Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: v7OFNTLeHb4bdavtXPbMg5fcNHmelqJ1gsKPVF6d0gI=
Subject key identifier: B1:04:C8:28:5F:C9:CB:8B:74:3E:E4:F3:8D:CC:2E:B9:CC:00:8F:CB
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 019D3AC141E8A9BAA19DF3DDB935E66C31E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 18:00:36 +0000
Manifest this update: Sun 29 Mar 2026 18:00:36 +0000
Manifest next update: Mon 30 Mar 2026 18:00:36 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: mS1FCkr7ipLubWRANkEB9vG/9Qo+MzCaJyVbL++mVB4=)
2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:41:e8:a9:ba:a1:9d:f3:dd:b9:35:e6:6c:31:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Mar 29 18:00:36 2026 GMT
Not After : Mar 30 18:00:36 2026 GMT
Subject: CN=b104c8285fc9cb8b743ee4f38dcc2eb9cc008fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:c2:c0:ce:1d:26:31:ce:3e:8d:f6:f1:d6:
f9:a6:d4:d4:d1:fe:af:a1:8a:c4:78:28:68:65:d9:
92:91:12:f6:d2:2a:f6:0f:77:7c:17:91:96:ba:97:
a5:a2:8c:41:9c:de:63:6e:8e:74:c0:36:bd:97:a5:
c4:ec:5f:fd:87:02:f8:4d:29:4a:d9:14:d9:04:fc:
27:f7:ae:33:9e:9f:aa:e4:7e:df:73:f4:26:7b:b3:
0a:ec:b9:e2:ce:57:0f:55:a4:82:57:2d:42:c2:a8:
18:6a:33:7a:aa:6f:de:06:2a:ae:0a:e4:61:f0:5c:
02:8a:cc:1b:82:d9:27:2c:c5:0a:96:14:e0:15:11:
80:1f:56:d7:6e:8b:a9:21:3d:94:cd:90:8e:98:f9:
ab:05:b3:2a:64:eb:33:4f:fd:ca:66:52:a5:23:05:
e0:42:9a:2f:37:6d:52:12:22:a2:e9:58:e0:cf:d0:
b1:d6:3f:72:7c:98:4c:eb:e1:93:56:71:13:33:34:
9b:38:47:5a:e1:81:b8:47:bc:8b:87:30:c4:54:9f:
56:cb:86:dc:e3:a2:87:c4:10:82:4b:48:e3:7e:93:
d4:03:c2:8d:1b:15:bf:a1:50:22:c3:52:3e:74:24:
9f:f2:ab:39:c4:05:20:f3:88:fc:70:5b:b1:f8:df:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:C8:28:5F:C9:CB:8B:74:3E:E4:F3:8D:CC:2E:B9:CC:00:8F:CB
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4c:0f:21:78:d4:22:24:be:62:2e:8d:5c:6b:d4:ea:11:8a:
e2:c9:50:78:0c:5e:4c:76:4d:e4:fa:23:d4:a2:4a:33:ba:7d:
6c:97:d1:6f:3f:67:ce:ff:da:dd:1e:3d:ba:1f:d7:77:8d:91:
74:8b:57:5c:07:94:85:8c:2c:69:44:42:34:32:eb:23:5e:ac:
05:8c:b2:ad:d4:38:ff:6b:ee:c5:81:1e:c5:2a:8b:f6:29:71:
9b:43:51:32:15:a4:9c:0c:7e:04:41:74:07:c9:2a:18:7a:5d:
41:8e:7c:73:f8:4d:73:aa:06:30:f4:13:bb:6c:22:af:2f:74:
09:6d:1e:52:90:be:ed:0c:75:52:2f:dc:a5:8a:24:41:00:5d:
89:6a:f8:3e:38:2a:a5:39:a2:04:e6:3c:08:55:46:7d:0b:71:
70:ed:0c:f1:69:45:85:de:af:87:04:98:50:b0:de:df:a3:9c:
8c:9e:ff:90:ec:da:c6:5c:9d:c1:51:fd:c5:0b:93:6b:df:54:
d0:53:6d:17:b0:09:02:57:f1:76:86:1b:ac:5e:e4:74:d5:a7:
1e:4b:6e:bc:b5:55:e0:d0:0d:e7:c9:c7:ab:24:bc:82:59:c2:
91:15:d0:4a:4f:6f:0e:1b:54:41:00:03:e4:07:fa:15:ed:01:
16:aa:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:20 2026 by rpki-client