Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: geNXuIWT96jU7rL6Slvgo5Mw4toQkK/2ZoVT0dnm66Q=
Subject key identifier: 72:D0:2C:9F:F4:FE:49:90:69:EB:80:81:FD:72:39:F4:F5:58:59:7D
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 01A17A04834E417D2C91BA5F33216D815CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 05C9
Signing time: Mon 26 Oct 2026 21:01:18 +0000
Manifest this update: Mon 26 Oct 2026 21:01:18 +0000
Manifest next update: Tue 27 Oct 2026 21:01:18 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: UT/k8xBE6ZZHetPEckmfv23pfNssmJDSfNfovlxCqB8=)
2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:83:4e:41:7d:2c:91:ba:5f:33:21:6d:81:5c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Oct 26 21:01:18 2026 GMT
Not After : Oct 27 21:01:18 2026 GMT
Subject: CN=72d02c9ff4fe499069eb8081fd7239f4f558597d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:36:68:ba:fb:ed:06:c8:41:43:ee:b8:22:
2a:cb:6a:6e:71:1f:11:95:7b:ad:7f:cf:83:2c:00:
93:7d:c4:71:84:63:a9:dd:d9:de:ff:fe:5d:25:45:
13:9f:f0:2a:07:10:9e:51:9b:52:75:58:6c:18:90:
d0:02:74:b0:81:15:99:58:07:31:dc:4a:a7:e3:b2:
df:8f:f1:92:e7:55:08:f0:7f:85:41:c1:62:58:08:
0e:11:74:d1:d5:f7:af:08:53:1a:b4:71:af:8d:12:
ca:14:ef:59:ba:4a:0e:7b:f5:7f:fc:4b:79:9e:38:
0b:18:5e:6f:54:61:77:b8:cf:ec:31:43:22:26:62:
ad:7a:19:35:f7:a4:f4:f0:9b:54:ac:db:ba:3d:07:
68:07:20:46:f9:24:ac:d6:f1:88:5f:a0:1b:70:cf:
c0:3d:88:2b:4c:ab:d6:ec:7b:ec:17:4c:41:70:ba:
89:e1:09:fd:64:68:c6:ca:e9:a6:3e:99:13:bc:46:
dc:b2:80:68:1c:f8:87:43:a7:eb:11:81:6b:9d:b0:
7c:03:4c:1e:f7:73:17:0d:82:7a:59:e6:9c:25:64:
46:ad:a5:cd:8d:5c:9b:9a:e7:41:47:d2:ab:c0:48:
97:5b:fc:99:bc:ef:3f:fd:74:ed:e4:6e:bf:e5:45:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D0:2C:9F:F4:FE:49:90:69:EB:80:81:FD:72:39:F4:F5:58:59:7D
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3b:f5:ca:0f:b5:e0:e8:0a:46:42:77:a1:79:31:47:1a:00:
07:80:ea:ed:f1:3d:37:41:0c:7b:05:92:6a:c3:2a:0b:86:b5:
66:92:3d:e6:33:0b:08:3e:7e:db:e8:ce:c2:21:f6:eb:3b:ac:
71:87:1e:79:de:93:12:05:34:30:27:13:d4:39:77:1f:dc:09:
60:5a:34:ed:8c:d0:e5:88:17:b1:1e:dd:28:5e:be:9b:8b:65:
c7:99:32:a9:8b:bd:8a:5a:09:00:28:63:d6:9c:c0:1b:a6:ad:
19:c2:fa:bf:5e:ff:f4:70:49:3d:c4:f4:65:a2:67:8c:25:68:
a3:99:f1:74:62:bc:7b:88:25:d5:c5:76:36:20:5b:0d:95:76:
83:df:c1:d7:3a:c4:5e:c8:a3:07:f0:be:bc:83:72:53:67:e6:
a0:b5:fe:ce:77:3a:5a:f0:24:fd:6b:19:75:03:90:b7:d9:77:
db:3e:09:a9:db:78:f2:7a:17:46:47:73:ed:14:09:ce:fe:33:
09:75:61:81:50:a3:41:e9:b2:b6:67:58:d8:16:75:6a:55:4a:
fc:1c:e5:e1:a5:95:9c:e7:bd:47:9a:88:67:c5:7b:8e:b9:e2:
01:e5:9c:b6:d1:42:64:9f:12:5f:6c:41:8a:8c:c5:92:3e:4b:
3d:6c:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:09:47 2026 by rpki-client