Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: JXLGQdXlmTJy9CXAyDH8XZuDlTgQhuJgbqoOLfEA9Mc=
Subject key identifier: 64:2C:B1:20:34:96:5B:6B:4E:95:DF:BF:45:F4:95:B0:BF:1D:A8:28
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019D9BBEF89D4E8F7DFC21C41D232AA4AFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 1779
Signing time: Fri 17 Apr 2026 14:01:17 +0000
Manifest this update: Fri 17 Apr 2026 14:01:17 +0000
Manifest next update: Sat 18 Apr 2026 14:01:17 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: 6Boq4vSW679BuaGa+26aVzT73IWZ+N3eHZlK3SXIW4w=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:f8:9d:4e:8f:7d:fc:21:c4:1d:23:2a:a4:af:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Apr 17 14:01:17 2026 GMT
Not After : Apr 18 14:01:17 2026 GMT
Subject: CN=642cb12034965b6b4e95dfbf45f495b0bf1da828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:d6:8f:09:b8:0c:87:6b:5d:60:cd:3e:b1:
20:b1:c5:6b:f5:e7:3b:cf:4e:4d:7e:a6:49:20:bb:
9e:73:ae:98:57:ae:17:45:02:ea:ce:e0:2a:96:6e:
8f:ab:f9:1b:58:53:53:47:a0:4b:01:08:3b:80:52:
ba:3a:5a:bb:4c:8e:e8:93:85:2f:f0:f8:27:6f:ea:
dc:12:25:5a:34:bf:35:05:2b:42:d3:2e:ea:00:f4:
9f:f8:26:3e:24:31:f2:68:45:53:5f:42:07:e6:32:
35:20:3f:91:08:50:96:6d:76:ed:b3:ba:24:2f:9b:
9b:de:3b:26:24:ad:86:12:ce:9c:f6:08:8f:0d:61:
f0:aa:4b:a9:a1:37:21:9d:ee:16:16:a6:f3:7a:bd:
a9:75:ff:97:81:39:01:d6:02:bc:cf:d4:62:dd:51:
0f:4e:18:b8:59:e9:4e:ad:0c:13:7e:fb:a4:3b:5c:
47:c5:b4:3d:7a:87:e6:31:cb:44:7b:6a:bc:9d:a4:
2d:6a:ce:0f:30:4f:f8:38:46:42:3a:b5:1c:9a:94:
73:8b:0b:3a:9c:d2:e4:ee:c4:43:7c:73:af:53:fc:
3a:c4:9f:9a:b9:93:7d:c9:05:6c:9c:fa:34:f3:49:
9f:92:09:c0:b4:42:f3:20:de:61:d0:42:8f:90:e7:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2C:B1:20:34:96:5B:6B:4E:95:DF:BF:45:F4:95:B0:BF:1D:A8:28
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:3d:53:b8:d4:0d:e2:0e:4b:63:69:82:97:4b:c0:0f:9b:b4:
d9:89:ca:b6:e3:7a:f0:9f:2b:5e:91:a3:30:47:c2:b9:a2:e9:
31:f5:a8:13:53:4d:42:86:e1:9c:15:67:a2:1c:0a:ae:d9:32:
13:9c:65:2c:02:87:c8:7a:71:6c:9f:47:51:af:f4:42:37:f2:
33:a1:81:13:45:bc:26:f4:0b:a8:6d:ae:40:6e:92:63:96:cd:
bd:c7:36:34:28:b5:19:e2:d5:90:0d:d7:e8:84:b1:00:c8:bc:
8a:c9:19:34:9d:a8:92:fc:ac:f5:a0:20:2e:ac:18:55:6b:38:
ec:1c:6c:8b:8a:1b:5b:3d:63:ad:ee:70:53:7e:ad:55:aa:fb:
d0:b4:b3:6e:c1:a9:62:30:0e:74:e8:de:5e:40:2e:eb:a6:8e:
ce:5e:34:f6:b0:73:81:ac:7b:d3:61:bb:c4:ba:75:6a:d4:d4:
ef:af:50:6b:3c:49:e4:59:58:28:12:d0:d7:26:6e:e8:46:0d:
99:17:68:f7:5a:40:b2:a5:19:a5:33:c8:bd:15:59:19:1e:ba:
99:d0:f3:d2:fe:f6:91:8d:15:27:4d:be:21:2c:c7:f8:ab:b5:
3e:c1:30:ad:2e:16:33:42:36:2b:a4:57:b4:b9:8f:f0:ff:a6:
33:b1:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:41 2026 by rpki-client