Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier: 2ySfxaePt/mEfE7NaOQYhP0e9ZwBslkXHv0iGybs69c=
Subject key identifier: B3:71:25:D1:9B:59:4E:8E:F8:5A:E5:12:00:5C:F6:C8:55:CC:0E:61
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 019D99D0AD85D09C1958A4F2BF571AE4C51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number: 0680
Signing time: Fri 17 Apr 2026 05:01:22 +0000
Manifest this update: Fri 17 Apr 2026 05:01:22 +0000
Manifest next update: Sat 18 Apr 2026 05:01:22 +0000
Files and hashes: 1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: g5uknwXBix/dyLcdk8obfDZ+YkdYDEmKWFAYpyZVB9k=)
2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ad:85:d0:9c:19:58:a4:f2:bf:57:1a:e4:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Apr 17 05:01:22 2026 GMT
Not After : Apr 18 05:01:22 2026 GMT
Subject: CN=b37125d19b594e8ef85ae512005cf6c855cc0e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:c8:9f:4d:41:b6:09:d4:9e:ee:32:12:f1:
b5:a2:43:5f:66:1c:74:9b:b9:5e:74:85:88:d5:a8:
ee:8b:ec:b6:30:35:66:ef:3c:e9:fb:62:f7:32:6a:
60:67:27:b3:e6:1b:86:d6:ba:52:98:07:ad:f8:1f:
fa:c7:5f:7e:7f:cc:c8:06:72:53:7d:d0:2b:4a:5b:
18:a2:41:80:86:98:3a:09:c6:bb:d0:a4:14:d6:70:
77:34:10:bd:98:48:e4:cd:7d:b2:18:56:5b:15:dc:
31:84:4f:5b:a9:33:84:2e:02:c2:26:3c:70:6c:08:
3c:bd:5f:6d:1b:71:6b:f6:82:5f:a9:b1:35:b4:5c:
fd:92:1c:be:24:2a:e0:18:f3:7d:80:b9:61:78:25:
1e:1b:9e:00:ad:68:59:d4:e2:e0:d1:3e:8a:fe:79:
af:9e:ea:73:24:8a:76:10:f1:10:c4:59:1f:5a:78:
c5:12:92:98:94:d6:69:e8:86:73:c4:fe:00:7a:1d:
14:51:63:8f:92:32:3f:81:2a:35:d4:30:cb:94:69:
b4:11:38:9b:8c:b4:e4:48:a3:03:55:1b:de:72:16:
cb:ce:9e:76:f3:47:7b:bf:66:0a:23:64:3f:23:a7:
16:69:d8:8a:3d:1c:d8:8a:f2:0b:2a:89:be:74:9b:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:71:25:D1:9B:59:4E:8E:F8:5A:E5:12:00:5C:F6:C8:55:CC:0E:61
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bf:bf:92:ea:f3:5c:73:e7:59:7d:3c:16:24:2e:7f:79:f8:
05:cc:41:fe:e9:a3:fd:8f:17:d6:a1:d3:0b:61:91:83:0f:00:
fd:2b:22:84:63:b6:ab:99:54:54:31:c3:f1:e9:5e:9b:36:c2:
34:75:51:9b:a8:66:8f:98:fb:99:2f:08:f0:97:10:48:c1:3a:
58:bd:e1:8e:9f:f0:9e:7f:ca:75:e2:8f:4a:91:a9:04:6e:83:
bf:95:9f:d5:ff:45:ce:ed:0b:2d:36:c8:cb:96:2a:03:98:a4:
c1:63:a8:e9:49:bd:c4:33:de:f3:f6:21:b5:42:15:22:50:72:
0c:b9:1a:3d:39:95:63:03:61:27:70:24:a7:ea:44:a0:9e:e1:
80:7a:8d:2c:6c:fa:07:a5:ea:d7:77:6d:55:14:56:5f:e1:5c:
4b:6a:ec:e3:5a:9f:7e:f1:a0:2a:02:52:15:ae:99:2d:cb:74:
47:02:fa:70:02:1b:0d:5b:8a:40:36:c4:ca:2e:12:4d:24:d1:
8f:c2:c3:e7:e9:3d:cc:a8:67:ad:71:a9:e1:1a:69:40:36:0b:
0e:46:6e:8c:20:99:75:cc:5e:49:9c:e6:79:68:92:af:ac:6b:
f4:36:e5:dd:ef:66:a7:2c:13:80:8e:e3:89:15:9b:fc:b9:56:
88:18:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:59 2026 by rpki-client