Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: J3Q10/gIf9YG8Ew8Qmi9hTn2F5nqnl2t5OOJ6+N7dQU=
Subject key identifier: D0:6B:A2:3E:4D:9B:C9:40:0A:9C:A4:02:71:F5:E2:3B:91:F2:2B:AA
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019DA41D1FEA83A604FC7E2058444E8EABF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 05:01:05 +0000
Manifest this update: Sun 19 Apr 2026 05:01:05 +0000
Manifest next update: Mon 20 Apr 2026 05:01:05 +0000
Files and hashes: 1: AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (hash: 1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=)
2: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: 2Id17KaMagotd2MfytWoyJtfRUBI6p23ahE5sDCRSis=)
3: Y9TvfDZhPUnmvz8oc1zE1QlM5Js.roa (hash: LtiAP0I3hFV4EJMfOTIDWfqdKu5nKxB9W4yPTHv9hdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:1f:ea:83:a6:04:fc:7e:20:58:44:4e:8e:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Apr 19 05:01:05 2026 GMT
Not After : Apr 20 05:01:05 2026 GMT
Subject: CN=d06ba23e4d9bc9400a9ca40271f5e23b91f22baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:1e:bc:0e:fa:a8:a9:26:09:b4:d9:50:9b:
03:ad:09:7b:51:c8:fc:15:4d:6d:06:36:2e:c7:1b:
39:fc:7c:57:fa:a5:48:39:12:82:b7:5d:b8:c3:aa:
c8:36:f2:90:d3:93:da:30:63:f3:b2:60:af:b5:30:
44:96:f7:ec:34:8f:43:d4:e9:e4:96:d9:bc:ba:d3:
aa:89:27:77:f3:5b:85:77:5d:47:c1:8b:2c:c7:9b:
53:1a:04:09:19:8a:ea:9a:09:8e:85:21:da:85:0d:
78:bd:4d:6b:f8:cc:5f:a0:c1:4b:7e:04:f6:ee:d3:
ef:39:63:96:99:09:06:14:51:fb:00:9c:e3:7d:46:
98:1b:6d:5f:e2:8a:17:48:24:d6:c7:de:36:85:39:
23:a1:18:74:99:79:aa:29:0f:16:a9:17:39:9f:95:
f7:78:37:b1:f6:43:bf:e2:d1:5f:88:5c:c8:0f:92:
d4:33:65:cd:c1:bf:4f:65:76:bc:55:be:9e:9a:bb:
e3:e3:5b:ca:7f:65:d9:f5:eb:ff:ba:d8:59:a6:a8:
42:f8:0d:83:25:bf:ee:41:25:d5:6b:5a:7f:42:fb:
12:74:42:5e:66:38:b3:5d:a7:96:94:1f:2d:b8:b4:
d2:30:fb:64:25:46:13:7d:a0:b4:f5:5f:9c:0c:d9:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:A2:3E:4D:9B:C9:40:0A:9C:A4:02:71:F5:E2:3B:91:F2:2B:AA
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b7:fd:03:e2:ba:8f:6f:b5:bf:77:93:83:a5:d6:ad:c7:e3:
c4:95:a7:7c:c0:19:be:ee:b2:90:34:33:ea:58:ff:f1:63:ca:
7d:81:56:b4:11:f6:e3:15:45:67:2e:32:d7:c5:0b:94:d1:38:
3d:97:c4:e5:2d:fb:c4:c0:1d:4b:50:cf:40:5a:dd:e0:3b:97:
fa:b6:0c:12:c5:e4:f4:24:23:5e:d2:60:8f:13:47:f0:58:7f:
e3:c7:25:55:aa:02:03:a8:73:f7:8f:a9:b4:3d:80:db:20:fc:
57:fa:0f:4a:40:5e:81:f8:86:81:85:cc:50:d3:b6:99:6c:e5:
29:09:96:b7:2e:de:f5:f4:66:50:bd:4e:df:99:d8:08:25:9c:
db:f0:80:a9:75:89:38:2e:6e:5a:78:56:80:a6:8b:80:40:1a:
26:a0:1e:cc:14:7a:25:3f:70:fc:f5:27:a5:14:26:d3:bc:8b:
83:2c:fc:db:88:90:03:5e:4e:b7:e1:20:9d:72:34:9b:08:bb:
68:ea:fa:a1:12:d5:37:67:b8:e4:7e:29:df:de:d2:9a:34:c1:
da:59:f8:dd:f1:a1:a8:2b:28:0c:61:4e:8d:c3:41:c2:e1:5b:
30:6e:e9:8f:7d:60:33:dc:51:1e:57:94:c2:b4:a8:ca:37:3c:
6a:ea:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:08 2026 by rpki-client