Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier: F81oRvzi3ZdaZVnwhmdlJj/7zj4oWkKUZZ2FsacpyRA=
Subject key identifier: 0D:82:77:BE:BC:A2:C6:8B:6C:10:89:E6:24:6F:37:FD:26:46:A6:BF
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial: 019D98F45A20AB8F543AAFC9B117D38C8800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number: 10D7
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: luqw9+uVcQCgnvARXegYYixvtXMqqAfSEs8akA2qsww=)
2: mK9jBg2iFuywF6JUAww3mxKLxCU.roa (hash: lk8hbAdLVuILHrw42c6HMnMUPa/ZOyLXrol4InQSdq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:5a:20:ab:8f:54:3a:af:c9:b1:17:d3:8c:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=0d8277bebca2c68b6c1089e6246f37fd2646a6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:ae:72:b9:db:1b:04:16:a3:bf:a4:76:1e:
1d:57:b0:85:ed:2a:1b:89:9f:d0:d2:1f:85:16:e9:
ee:31:30:e8:e8:25:1f:40:02:40:17:03:df:99:4e:
92:7f:69:91:ac:32:39:5f:e5:b2:79:4e:f2:9c:62:
2f:2a:9f:80:42:d4:9e:66:cc:b2:fc:7b:b6:20:cc:
97:a2:3c:43:05:25:b4:49:42:56:dc:bf:35:94:a6:
e9:5e:c5:0e:ec:4f:bb:31:42:72:1f:1d:d7:63:97:
d0:d3:fd:c6:ce:d1:bd:28:8e:99:3d:02:50:3f:1e:
c8:90:04:f7:62:c6:08:51:ac:de:fe:20:3f:49:fc:
6f:a7:2c:ba:44:6a:35:8d:1d:fc:5f:d1:15:dd:69:
41:37:e2:5e:be:5c:29:38:a2:0a:21:bd:88:05:4a:
32:96:0a:2f:88:07:73:b9:31:f3:2f:5e:4c:57:1e:
65:18:57:d7:50:c2:ff:9b:8e:9b:b5:48:a3:13:c9:
03:31:73:48:c7:80:82:7f:e1:43:fa:98:0b:e5:c4:
85:ef:83:14:48:32:c9:2f:42:b9:a1:fc:5f:06:21:
84:9d:6c:0e:e9:7e:00:7a:6c:84:19:8c:3c:84:eb:
8a:12:02:04:bb:cb:a8:33:29:f0:e0:98:f0:01:5c:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:77:BE:BC:A2:C6:8B:6C:10:89:E6:24:6F:37:FD:26:46:A6:BF
X509v3 Authority Key Identifier:
keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:30:41:15:ef:c4:d9:6a:4d:98:35:b4:07:32:64:be:6a:1b:
fc:fc:9b:21:07:e0:4e:63:8c:b4:af:c5:75:6b:df:41:6e:d1:
b6:ad:ec:7e:b5:bf:13:a8:f5:6d:a4:7e:88:54:3d:b6:bd:60:
80:8d:9a:6d:1e:17:72:e8:7f:48:66:cf:98:ba:2d:da:92:93:
c1:d9:42:9c:d3:c3:ea:8d:91:2f:eb:a6:7e:61:b9:3c:ea:b5:
ec:39:75:12:e8:6d:a9:3e:3f:a7:08:47:00:3e:57:2c:c7:98:
6e:73:d8:3d:98:37:4c:f4:a9:47:64:30:ea:74:4d:9b:a6:d8:
4a:54:bb:be:50:1a:59:c2:28:6c:49:fe:29:d7:18:01:c2:81:
b8:c7:9b:5c:73:be:01:f5:42:1f:44:19:e9:b8:17:59:13:08:
8c:cc:28:0a:39:16:5c:17:ad:66:7d:79:66:08:d5:c9:45:77:
f9:01:b6:e5:d5:df:14:73:6b:37:b2:d4:a1:64:ab:d2:d3:d6:
ce:79:a6:33:36:71:9b:47:b5:a3:20:ac:9e:2c:fb:82:ec:0f:
f6:04:53:15:1f:11:14:eb:43:4b:03:0b:38:74:31:bd:05:2a:
2d:6b:d6:e8:ce:cd:6c:ad:e7:cf:fa:c3:4e:8f:be:81:2d:ac:
a0:3b:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:52 2026 by rpki-client