Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: 7MnrZH+Ud/OAM2hhNL3/IcEPj/iZ5IJfv+3mnGiggUI=
Subject key identifier: D9:39:69:EF:04:50:26:AA:D4:82:82:11:29:CF:73:0B:85:C9:E8:CB
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 019CAD5929B5BA1F43D2828ADCEE611D64CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:00:27 +0000
Manifest this update: Mon 02 Mar 2026 07:00:27 +0000
Manifest next update: Tue 03 Mar 2026 07:00:27 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: NgpbevrYDA4Do8f7LuRYvpemt98cSHH0ejvH2tWUlZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:29:b5:ba:1f:43:d2:82:8a:dc:ee:61:1d:64:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Mar 2 07:00:27 2026 GMT
Not After : Mar 3 07:00:27 2026 GMT
Subject: CN=d93969ef045026aad482821129cf730b85c9e8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:b1:65:76:db:d2:bc:30:e4:55:0e:c4:65:
94:c0:1a:7a:3d:97:45:97:14:ab:6d:80:c9:9a:21:
10:ed:18:3a:39:96:91:59:3f:8d:57:9e:9f:13:87:
4b:7f:7d:de:a1:f4:45:41:0c:ef:f8:26:1b:f7:62:
e1:17:d2:f5:0a:0c:c9:c0:09:70:5f:99:0c:c3:73:
b0:4a:a5:57:b0:84:c9:1d:89:5b:ad:52:dd:11:f3:
0c:37:68:99:7c:9d:5d:49:0a:74:96:ad:6d:38:44:
38:4b:ea:54:53:68:13:21:21:ac:20:50:d3:c3:c4:
5d:c4:93:04:6f:3d:45:6f:18:50:29:f1:73:51:da:
da:5f:54:09:67:4c:17:c7:34:50:da:3d:8c:6e:18:
0a:69:2d:88:7b:d2:68:0c:2b:a3:c4:e6:af:13:de:
48:6b:59:a1:e2:b4:9e:77:44:34:f6:ab:a5:02:57:
90:56:35:f5:96:b6:c7:b9:be:72:0e:cb:c2:db:34:
67:5a:0b:ec:14:39:77:76:8d:f3:98:13:7c:2a:3c:
e5:10:d0:e7:81:3e:39:ad:23:09:63:fc:0a:25:e8:
32:44:d2:45:e8:c9:39:4d:08:19:fb:7a:a9:c3:b1:
78:ab:50:3b:4e:b5:dc:08:e6:82:3f:73:fe:0a:0e:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:69:EF:04:50:26:AA:D4:82:82:11:29:CF:73:0B:85:C9:E8:CB
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:47:9b:dc:c0:60:57:7e:9c:2f:31:ac:4d:11:0a:4a:a5:23:
e1:1e:a6:cb:1e:31:54:cd:a3:fa:da:6f:8a:db:7b:47:ba:52:
2e:14:8b:c7:6f:9e:42:33:7f:91:67:17:f0:ca:28:6b:07:52:
2f:3c:b6:da:b7:07:4d:55:21:4e:d3:5c:29:a4:71:e8:0a:ff:
2c:c4:54:66:a6:87:7c:32:81:44:16:4d:ed:dd:d6:5b:75:d0:
86:76:37:b1:e4:9c:8d:a5:a9:95:db:1c:92:16:53:45:ab:a1:
57:0a:fe:c6:cb:19:ae:4a:cf:56:cf:c7:bd:57:e3:ef:92:41:
e1:a3:ef:64:f9:82:69:c9:2b:04:d4:d2:80:6b:d3:33:36:89:
7d:11:a3:d3:b8:13:1b:67:3b:8c:97:10:3c:d7:fc:28:02:5a:
2a:18:cc:e0:7c:cc:36:5d:71:33:d1:36:3f:9f:8a:06:c9:3b:
48:b5:4b:3c:48:ab:e9:99:31:75:13:e1:31:a1:0c:18:8e:f9:
b9:4c:72:4e:e9:04:e6:e4:e7:60:eb:1b:92:30:89:b2:93:31:
17:63:ba:3b:b5:29:c2:6b:7e:23:84:bf:bf:9d:6b:f4:74:35:
e0:2e:2e:aa:2e:5c:33:18:09:58:92:ad:4e:88:5d:c3:37:c8:
0a:3e:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:37 2026 by rpki-client