Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: 4f/3xByDRmIy/ThnocqxSqhR582RpwiXC9YaHVNAEFo=
Subject key identifier: 35:16:73:B3:73:27:1D:39:5A:FC:A6:4B:91:D2:65:85:F4:AD:AA:2E
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019D382DF7B8C492E8BD209095B00F7C3C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: wGanNAJ8+c3TIAxzsjOcHXJRFpHDSXhGGw+yqTAsIMQ=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f7:b8:c4:92:e8:bd:20:90:95:b0:0f:7c:3c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=351673b373271d395afca64b91d26585f4adaa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:10:be:03:71:67:ee:0f:68:c4:26:e7:5b:
a3:56:18:f3:0e:ec:79:1b:f1:3b:e5:9b:65:81:3b:
bd:a5:6e:4e:9c:38:06:e4:af:88:91:79:7b:16:00:
c9:7b:ad:09:92:99:fe:0f:45:8a:04:14:66:ba:30:
d3:b1:42:8c:9c:be:53:07:5b:05:83:ef:d7:d5:af:
6a:8d:85:05:2d:2a:91:bc:c7:9b:40:f8:9e:98:14:
d8:9d:1e:f8:5c:c0:4a:06:96:cd:0a:d9:2f:e5:57:
d9:d9:c4:4e:ce:42:05:c3:bf:87:ec:b7:e5:48:ee:
74:3c:f2:f6:8a:71:b6:46:d3:31:2e:6b:e8:27:0a:
d4:ee:47:ec:9d:8b:fb:db:35:c8:54:8f:61:2a:65:
9b:9e:de:c3:fc:d7:3c:f0:c7:a4:9b:2f:60:d0:0d:
09:bc:08:2a:b4:fa:aa:63:5b:8e:c9:78:19:68:35:
2a:13:d3:03:5b:5f:95:0b:9a:6a:ea:3b:0b:c4:cd:
4b:08:33:dc:2e:4d:c3:b8:8d:ef:f2:19:f5:5b:a8:
be:cf:fc:74:34:db:ed:53:1a:4b:78:45:19:58:e9:
48:a3:e1:c9:70:88:bb:76:b9:97:06:78:78:ab:7a:
a6:e3:dc:fd:44:a3:ec:e8:e7:f7:23:f6:4f:0a:84:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:73:B3:73:27:1D:39:5A:FC:A6:4B:91:D2:65:85:F4:AD:AA:2E
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:10:c4:b1:be:4a:83:0e:ce:61:76:bb:0f:81:16:0e:41:bd:
84:ee:0c:87:25:02:65:c9:7c:9e:09:98:54:17:76:de:fe:d6:
3d:f2:c1:8b:c0:80:83:7e:03:4c:49:71:c8:ae:0c:26:c9:0d:
00:de:33:dc:04:c3:b2:14:f0:67:3f:67:42:76:6c:92:e1:65:
86:49:6f:18:4e:64:cb:6f:4b:cd:12:f4:3a:8b:5a:69:3f:35:
e4:40:5e:98:a2:74:11:40:6b:b0:0d:ba:6f:a6:0b:e4:86:e6:
18:ae:3b:6b:fb:92:8f:06:1d:6a:97:89:5c:17:5d:04:8e:c5:
d5:71:ea:2d:b2:70:32:1c:e1:d7:57:13:f6:b5:50:0d:8d:f9:
5e:ef:74:21:dd:88:82:ab:93:2c:00:86:b8:11:3a:e1:11:0a:
d1:06:bc:12:29:f1:9c:bd:7c:31:df:74:59:9b:59:7f:ad:b2:
2d:ea:cc:54:36:0a:0b:82:65:ed:77:e2:8f:21:e5:3d:5e:8a:
d1:b3:08:27:27:18:b1:ae:d0:b0:e8:b6:c1:9c:70:d5:2e:cd:
8a:ad:11:88:46:9d:c7:df:b3:4f:50:c1:a9:63:80:34:51:cf:
4e:0e:23:b6:d2:b9:b2:89:d0:70:a3:67:9b:35:38:da:24:17:
41:57:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:07 2026 by rpki-client