Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: 5tijW0mptj/RZ4HGOBCC7+UAlhlUBAZRoT2jqDFN4Pg=
Subject key identifier: 7D:99:95:2B:CF:68:FF:76:68:02:B5:5A:D9:98:1D:E1:7E:06:0F:22
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 019CE3DA7FE81CB33BF0AAD588F639618030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 0369
Signing time: Thu 12 Mar 2026 21:01:13 +0000
Manifest this update: Thu 12 Mar 2026 21:01:13 +0000
Manifest next update: Fri 13 Mar 2026 21:01:13 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: PlmgqpB5iH6N6RHSHAl9dydnV/moIIem4SlZUbqYrmo=)
2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:7f:e8:1c:b3:3b:f0:aa:d5:88:f6:39:61:80:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Mar 12 21:01:13 2026 GMT
Not After : Mar 13 21:01:13 2026 GMT
Subject: CN=7d99952bcf68ff766802b55ad9981de17e060f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:8d:f5:12:a0:87:22:06:02:f3:a2:62:83:
34:ba:eb:8e:63:2e:dd:6c:9d:be:7a:7e:c8:b6:0e:
0e:1d:5c:8a:03:63:a7:7b:ea:83:35:58:e1:36:28:
9b:19:5c:b6:d2:98:ba:89:9d:d7:59:32:9d:e6:95:
64:a4:6c:4b:0d:aa:86:0e:a7:62:ac:93:76:aa:2a:
83:36:18:fd:96:ac:88:5b:8b:a9:94:af:1c:49:7b:
a4:b5:1d:56:87:5e:fc:58:8e:b3:63:5c:08:fa:d0:
d6:7a:30:97:8b:1e:5d:ac:cc:a8:fb:4e:f6:46:89:
c0:e3:b7:18:c2:1d:63:21:8a:36:fd:aa:87:49:3e:
29:b8:fd:23:42:72:ea:4b:80:d3:63:80:5a:a4:01:
14:72:d1:73:91:80:70:9e:36:b9:b5:5f:93:c1:8f:
5b:98:86:a3:71:29:41:ce:a5:91:e5:c6:63:90:76:
7b:cf:a7:35:7c:8d:75:01:b1:f7:60:63:ca:9c:46:
79:d5:ff:c1:d4:c3:93:fd:c9:c1:88:1c:aa:05:2a:
09:8c:c4:34:d7:65:82:79:ab:bf:d7:e5:80:97:dc:
61:c2:94:9d:d8:96:88:91:0e:20:7c:12:ab:ca:3b:
c7:a2:34:56:99:19:a8:17:56:23:c9:74:46:33:70:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:99:95:2B:CF:68:FF:76:68:02:B5:5A:D9:98:1D:E1:7E:06:0F:22
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0c:53:9f:53:d7:d5:28:bc:0f:00:a0:51:07:b9:2a:96:3e:
cb:41:ad:55:d5:4b:98:03:b6:7f:dd:a2:7d:6c:54:c9:83:fa:
b9:30:34:58:b7:9c:d6:cc:68:72:94:e6:5b:34:c3:50:e5:98:
81:f1:84:00:bf:d9:31:52:85:43:d1:69:4c:dd:fc:53:91:fc:
f5:bc:11:d4:39:ca:4c:5a:2d:19:69:66:d0:39:8d:1a:31:76:
c7:32:72:92:7b:a4:07:26:06:13:d8:12:78:29:bd:9e:f3:92:
d5:f0:62:70:f4:c5:97:5d:12:5a:c0:59:93:40:7f:8a:38:79:
b8:33:25:4e:0e:fc:10:95:fb:45:1a:03:93:0e:f3:8e:bb:ed:
8a:ba:a3:c8:46:7b:3b:71:7f:0d:77:f4:a4:56:25:b6:01:94:
87:9c:22:71:53:44:a6:ec:b4:7d:7c:3e:a8:57:2d:94:03:a4:
50:5a:c5:4d:32:e7:7f:79:28:ca:3e:3d:2c:9b:86:ff:b8:ef:
2d:af:54:de:53:1f:9e:15:63:e7:c5:33:f1:63:f0:88:fa:27:
c3:4a:af:03:35:d3:a1:e2:43:ff:ff:ea:ed:db:dc:cd:6f:c4:
75:e1:58:e2:5c:f4:bc:ea:8e:10:be:2f:0b:5a:71:e4:c3:ae:
7f:3c:47:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:41:48 2026 by rpki-client