Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: 9BSOsaL8rO4MAEMn9E9d1mtjHzSIIxZj3IHLZg+MpNY=
Subject key identifier: AD:A6:F0:DF:88:45:D3:5E:3E:7E:96:09:9B:CF:3A:10:61:8A:6E:FD
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 019CABD92D0BB94C0CE3CC392B989E504758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: WYD+ZRqfxwF082xKbYKFWxfnvcCFj946EJ7r0u53zUQ=)
2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2d:0b:b9:4c:0c:e3:cc:39:2b:98:9e:50:47:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=ada6f0df8845d35e3e7e96099bcf3a10618a6efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:c7:22:8a:81:2e:02:16:ab:24:90:58:82:
17:da:e1:32:19:b5:dc:57:38:95:2f:ed:6d:e0:70:
c7:b8:32:78:9b:58:00:ae:a4:60:7c:ae:a2:08:64:
dd:7b:1c:4a:05:4b:f7:60:a3:e3:b8:bb:b3:69:e2:
24:77:ab:82:d5:fc:4d:48:f2:11:b8:f4:13:de:31:
96:fe:d5:bd:f5:d3:d6:8e:d8:4c:a7:bf:cd:11:22:
75:e6:49:04:9b:53:95:92:e4:c8:9c:9f:7b:63:1f:
09:34:7e:e3:f2:f3:bb:81:0e:e2:59:c8:cc:56:2d:
90:40:33:d9:a3:3c:a9:2d:01:3e:bc:81:04:57:db:
f9:bc:e1:85:07:ad:e1:17:aa:1b:87:78:fc:2c:63:
2c:e2:49:a2:69:71:67:b3:17:58:6a:00:53:22:ff:
1e:2f:b9:c9:83:c6:1e:45:fe:aa:10:05:bf:16:f6:
b1:b2:38:32:54:80:fe:5c:3f:65:c6:db:61:f6:86:
a4:1a:06:aa:7d:c6:ca:2e:e0:3d:85:0e:b8:fa:80:
df:08:3d:9b:17:51:65:1b:8f:a9:fd:13:6d:3c:a4:
5f:0b:a0:9f:38:a4:50:ba:4f:82:87:fe:45:7b:62:
33:17:7a:cd:f5:0e:f2:57:39:62:5c:ea:e7:53:03:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A6:F0:DF:88:45:D3:5E:3E:7E:96:09:9B:CF:3A:10:61:8A:6E:FD
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:86:da:2a:46:a4:10:c0:65:0b:57:55:31:ec:4a:60:fb:56:
66:3a:c9:12:e8:d2:e5:7c:65:37:88:ca:82:a7:62:c2:77:dd:
77:b7:d7:69:97:15:b1:24:44:e4:47:6f:0e:71:f5:e7:f4:af:
3b:95:ba:7a:f7:5b:8d:c8:9e:07:3d:0c:69:1b:d4:dc:b5:7a:
94:e6:c8:5a:00:68:56:a7:8c:ef:b2:7c:9f:86:eb:9b:f5:ad:
9c:b5:98:10:25:8a:ac:c3:35:4b:ee:73:8b:ac:78:8a:c8:88:
df:0d:cd:03:17:28:0a:5e:07:0c:19:22:4a:ab:c2:f8:10:59:
74:2b:25:84:51:06:cd:09:60:9d:35:4a:ae:1c:62:55:d1:e5:
b8:9b:db:fb:5e:c8:a6:c8:14:3a:33:59:c3:2a:6e:80:59:28:
62:73:b4:3d:b8:6c:ab:f3:a9:04:69:54:f0:e4:62:4f:f1:e6:
a9:c4:e4:2b:20:52:af:41:61:6b:39:4c:46:d2:52:09:91:88:
53:fe:be:57:e1:56:48:6a:a3:38:0c:17:a5:23:db:7f:0a:b3:
e3:ee:1b:fd:5c:fb:a4:24:46:ae:4d:13:e0:76:a5:2b:15:f9:
7d:e1:89:57:b0:d8:01:3f:d5:cd:73:e4:50:df:9b:9a:fb:e0:
8c:35:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:21 2026 by rpki-client