Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: gBaL6O4vikv0MFWd/5+/6nZCxXv5xMoxgtwapmRyHT4=
Subject key identifier: BD:0E:AD:98:C8:DA:A2:D2:1F:81:5A:FE:5D:DF:77:0A:9E:C4:45:CF
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 019D9D07C9516F490887DD2F65C1F726A8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 163C
Signing time: Fri 17 Apr 2026 20:00:26 +0000
Manifest this update: Fri 17 Apr 2026 20:00:26 +0000
Manifest next update: Sat 18 Apr 2026 20:00:26 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: MoOIgTbnsCzf9pdjR++ABXhv2mq7yGbUjucFb/o86L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:c9:51:6f:49:08:87:dd:2f:65:c1:f7:26:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Apr 17 20:00:26 2026 GMT
Not After : Apr 18 20:00:26 2026 GMT
Subject: CN=bd0ead98c8daa2d21f815afe5ddf770a9ec445cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:08:44:d5:45:19:68:58:67:ec:5e:18:02:
46:b5:c4:69:4d:8a:8a:f9:b6:a5:36:07:b6:ae:92:
20:19:e5:b3:86:65:5e:38:54:a9:2d:15:d8:21:7e:
40:fd:ec:69:bf:ff:c6:8a:55:42:f1:8a:7b:7d:a0:
83:f3:cb:a8:01:ab:26:bf:78:2e:77:8d:94:d4:a7:
5d:4e:56:5b:79:15:24:d2:42:29:5e:f6:1e:12:8c:
88:19:82:a5:db:65:14:5a:50:05:b1:f4:a5:8d:6a:
57:86:57:a9:2b:33:34:ab:41:3e:02:f3:5b:f6:f0:
ec:8d:56:8c:c9:bc:be:0c:17:a2:27:0e:d8:be:ba:
1e:96:64:8c:0c:a7:37:00:1c:72:5e:03:03:1d:b3:
10:75:60:2a:92:f2:90:0d:17:a2:93:34:79:2e:ac:
46:d7:8e:27:8a:26:74:14:03:b7:ea:96:4b:9d:af:
26:7e:01:82:b1:92:b1:ad:13:97:72:69:b2:f8:c5:
b3:fe:a0:89:de:1d:e3:07:12:3b:a7:90:28:43:c4:
5e:13:6f:bb:45:c6:bd:61:67:ba:6e:01:9c:f9:f9:
29:16:ed:b6:4e:26:bc:4e:82:0d:15:2d:c8:af:d6:
f1:b5:ff:ab:90:7a:c1:df:73:59:37:7c:00:17:c7:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:AD:98:C8:DA:A2:D2:1F:81:5A:FE:5D:DF:77:0A:9E:C4:45:CF
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0c:ed:ff:18:a5:ae:91:3d:58:e3:7c:b4:11:fa:c5:54:49:
64:54:32:d7:9d:e3:5e:02:b2:94:df:f6:cb:08:83:53:f3:f3:
21:5d:c4:b7:b3:23:5c:b2:e7:f2:80:25:7a:7e:8b:c5:91:03:
99:01:f9:6a:7e:7a:15:e9:86:90:b6:c4:b3:f1:ec:48:45:75:
a9:86:7f:1f:c7:39:58:a4:8a:0d:bd:d2:fd:1a:d0:ec:bf:d6:
85:e9:10:89:ec:dd:62:37:c0:ba:c1:81:f4:e3:c1:a7:5d:f8:
e6:93:4c:a3:2c:bc:e8:ad:ed:5a:f5:46:29:2b:48:5a:25:c3:
f3:70:0e:56:96:60:b2:4a:d1:61:7d:18:38:6d:50:e2:7c:87:
92:64:67:3b:de:c2:9e:00:84:ce:4c:d2:47:9e:1e:0f:90:28:
a0:7c:ff:63:11:50:16:1a:a9:c0:fe:8f:91:23:c3:45:bc:c2:
ee:59:a8:d1:69:cc:28:4d:90:e6:29:1f:b3:be:49:32:0d:3d:
50:91:3d:d1:fa:7b:fd:2b:ec:dc:4b:10:b1:c3:05:2c:41:86:
f6:f2:da:b6:28:2a:bd:25:b5:20:11:10:70:0d:0b:42:0a:65:
4d:7d:30:3c:66:15:e1:34:d3:8a:df:49:3d:db:e8:7a:42:31:
cc:73:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:57 2026 by rpki-client