Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier: gHle3OGP/hSFUUDFFtUHUzQ3YG2Ni4z87JeLt5QQPTM=
Subject key identifier: 3E:21:DE:BD:E3:6D:03:28:D6:3A:8B:BE:AB:3C:FF:6F:57:44:0C:E4
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial: 019D992AF8DABD53FC93AA83D46F362C77F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 02:00:23 +0000
Manifest this update: Fri 17 Apr 2026 02:00:23 +0000
Manifest next update: Sat 18 Apr 2026 02:00:23 +0000
Files and hashes: 1: Ix0TT5IrmKD226rBGnrwxJKMQZE.roa (hash: kT8aM1b7+8tvbyvrC/BU4Ml9NWdK/DRuTi32q1ndZgU=)
2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: myMfhvMMvM8iUVNcrDkxOjAC7Hv2lfrI6IBcx0VzUp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f8:da:bd:53:fc:93:aa:83:d4:6f:36:2c:77:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Validity
Not Before: Apr 17 02:00:23 2026 GMT
Not After : Apr 18 02:00:23 2026 GMT
Subject: CN=3e21debde36d0328d63a8bbeab3cff6f57440ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:53:96:92:1a:cb:44:2d:9a:9b:a8:74:a0:
73:2a:1e:04:bf:34:43:a8:20:7c:13:c1:59:8f:81:
82:a1:95:5d:b3:bc:7c:b3:9c:a1:08:c5:d2:ed:b3:
2e:7c:ac:9e:26:0e:89:55:a1:78:ef:c6:b4:29:b8:
2f:0e:93:95:2c:82:27:6e:58:27:fe:55:8b:20:e9:
39:a8:57:e4:f0:a4:2d:79:ca:ab:5d:a8:ea:85:49:
0d:5c:b3:6a:ef:ff:84:f3:9d:86:20:df:5d:2c:3f:
be:72:02:d6:af:ae:55:4b:12:2b:24:8f:c6:0a:bf:
1a:e6:a7:8a:c1:63:84:0e:fa:b5:6b:ed:00:d9:81:
81:3d:4b:fc:18:3b:6c:95:38:b9:f7:38:42:3b:fc:
90:6f:ec:7d:a1:1d:e4:68:77:21:85:b9:49:83:f8:
45:76:0e:45:a3:a3:65:bf:58:a6:06:ba:d0:95:df:
30:0a:ab:e1:be:da:3d:9f:6a:96:6e:31:3a:84:88:
b5:63:ce:51:b3:08:55:e4:4d:db:df:00:b9:09:f2:
db:e1:82:b4:fb:a2:53:87:a7:4e:c7:15:dc:a0:05:
50:c5:3d:6b:35:bf:ed:65:f1:ba:62:8d:93:82:ec:
b9:74:6c:c1:00:42:9a:76:01:34:61:5a:4c:74:44:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:DE:BD:E3:6D:03:28:D6:3A:8B:BE:AB:3C:FF:6F:57:44:0C:E4
X509v3 Authority Key Identifier:
keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:62:04:84:fb:d7:4a:9f:c8:85:89:50:18:d7:ac:90:36:2b:
6a:ff:59:ad:a4:9b:6e:66:a6:de:37:82:68:ba:19:9a:34:63:
cc:59:fb:7c:7e:62:5c:03:a7:c4:9e:29:1a:41:8f:de:a1:52:
ea:1d:98:45:c2:a8:55:53:2b:0f:8e:ad:be:be:ab:13:3b:85:
7a:7f:11:05:46:3b:d1:d4:17:cc:df:1a:e7:ec:35:b1:45:69:
74:42:42:74:83:f5:c6:5f:2e:2c:c2:c4:aa:fc:fd:21:34:e0:
1d:c2:f4:f8:a3:bd:bd:f1:ce:4a:1e:74:46:b7:66:c3:93:17:
a4:c3:87:ca:51:3a:66:33:0a:3e:c0:f9:c8:55:e3:8b:18:f9:
9d:fb:19:c0:a6:94:10:7d:85:ce:4e:2d:29:67:b9:5b:15:85:
0c:2a:6a:3b:46:3d:0d:4f:2e:ca:10:42:a6:5e:ac:bb:23:28:
fa:fc:7a:4e:9f:bd:20:f2:82:dd:85:3e:ab:cc:d3:2f:6d:b4:
4b:f2:12:b8:28:d1:00:02:1b:42:17:34:d4:27:ee:aa:37:1b:
96:97:a1:39:99:31:6f:46:c4:cf:5b:34:1a:7f:10:0d:1c:61:
bc:d9:5e:f7:fc:20:e5:d0:c6:5d:11:ba:e8:d4:a0:a8:1a:9a:
35:9e:4c:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKvjavVP8k6qD1G82LHf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYjQzZGUyMzdmZDBiNmEyODczODkyMzA5MjFkMjVhMmMy
ZWQxYTgwHhcNMjYwNDE3MDIwMDIzWhcNMjYwNDE4MDIwMDIzWjAzMTEwLwYDVQQD
EygzZTIxZGViZGUzNmQwMzI4ZDYzYThiYmVhYjNjZmY2ZjU3NDQwY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFTlpIay0QtmpuodKBzKh4EvzRD
qCB8E8FZj4GCoZVds7x8s5yhCMXS7bMufKyeJg6JVaF478a0KbgvDpOVLIInblgn
/lWLIOk5qFfk8KQtecqrXajqhUkNXLNq7/+E852GIN9dLD++cgLWr65VSxIrJI/G
Cr8a5qeKwWOEDvq1a+0A2YGBPUv8GDtslTi59zhCO/yQb+x9oR3kaHchhblJg/hF
dg5Fo6Nlv1imBrrQld8wCqvhvto9n2qWbjE6hIi1Y85RswhV5E3b3wC5CfLb4YK0
+6JTh6dOxxXcoAVQxT1rNb/tZfG6Yo2Tguy5dGzBAEKadgE0YVpMdEQgQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4h3r3jbQMo1jqLvqs8/29XRAzkMB8GA1UdIwQY
MBaAFH+0PeI3/QtqKHOJIwkh0losLtGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUt
YmM2MzcxMzBkZTZlLzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUtYmM2MzcxMzBkZTZl
LzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGIEhPvX
Sp/IhYlQGNeskDYrav9ZraSbbmam3jeCaLoZmjRjzFn7fH5iXAOnxJ4pGkGP3qFS
6h2YRcKoVVMrD46tvr6rEzuFen8RBUY70dQXzN8a5+w1sUVpdEJCdIP1xl8uLMLE
qvz9ITTgHcL0+KO9vfHOSh50Rrdmw5MXpMOHylE6ZjMKPsD5yFXjixj5nfsZwKaU
EH2Fzk4tKWe5WxWFDCpqO0Y9DU8uyhBCpl6suyMo+vx6Tp+9IPKC3YU+q8zTL220
S/ISuCjRAAIbQhc01CfuqjcblpehOZkxb0bEz1s0Gn8QDRxhvNle9/wg5dDGXRG6
6NSgqBqaNZ5Mvw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:56 2026 by rpki-client