Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: BAISuXoi926fI0i4drABIUwHd3/g1w40ZHkxnEnqoyY=
Subject key identifier: 27:B4:6A:29:6E:29:77:15:B4:1C:EA:E7:98:E9:96:0A:5E:3D:76:5E
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 019DA4F8CF66B127296CAE7E2A4431212D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 03CD
Signing time: Sun 19 Apr 2026 09:01:02 +0000
Manifest this update: Sun 19 Apr 2026 09:01:02 +0000
Manifest next update: Mon 20 Apr 2026 09:01:02 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: XR8TRAQoUg4h3w7VjRGuu6PyfX1AmXSElDwlR0rqx7M=)
2: P92JZHPtYY3-_599bc_yBXOAyLA.roa (hash: zEkTEvnJRapseTP0KdSkFQigSFFq86JRm4Kqw9lBy+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:cf:66:b1:27:29:6c:ae:7e:2a:44:31:21:2d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Apr 19 09:01:02 2026 GMT
Not After : Apr 20 09:01:02 2026 GMT
Subject: CN=27b46a296e297715b41ceae798e9960a5e3d765e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:1b:56:49:88:3c:7f:00:01:f2:02:93:40:
ef:87:cc:4c:4b:57:2d:78:82:70:3c:d1:f0:4d:ca:
0a:39:b1:2c:f6:d1:71:17:9b:97:88:66:9d:52:a9:
e7:f9:3a:ba:dd:ed:25:74:73:96:38:aa:9e:9d:6b:
f6:f1:64:41:29:64:66:bf:b0:fd:2e:8b:c2:4d:73:
06:7e:f2:58:ea:91:75:5c:b2:30:83:6f:e7:98:d7:
60:d0:0c:86:7b:0c:d7:72:99:34:1a:31:01:28:e6:
f7:f7:b9:23:e0:bc:2b:5c:1f:ab:47:d4:8f:c3:11:
7a:1a:bd:c8:46:08:ed:f9:1f:29:96:c8:93:d5:54:
26:49:33:d1:c9:de:bc:33:69:64:1e:bf:0a:43:2a:
31:e9:cb:bc:50:d1:4f:02:94:14:c6:18:f2:bf:dd:
8b:aa:cc:75:a6:0a:ef:9a:8f:84:05:42:53:57:aa:
b1:6f:8a:0b:c2:87:6a:9f:49:cb:24:53:25:b3:ae:
97:76:64:1a:e3:07:d2:c0:83:13:f5:e5:21:71:4e:
27:f2:3f:87:b8:ec:7f:78:52:4a:7c:07:26:60:bf:
b6:0c:73:86:cc:fe:02:7d:ef:98:f7:dd:be:ae:26:
53:f2:e3:76:81:95:a1:72:2f:9a:0b:2f:eb:d1:ba:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B4:6A:29:6E:29:77:15:B4:1C:EA:E7:98:E9:96:0A:5E:3D:76:5E
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:1b:80:b6:30:43:a3:cd:4f:70:17:cf:75:30:6a:18:68:
09:58:f8:5d:be:c0:14:f2:29:1a:dd:6b:ce:32:c3:7d:af:c3:
c6:cc:75:bb:d3:ee:35:56:f5:cd:b1:03:4b:6b:75:97:f6:f2:
49:df:21:ea:95:c1:7e:91:f7:67:70:4e:d2:1b:c8:fc:ef:95:
85:ad:78:58:0f:dc:27:7e:3d:08:65:c2:63:68:9b:d0:ae:ce:
92:28:d0:da:54:70:ce:9a:a1:c2:b2:77:a1:aa:0b:43:84:9d:
bf:14:bc:61:6d:d9:fb:44:a4:bf:42:a5:de:8f:5d:f3:c9:1f:
12:f0:d5:90:af:70:5b:8f:6b:39:b9:35:ec:15:a2:48:a7:08:
04:86:61:2d:3e:17:0e:08:7c:c1:1f:90:9f:b9:a3:ce:2b:ca:
d8:96:60:06:20:3b:09:53:fb:92:3a:19:27:8d:26:48:7b:c8:
75:04:a8:fd:3a:b0:0d:e6:10:6a:2b:fa:d2:20:e8:bc:5a:b0:
31:de:b5:be:95:e3:c1:91:f8:d2:8b:3b:e2:38:af:1d:1c:af:
fb:de:88:7d:07:72:d7:a5:a0:bc:7c:91:42:3a:67:72:32:b3:
3b:86:ab:bd:5c:ea:51:af:14:1a:46:13:e9:b3:7c:a5:c5:50:
cc:6f:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:40:10 2026 by rpki-client