Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: LMA52dN2546LnE7oOmSaoIeD4iubKEJS0uFpXCn79+8=
Subject key identifier: 83:AD:58:A5:58:72:24:81:9F:9E:FE:36:ED:7C:D0:FD:95:83:61:1E
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 019D98F4569B95DFE0E660DE40C4C53BA70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0CE8
Signing time: Fri 17 Apr 2026 01:00:42 +0000
Manifest this update: Fri 17 Apr 2026 01:00:42 +0000
Manifest next update: Sat 18 Apr 2026 01:00:42 +0000
Files and hashes: 1: 08gQk2AeldcK_y6tYivNi31VDhw.roa (hash: iDSr2+dL188PsGjLi4V4pKrhdyzfHy95/dG6MIkWF8U=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: VWy8tdOp4aSceMMDFuohyrUaWnXrHpuAFl869WqeyMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:56:9b:95:df:e0:e6:60:de:40:c4:c5:3b:a7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Apr 17 01:00:42 2026 GMT
Not After : Apr 18 01:00:42 2026 GMT
Subject: CN=83ad58a5587224819f9efe36ed7cd0fd9583611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:75:39:d7:9d:e3:81:c8:c1:4e:32:ef:ce:
4a:4a:e2:7d:18:46:5d:24:ba:87:45:6a:53:07:74:
bc:6e:ee:0d:04:1d:41:e4:25:5b:2e:60:48:96:0e:
f9:cc:d9:9f:70:8f:ce:80:6b:f6:a7:c0:4a:66:4c:
b2:d8:19:5a:81:00:f1:58:b5:ee:2c:4e:30:ef:70:
aa:da:f4:07:b6:ed:82:27:b1:fa:f8:61:b3:43:30:
18:15:cd:cc:eb:c9:62:2d:49:77:8b:00:c6:c7:d9:
ff:88:19:d2:ed:d4:f1:95:96:a1:9b:4d:43:97:ac:
5a:1e:94:2b:80:35:cf:41:20:71:38:9f:2f:ca:6f:
97:19:b9:7f:24:b9:73:5a:84:d7:9a:df:4d:a2:2b:
fb:78:cb:c3:fa:ba:23:91:c2:6d:58:3c:85:96:b4:
c0:b9:e0:83:90:a2:7f:97:ab:8e:e1:37:f9:b5:26:
af:e8:82:95:46:ad:82:50:96:c5:7f:85:11:c6:37:
00:b2:e5:5b:67:f8:16:41:b3:fc:1d:1f:f1:12:37:
64:65:9b:4d:5e:fd:ec:ae:6a:64:c3:97:e6:c3:25:
7e:73:00:90:4d:82:74:10:27:c7:ff:da:74:e0:d6:
62:7f:4e:9a:1b:06:6b:72:77:86:cc:46:22:bc:4c:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AD:58:A5:58:72:24:81:9F:9E:FE:36:ED:7C:D0:FD:95:83:61:1E
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a5:9f:da:f7:84:a6:d9:05:2e:34:01:6a:81:eb:0b:8f:5a:
c9:20:80:ea:16:d0:10:60:e2:e8:a7:56:44:14:dc:9b:c6:2d:
27:2e:7d:99:51:83:9c:fb:b5:22:40:3a:ef:54:a7:ac:2b:53:
6a:d7:05:66:c2:37:33:99:fc:24:18:26:cd:92:de:c1:8b:7d:
ea:fd:dd:f3:e6:0a:c4:94:2d:f8:f7:7c:dc:31:e6:c7:78:a2:
ce:83:c8:7c:5e:51:3a:e2:8a:e7:99:10:c8:de:7a:0f:75:5a:
02:fd:ec:59:42:bd:0a:2b:68:69:1c:e6:a6:e0:8c:1f:04:44:
81:5d:35:06:18:e8:c5:78:c4:2d:ed:9b:5f:b8:26:51:93:08:
2e:38:4f:84:8e:a2:7e:cc:73:c7:8a:0d:f7:bb:08:21:fe:12:
52:4b:9f:13:77:47:79:a1:f9:6b:38:af:65:bd:0a:05:18:4a:
59:12:dc:79:b9:09:3b:8b:ff:b1:a6:76:8b:74:3d:cc:b2:39:
5d:0c:0a:40:89:fa:3c:f6:f6:0b:b5:90:49:30:9f:58:86:01:
7d:ef:3f:91:01:33:b4:ee:67:e3:9b:c2:ef:2c:36:81:cf:ad:
6a:0b:46:68:bb:96:23:57:e6:2b:56:d9:49:d3:18:03:cb:13:
96:97:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:54 2026 by rpki-client