Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: nh1LE7dJHCrB1JZtYVYOtqsSXsG4wt4QjzJUCCscyhk=
Subject key identifier: 22:77:6D:40:28:D8:DB:71:C6:F5:DF:6E:AF:7D:38:05:71:36:BE:2F
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 019D99625F0B5F7ABD6671EFBAF989C486AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: darXe+LBqw0wsuzRupTZ8adtkmELGKhRtOIrqTPbaXg=)
2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5f:0b:5f:7a:bd:66:71:ef:ba:f9:89:c4:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=22776d4028d8db71c6f5df6eaf7d38057136be2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:59:d7:ab:56:dc:b2:f6:a3:c9:58:6f:73:
fb:2b:79:fb:4e:73:f7:04:17:13:4d:d2:ca:3b:2e:
1f:ac:82:03:89:a6:85:d1:bb:b2:5d:f7:31:db:f2:
81:db:c0:2b:7d:ca:2c:0d:61:d6:e8:c4:b3:eb:36:
48:ec:75:8f:9c:7c:0c:8a:8b:5f:9c:b8:37:12:84:
c2:e4:70:19:15:8d:b7:80:80:a8:c6:a9:33:29:fa:
b0:be:8a:53:57:bd:2a:09:16:d2:35:d7:6d:da:93:
e5:de:c4:d5:6f:48:72:c5:2e:ee:d4:5a:2e:5d:fa:
d5:cb:e4:e2:25:24:16:ec:99:af:d3:fb:b4:b2:aa:
84:72:28:23:9d:1f:92:91:9b:b3:ed:22:a2:8e:0a:
a3:95:27:d3:5d:69:43:79:1d:d5:0c:97:dd:ae:1d:
d1:c7:7e:19:a8:3d:f0:e4:9f:6a:99:98:9e:d2:8d:
43:ec:6d:a2:3e:39:de:64:e9:a2:7e:98:f3:54:6c:
ce:10:e0:cf:71:fc:33:45:7e:1d:09:ce:33:3e:30:
ba:4f:b0:5b:b0:22:d9:d2:28:33:01:42:e2:91:bc:
51:28:45:cb:01:6b:39:ad:74:70:c2:b6:67:29:2f:
34:df:14:8b:e1:b4:44:84:98:87:6a:b5:9b:00:3a:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:6D:40:28:D8:DB:71:C6:F5:DF:6E:AF:7D:38:05:71:36:BE:2F
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bb:44:84:70:20:fd:d5:0d:4f:ed:67:59:8f:28:c4:22:64:
a0:d9:f4:79:60:87:15:fd:7f:03:e3:77:12:0a:b8:c4:d4:85:
61:5e:76:00:ef:2d:16:2c:9b:ba:bc:1c:46:7c:ba:a4:56:26:
0b:6c:e3:42:bf:62:81:41:13:d7:d4:76:a9:6f:c7:1d:9e:9b:
54:35:99:0b:e8:17:cc:2c:e4:e0:3f:cc:c4:4c:29:b9:15:a3:
c6:fa:a8:fe:d6:f9:2a:9b:5a:43:bc:eb:32:a4:56:cd:79:79:
f8:8a:80:40:47:79:9f:80:43:2a:42:80:f2:2e:9d:45:26:2d:
50:26:93:da:19:ff:59:a4:20:fe:a0:ce:7f:50:ad:61:25:26:
3d:46:08:8e:fb:f4:e8:23:53:f0:6c:fb:ad:21:51:4c:67:64:
3c:bf:53:d2:f2:2f:8f:81:c3:68:0d:fc:fa:d0:9d:7a:35:9d:
16:21:12:6a:59:24:f7:f3:e5:29:60:71:75:5e:9e:94:91:25:
29:15:c2:e3:06:62:3e:86:a8:6d:70:10:ac:98:bb:d2:b2:36:
52:dc:53:33:a6:42:c2:68:89:12:4f:90:90:cc:b6:c7:f4:74:
3b:7a:f7:36:5f:2d:2e:32:f1:43:43:90:9f:26:4c:d1:9b:73:
83:32:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:54 2026 by rpki-client