Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: 4MwNdYEep0MuJDO9w0aH53LRrZQoKrqMrgbA9NvF/6I=
Subject key identifier: 05:AA:80:B9:D5:2F:DE:8F:9D:18:CF:6A:BD:D2:97:13:46:A3:16:17
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019CAD22EADCCF56A5F038D97C6770A7CA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 06:01:12 +0000
Manifest this update: Mon 02 Mar 2026 06:01:12 +0000
Manifest next update: Tue 03 Mar 2026 06:01:12 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: P7HE2rT/XI2tlWpsuUgZ9xfzR/qeyrWjoLy76dVn7iE=)
2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ea:dc:cf:56:a5:f0:38:d9:7c:67:70:a7:ca:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Mar 2 06:01:12 2026 GMT
Not After : Mar 3 06:01:12 2026 GMT
Subject: CN=05aa80b9d52fde8f9d18cf6abdd2971346a31617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:83:43:30:50:be:79:ff:1e:4c:a0:8e:df:
d3:83:64:9d:7c:a4:c2:c7:fd:3e:a5:25:8e:70:d6:
16:43:c0:63:b2:fb:97:c0:5a:c2:fa:70:d9:7e:f5:
8c:c1:45:b6:0a:31:7b:2f:6e:23:63:8d:c2:e0:f7:
b2:71:42:0e:24:bf:01:c3:12:cb:24:4e:5a:93:27:
70:01:ef:1f:a2:81:99:56:b3:99:af:87:5f:34:32:
cb:1f:12:d8:ba:a6:3b:3d:f2:04:ae:a3:70:8b:2f:
3f:d1:63:5d:4c:dd:f3:8c:09:7b:e7:22:9a:bc:7b:
c7:f6:b7:e4:9d:a9:0a:93:46:b3:2d:45:a9:31:8f:
cb:a9:cc:1e:9f:c8:c3:54:7d:5d:3d:da:60:08:ae:
b4:46:95:21:4b:36:3e:b0:c2:68:c7:7d:ca:54:65:
bd:fa:3e:1d:fb:83:a2:10:9c:9f:9a:58:36:7e:c2:
f8:5d:a8:e6:8d:ac:08:81:2e:11:42:2a:f7:f6:2c:
a3:fa:96:28:c1:13:56:cf:b5:08:3e:4d:c6:aa:f2:
dd:3d:62:7e:d9:14:da:34:13:57:ee:af:f5:82:4e:
e3:6e:9b:4b:12:1c:10:a7:92:9e:7f:09:38:0b:2f:
bb:ab:01:64:b4:5d:b3:64:18:3d:79:a9:22:ef:4c:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:80:B9:D5:2F:DE:8F:9D:18:CF:6A:BD:D2:97:13:46:A3:16:17
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:21:a3:fe:f2:5a:f0:b8:87:95:9a:f1:fa:cd:c8:e1:e4:42:
0f:a2:c8:8c:42:58:0a:05:aa:60:37:df:f7:ec:3b:21:a4:1d:
7c:8b:93:72:55:96:86:3e:92:3f:54:9e:17:03:39:20:63:51:
e3:5f:7e:dc:48:53:5c:34:43:be:01:57:4d:6f:75:aa:67:df:
15:2c:81:31:0a:0d:f4:8f:b3:74:30:e2:0c:9d:c3:57:8a:1c:
c2:4b:97:ac:fd:7c:8f:db:ea:00:b2:69:0a:33:5f:40:86:47:
ac:3c:dd:da:a7:d5:2c:84:fa:02:68:f0:61:fc:c9:7e:91:71:
a0:f5:04:f5:71:61:50:3e:f7:a2:f8:eb:98:eb:35:af:b6:0d:
f1:1c:14:e9:c2:1a:b8:25:2f:3d:7a:17:0a:26:bf:5f:e6:38:
2f:e9:20:f0:22:79:a9:34:35:d2:24:0e:f2:61:d3:51:d8:df:
34:2c:45:e2:0c:9f:3b:29:ef:3d:c3:2e:f5:51:ae:90:b4:d3:
27:8b:0b:da:44:55:6a:73:13:dc:41:9b:f8:26:31:19:5c:e3:
8e:6b:77:85:a4:a6:7d:bf:ca:0a:a3:6e:e4:5d:91:08:0a:74:
e2:c3:75:b3:29:64:3f:cd:64:d3:96:1a:ef:6c:8b:70:f0:dd:
74:ab:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:55 2026 by rpki-client