:
6d:07:c1:f0:85:67:8c:7e:2b:9d:be:56:03:eb:61:65:ec:31:
35:fa:4e:5f:fd:dc:fc:9e:bc:78:ee:0d:89:ec:01:e1:2c:25:
4a:56:f8:12:cb:52:ec:18:c8:63:f2:79:e7:f6:57:39:5f:d1:
a9:77:1e:c9:38:99:a5:fc:6f:09:c9:87:42:ba:0e:d7:1c:d0:
68:07:d5:cd:3d:da:8a:b8:14:91:10:ad:34:fc:11:b8:8c:3d:
82:40:7d:0a:67:83:1c:7f:3f:ce:eb:e4:ac:de:9c:39:89:a4:
80:3f:2b:aa:a7:f3:6f:e9:dd:28:04:80:d8:57:86:fd:a5:78:
34:22:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:02 2026 by rpki-client