Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: nua7Rj0/RpP5MUma2j3CwOMQqxVK9TFQQrhGzyoe/i8=
Subject key identifier: DD:12:C0:4F:53:7C:2E:72:16:0A:53:79:FA:45:3E:70:F4:7E:2C:F7
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019E2F6004FD873AA413F935FD5D7D1867E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 06:01:22 +0000
Manifest this update: Sat 16 May 2026 06:01:22 +0000
Manifest next update: Sun 17 May 2026 06:01:22 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: yvLz+KAFC6RPj/g4Wp2q5nLaRZQzVw9J9cSoDFvniJk=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:60:04:fd:87:3a:a4:13:f9:35:fd:5d:7d:18:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: May 16 06:01:22 2026 GMT
Not After : May 17 06:01:22 2026 GMT
Subject: CN=dd12c04f537c2e72160a5379fa453e70f47e2cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:a6:a6:d1:a1:e3:53:19:3c:df:a0:be:84:
88:c7:dd:ad:d7:52:53:39:0e:15:e9:d8:7f:81:33:
10:ae:d3:5d:4a:13:d2:00:75:3d:c1:cc:af:9c:b5:
37:31:01:6b:38:0b:49:ab:2f:7f:19:1f:10:ba:e0:
5b:fd:17:2c:e9:64:b1:f0:50:5c:3c:d1:ce:b6:dc:
e3:b1:1f:d3:70:56:00:8e:2a:fb:95:0a:64:21:56:
aa:a1:0e:f1:6c:e7:18:65:45:4f:33:01:a5:09:ac:
67:df:12:4c:66:2d:b9:5d:f3:0c:b8:a2:73:13:86:
27:56:66:de:9f:98:ea:a4:c3:83:81:d8:ca:3c:82:
ab:c6:96:42:b3:eb:f0:60:6e:51:13:da:cf:b1:a9:
f1:e3:67:7f:52:e6:3a:d4:c2:c2:8e:80:65:91:49:
d7:ea:c7:fa:a5:36:f0:d0:f0:fa:cb:a4:55:48:9e:
52:21:42:c6:08:02:09:a3:aa:29:c3:9a:a3:58:34:
fd:8b:b3:5d:89:ac:b5:69:fc:ce:a6:d7:db:45:60:
d8:0b:73:00:56:e5:60:3e:d2:1b:17:08:e4:0c:36:
c7:85:c8:ad:ab:32:8e:8b:90:0f:44:f7:75:ef:9b:
e4:06:b1:78:e5:f3:86:60:9b:ac:57:3d:54:c1:39:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:12:C0:4F:53:7C:2E:72:16:0A:53:79:FA:45:3E:70:F4:7E:2C:F7
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:45:f5:5b:22:67:e1:50:3f:3a:13:0b:92:f6:76:ff:08:6d:
43:b0:71:61:15:d3:e0:df:e7:14:3c:8d:db:18:a4:40:c7:67:
77:30:5d:c9:ed:e0:24:3e:c0:fa:14:2e:8f:2b:88:df:6d:9f:
e7:c1:94:2b:68:f1:e7:eb:7e:51:5e:19:48:59:c6:44:0e:9e:
31:fe:56:d5:f5:36:2f:63:fc:97:54:58:fd:1b:5a:13:06:ed:
fc:95:cd:d3:b9:b6:96:c6:7f:83:86:48:7a:20:8e:45:b6:27:
40:2c:7b:bf:5c:68:d8:8b:9c:0f:e7:30:53:83:b4:4a:9a:63:
5c:d2:d7:4f:41:e1:ac:d0:72:6c:fb:93:f7:4e:1d:a5:66:a1:
ba:45:15:76:7b:ea:f4:e8:86:55:75:24:da:63:13:5b:df:e8:
1c:8a:c1:5a:b7:1e:6c:c7:9f:30:cb:35:db:85:ea:ea:cd:4d:
ba:d2:e3:e1:5e:e9:d8:8f:fd:61:07:11:7a:af:8a:3a:53:72:
48:3b:a3:cb:93:62:2c:ea:a2:3f:9c:70:7f:ab:e9:0c:a2:dd:
ed:cf:c8:ca:80:27:5a:1d:8d:c5:c9:86:1d:8f:38:80:01:55:
47:df:45:26:cf:cc:56:17:96:f6:bd:85:68:6c:d0:ee:08:2b:
78:e3:7c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:48 2026 by rpki-client