Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: rrA6aBR6r1dcGOLXUeX9iuywNgwcpt0dhqfks86RdyU=
Subject key identifier: BF:5C:F8:12:91:CB:A3:4D:B6:12:AF:BE:6D:1C:71:CE:0B:D3:DA:61
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019D9B51495439FB60FEED48B52DFAB580B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:01:28 +0000
Manifest this update: Fri 17 Apr 2026 12:01:28 +0000
Manifest next update: Sat 18 Apr 2026 12:01:28 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: htmHnS39V7NUgY0Tv6ihsPJAIHOZQlnox7J/57aSs6k=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:49:54:39:fb:60:fe:ed:48:b5:2d:fa:b5:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Apr 17 12:01:28 2026 GMT
Not After : Apr 18 12:01:28 2026 GMT
Subject: CN=bf5cf81291cba34db612afbe6d1c71ce0bd3da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:87:5f:32:b7:8a:4c:53:aa:b9:dd:e2:09:
97:bc:b4:16:39:02:8c:2f:71:3c:90:1e:74:2d:c4:
b4:5d:ea:e6:55:00:14:07:46:c8:f4:fa:aa:1f:32:
a3:f7:54:92:1a:05:ba:74:22:97:7d:1b:5a:7c:20:
88:e3:d9:ac:ba:e0:6a:c7:99:a9:4b:04:d1:fe:4e:
02:13:42:52:24:9e:b6:a4:80:88:3e:5a:c5:ec:f0:
45:9e:32:87:68:ba:44:4a:4a:df:2a:25:88:c2:f7:
e1:3c:01:43:7c:b4:eb:fc:c7:d5:e3:3f:68:86:f6:
6d:23:d2:36:20:14:01:d9:78:a3:ec:33:db:fa:7d:
b7:1a:31:66:b2:8e:c3:eb:d4:1b:4b:eb:60:0a:c5:
23:0c:fd:75:b4:c4:42:e1:e0:9f:89:ea:68:3e:b1:
36:cc:3f:85:57:5d:46:64:ed:7b:96:70:48:34:3c:
73:02:76:6b:3e:a6:cf:5d:b3:26:e4:48:66:86:39:
bc:0d:ea:e9:f7:b8:32:8c:a1:1d:3b:fb:a9:2d:03:
3e:af:25:03:31:34:13:82:5a:a2:d6:ce:fc:07:6c:
46:ff:53:07:f8:41:0b:ba:dc:8c:d2:78:7f:b8:34:
cf:15:0f:eb:35:2a:f1:80:2a:db:e7:2e:36:20:e8:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:F8:12:91:CB:A3:4D:B6:12:AF:BE:6D:1C:71:CE:0B:D3:DA:61
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:40:c9:a2:95:4b:3d:61:8f:81:6d:47:7b:22:b9:a4:15:5a:
db:f5:f4:c9:d0:1e:30:fe:21:f4:e8:fd:3e:7d:3c:69:00:84:
88:7d:9d:b5:e3:4a:d4:ad:3e:25:39:e2:20:82:94:5e:75:4c:
4d:6a:52:81:3f:ce:6b:2e:8f:07:0f:47:f1:6f:74:5f:70:45:
70:fa:03:40:7f:63:8e:20:7f:28:ee:a2:57:28:ed:a6:a2:a5:
6a:b6:b1:c9:ac:14:00:f6:e3:f1:68:9b:e3:4c:94:87:dc:d2:
8f:3b:14:a1:e0:f8:99:f9:e7:da:55:3a:70:2a:a5:27:72:c0:
15:43:22:20:91:35:35:5c:2a:0a:72:c3:81:cd:86:78:8f:be:
ab:67:ec:af:ce:c4:58:52:6e:08:df:28:f0:4e:e3:4e:d8:8c:
56:a4:ff:4a:02:93:05:53:c1:24:29:69:14:63:1a:f1:07:3d:
4b:ef:bf:74:6a:1b:e9:d0:cf:82:ba:cd:21:05:92:53:9f:bc:
9d:5e:1a:7d:00:3b:de:22:c6:ad:c4:cc:59:a7:d9:c2:f5:43:
8a:cc:89:e5:d5:2a:7c:bc:72:e1:55:7a:b3:52:83:f3:92:ed:
41:46:df:9d:57:bd:07:71:b3:b8:1d:d2:5b:96:19:04:97:a2:
02:ed:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:09 2026 by rpki-client