Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: xaJM9/nwI6XqKI3lxJWdKrbZo4JneaAzg8KphNwx5A0=
Subject key identifier: 29:79:4C:05:A1:92:83:38:B2:6D:EA:A6:77:AD:58:84:0F:58:BD:59
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 019D389BD7719A4BEBD641C86B0D1E31BB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 1608
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: Ia0Y7FyB3dcFc0zGId8XytqQiyJdHM3GFLzjHp4kemE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d7:71:9a:4b:eb:d6:41:c8:6b:0d:1e:31:bb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=29794c05a1928338b26deaa677ad58840f58bd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:b3:1b:a0:55:4b:c7:4d:0b:0e:f0:82:e7:
3f:b1:d2:49:ad:2e:4d:0e:67:61:1a:3e:01:69:af:
e6:a0:e5:21:c8:1e:b7:5b:99:bf:a9:47:5f:34:dc:
42:92:cd:17:d2:6e:b0:f4:87:fb:43:66:43:4d:73:
c9:63:2a:07:95:9a:a3:1a:dc:87:66:fa:ea:35:6b:
d9:72:ce:ef:d8:2b:6f:d7:40:89:a0:c9:16:32:2a:
27:77:48:52:5f:a0:4a:41:97:8d:ab:ec:91:29:bc:
4b:a6:98:6d:54:12:ba:b7:66:f6:15:89:27:91:6e:
c0:23:c3:26:3e:f7:9c:ae:17:b5:52:3b:68:63:8e:
7a:37:ec:95:e7:0d:c3:9b:7c:85:db:12:82:cd:61:
df:39:9f:ca:9f:f6:b5:90:77:8a:21:b0:93:55:c5:
d0:be:10:bb:cd:63:2d:15:63:46:8f:7f:91:55:d7:
cf:c4:d4:1a:d2:99:3f:cb:69:1e:5d:0e:a9:85:2e:
02:ae:ad:a2:a7:f9:d9:95:4f:30:31:bd:62:cd:45:
0c:3c:47:ab:d7:a9:c3:e4:ff:bc:80:df:d8:b2:9f:
da:59:18:a0:c8:b2:70:4d:65:94:8a:36:56:5e:dd:
8b:cf:d5:b5:7e:69:be:44:a3:d6:16:66:4b:25:5e:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:4C:05:A1:92:83:38:B2:6D:EA:A6:77:AD:58:84:0F:58:BD:59
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:63:b5:c4:41:29:ba:4a:ce:b0:cd:a3:7d:94:89:76:19:f8:
5b:a8:27:c4:15:ea:d2:1e:05:65:32:cd:0b:9a:29:5c:ca:df:
cf:59:49:11:f1:e3:a1:c3:b2:10:e8:23:c0:dd:31:fa:3a:84:
be:02:bf:a0:6f:55:33:c4:92:37:0d:73:55:57:82:97:5a:82:
33:23:e0:50:b2:8b:f0:85:78:f8:d9:57:9c:74:be:b7:ab:77:
94:d0:41:fb:7d:5d:a3:5e:6c:f0:8a:f3:b9:e0:73:32:11:3e:
78:1c:1f:91:bf:2d:9a:87:84:41:2b:9f:90:6c:eb:95:16:ea:
35:81:3e:d6:90:67:ee:24:03:0b:bc:49:aa:cd:54:ec:60:50:
1d:84:57:f5:e6:01:43:db:31:38:b8:8b:0e:a8:b7:af:0d:91:
97:47:a6:3a:e3:3d:ed:61:cc:97:bb:ca:7b:ca:f8:f4:1b:5b:
62:2c:0f:0e:4d:78:92:8e:c1:2c:a7:48:5f:12:aa:58:57:4a:
67:f4:aa:18:6c:19:23:c9:29:a5:82:64:98:5c:a7:85:ad:0c:
fa:5b:4f:5d:c3:a0:8e:4b:75:b4:5c:13:f9:ad:17:f0:be:ff:
ed:80:b6:33:a8:b1:13:80:a2:fb:83:be:7d:4f:30:75:99:54:
7a:f7:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client