Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: Ips8SL9Qgd50yuSQ/hf8El5lVCoRFnXafEl1D3/+Dfs=
Subject key identifier: 80:BD:B7:C3:9F:A3:01:18:37:C7:65:78:B5:57:71:38:10:BA:42:C0
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 019CAD90C3BAC6CB568D92AC990B7021AB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 15C0
Signing time: Mon 02 Mar 2026 08:01:11 +0000
Manifest this update: Mon 02 Mar 2026 08:01:11 +0000
Manifest next update: Tue 03 Mar 2026 08:01:11 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: x1u2hH0VLIsLKz9WGRhIyF2xudmRzGVxqUf4+tuBuos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:c3:ba:c6:cb:56:8d:92:ac:99:0b:70:21:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Mar 2 08:01:11 2026 GMT
Not After : Mar 3 08:01:11 2026 GMT
Subject: CN=80bdb7c39fa3011837c76578b557713810ba42c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:be:c0:36:7f:46:71:c5:69:32:e7:95:f2:
77:97:a0:99:dd:51:5d:ee:27:a0:f4:53:d7:ca:5c:
b0:3c:39:86:c5:56:7e:7b:b0:27:51:59:bd:07:7e:
e0:37:0c:42:e6:62:85:cd:23:b2:cc:f1:0f:26:e5:
f0:4d:15:5c:34:3f:e6:5b:c1:3b:11:cb:64:bd:f1:
e9:84:c3:b9:8d:b5:42:8a:c1:bd:96:56:80:70:a9:
cd:ce:b0:64:b6:94:89:b7:e6:7b:aa:8e:8e:ce:b4:
6f:55:c5:39:8b:69:bb:4e:fa:36:9f:2d:5c:70:2b:
37:d3:e7:37:35:fb:bf:60:47:c1:c1:38:11:55:af:
e5:74:ab:38:e4:7e:0f:d7:7c:03:79:7b:50:cc:e0:
e1:d0:c1:23:49:d1:42:ce:05:7f:f6:c5:bc:00:5f:
94:28:ef:9e:7a:90:1f:7b:a2:b3:9b:67:fe:2c:67:
4c:e3:0e:bb:82:6f:aa:ee:df:b8:a1:eb:29:91:35:
3d:10:57:f5:f9:d3:35:e9:8c:3f:9a:a8:8b:74:e4:
05:07:65:e8:52:46:25:dd:fb:ab:9c:2e:6a:73:4b:
3c:87:51:3d:61:cb:ec:68:aa:90:f8:ba:fa:28:62:
a3:af:1b:b6:8b:ca:24:c3:91:df:2b:ac:2c:05:23:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:B7:C3:9F:A3:01:18:37:C7:65:78:B5:57:71:38:10:BA:42:C0
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cd:58:4d:40:f4:af:0d:d2:e5:51:c9:40:d3:b2:32:11:9b:
be:18:f8:96:b8:55:2d:09:04:06:6d:22:25:7c:67:33:07:a3:
3e:58:23:6c:f0:e5:b1:fb:a7:13:c7:7d:0f:a6:cd:3c:ab:9f:
a1:1e:42:ce:17:48:72:e4:ab:22:72:8f:f8:24:e9:c3:27:fa:
c4:f7:0c:5e:76:1d:76:38:4a:7d:4b:e7:a5:a3:91:e4:50:ab:
6e:6a:f5:86:7d:3f:c1:cd:33:18:40:b4:fd:42:89:18:bf:14:
85:9e:4f:8a:e9:a9:0e:7d:cb:1c:9d:dc:56:8c:a8:d8:9e:34:
47:61:cb:c0:d9:c1:5c:3d:7e:36:11:41:ff:ab:ae:e3:ee:0c:
1b:e4:7b:9e:8b:5d:fa:8c:d6:a8:77:68:54:d3:a8:91:0e:b9:
d8:fd:06:b3:5d:7d:67:62:5f:22:c2:7c:4d:36:e2:f4:ad:c1:
29:c9:7d:70:e2:04:a2:89:f2:57:5a:a9:45:bd:86:08:a2:80:
8f:90:bc:66:64:84:47:d7:30:4e:de:7d:4e:de:09:40:87:c2:
c3:e9:41:2c:98:2c:09:e9:49:b3:7c:8d:2c:77:4e:19:2a:9d:
b5:cc:8a:69:05:72:24:fb:3b:f5:cb:21:5a:d8:a3:8c:7d:6a:
47:39:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:32 2026 by rpki-client