Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: lvH2lTlkDrTuDTLZtXFDjM64BfbniN8tJyWeg2Lms2o=
Subject key identifier: 2B:40:E1:52:D7:0D:2F:C1:8E:46:59:5C:4F:9A:32:5F:AD:AC:73:7E
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019D9BBF0CA5DD6DC9E8B151CED7C9EA6CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 0263
Signing time: Fri 17 Apr 2026 14:01:22 +0000
Manifest this update: Fri 17 Apr 2026 14:01:22 +0000
Manifest next update: Sat 18 Apr 2026 14:01:22 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: npzv3RynzVbMra1WyXfqAgkznIx2dQ+5knvJW9MbyrY=)
2: NV3f3XuOFAsDnfAaCg6nF83CLX0.roa (hash: gLitDvaGVXpGQdqcXcYcXVG4iAgjgIJ9u8eaDv8Xduc=)
3: XHsv6tidd9i-2RRz-dH5aTG8xDM.roa (hash: mc5VNfZqvrFRMc92AfbsJY+NZvDvOSGlYFhOV1FglZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:0c:a5:dd:6d:c9:e8:b1:51:ce:d7:c9:ea:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Apr 17 14:01:22 2026 GMT
Not After : Apr 18 14:01:22 2026 GMT
Subject: CN=2b40e152d70d2fc18e46595c4f9a325fadac737e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:d6:05:50:9c:1e:d1:7b:17:06:c4:c7:21:
42:20:cb:33:32:d3:01:e2:17:70:67:8c:01:07:87:
0e:46:77:2c:2e:8c:ec:72:1e:e4:1c:7a:ee:c6:b5:
a4:aa:0d:14:d1:50:57:77:26:46:51:d0:6d:44:86:
e9:43:0b:61:ec:50:87:28:18:e2:44:57:fe:65:f7:
e1:1e:a5:ce:fd:f8:46:f8:8e:70:ee:87:b7:24:84:
6c:03:73:be:97:08:98:4a:6c:32:ba:8a:83:e9:ab:
a6:0d:53:8b:bd:82:05:13:fa:7a:b3:bc:9b:64:39:
f8:b3:62:68:e6:34:5a:99:d5:84:5e:8d:d6:f9:44:
ec:81:db:5c:36:ea:34:19:71:bf:de:8d:a2:54:92:
94:1e:6d:98:71:cd:39:17:88:70:13:f9:93:bb:bf:
66:65:66:e8:91:ff:43:42:e8:63:23:20:66:3c:c4:
ff:5c:a3:28:bf:04:40:6d:cf:0d:56:28:6c:72:4b:
67:1a:f3:33:a1:6d:1d:cd:0f:80:61:46:ce:2a:63:
b6:11:71:aa:5e:b3:4c:b1:cb:aa:aa:0a:82:58:4d:
dd:49:98:53:8a:f4:31:e5:d9:4a:08:e1:4d:c7:6b:
77:b2:ce:9d:31:10:5f:94:8e:f7:30:2b:dd:a7:e6:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:40:E1:52:D7:0D:2F:C1:8E:46:59:5C:4F:9A:32:5F:AD:AC:73:7E
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4a:30:56:a7:92:96:e7:35:6f:df:1f:9f:14:f1:38:33:2e:
ea:30:c3:95:da:d4:31:a0:5f:d7:a9:fe:20:12:f8:a9:15:92:
ae:7b:37:8e:50:63:7a:1f:be:5f:c3:c4:6b:e6:f4:fa:e3:13:
63:f7:ec:52:7d:50:73:b0:25:50:5f:f5:fe:8d:9a:8a:be:02:
ce:56:ec:fe:ad:9d:dd:2f:75:9f:b8:a5:47:9b:1f:39:10:8d:
f8:00:85:fc:4a:8d:b0:1f:49:60:fc:d2:8e:2e:27:12:3e:93:
e0:e9:80:28:85:58:c8:55:2b:e7:14:bd:aa:1e:ec:72:85:fe:
81:f9:ab:61:56:cb:c4:3c:ad:f5:74:b0:70:a0:1b:e6:73:6f:
6b:ef:72:c3:b5:d8:67:ea:84:15:62:0f:10:16:95:8c:2d:4b:
62:98:65:4e:11:03:c3:8c:91:d3:ea:29:ec:5d:12:e4:f8:1f:
b0:61:31:75:f7:c6:32:d3:41:fa:d6:e2:0b:88:d7:47:81:b5:
96:ee:5f:63:b7:c9:e7:16:f2:e8:50:43:b7:88:79:33:31:12:
e4:45:bf:f6:42:cb:41:a7:dc:8a:fd:2a:51:8d:37:1f:f4:56:
85:9a:1c:f9:7c:a7:2b:27:c6:28:a2:2e:f4:6d:e2:69:0e:52:
76:d4:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:53 2026 by rpki-client