Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: FelGF6h9EUnSGvjCQfJUtZhh78RfmMuhUdCCJ/K+ROo=
Subject key identifier: 18:B2:C8:A0:F0:C5:68:0B:9A:D3:DC:CD:F5:4C:34:5B:E6:F5:63:B7
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 019D98F4E7724936B28CEEFAEA5AC471830A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:01:20 +0000
Manifest this update: Fri 17 Apr 2026 01:01:20 +0000
Manifest next update: Sat 18 Apr 2026 01:01:20 +0000
Files and hashes: 1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: ospczJr4D2mrgkrSXlJzmruRqtBFRJOyWXVdnw93nV0=)
2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e7:72:49:36:b2:8c:ee:fa:ea:5a:c4:71:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Apr 17 01:01:20 2026 GMT
Not After : Apr 18 01:01:20 2026 GMT
Subject: CN=18b2c8a0f0c5680b9ad3dccdf54c345be6f563b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:ae:eb:69:51:18:7c:ff:da:e6:09:59:03:
55:1d:01:39:6d:f8:e9:82:ef:c1:82:4d:3e:4d:1f:
33:1e:8a:74:99:33:e5:e2:b0:50:85:d2:b5:bc:ac:
f1:32:10:84:7b:49:7d:06:5e:46:a8:40:26:2f:80:
d2:42:18:1d:02:94:c1:ac:b2:53:85:c4:cd:be:a4:
3f:42:68:32:15:26:64:17:82:c5:74:d0:88:d6:8f:
cc:ab:8d:45:a4:6f:1d:40:50:a2:b4:5c:0e:da:a2:
98:3d:e5:19:4f:df:88:fc:12:25:a5:24:77:5b:df:
c3:09:12:0c:bc:6b:1a:05:40:81:3c:96:aa:5d:3c:
22:15:dd:f8:3f:ce:a1:77:44:4a:01:d9:20:78:c9:
ae:87:c1:7f:44:9d:37:9b:41:7d:1e:32:0d:ac:2a:
b9:52:b2:03:75:ab:11:44:6d:cf:66:a2:25:69:11:
22:20:c6:ac:ad:90:d4:b8:9f:71:e0:ba:de:00:71:
3a:b2:cd:fe:7d:a0:31:86:3f:5d:da:a8:64:a9:65:
88:ef:16:be:fd:47:1f:c5:25:cf:18:58:4f:e8:6e:
c0:a9:2a:d8:a7:2d:30:82:b8:17:c6:3e:0f:2d:69:
34:b9:88:aa:ea:86:81:53:75:b9:2f:c6:79:30:ad:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:C8:A0:F0:C5:68:0B:9A:D3:DC:CD:F5:4C:34:5B:E6:F5:63:B7
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fa:bb:64:a3:90:30:21:5d:ed:94:3f:b9:6a:98:b1:c7:fc:
77:10:d2:04:a2:75:5e:2c:71:c7:a0:bd:5d:59:50:22:9e:18:
57:fe:d7:60:cf:84:f1:f4:a7:51:00:1c:3f:ee:86:d0:19:d5:
88:e4:c7:77:60:64:d0:9d:b6:a3:33:99:ae:30:d2:01:39:f3:
36:c0:44:22:97:da:2b:1f:73:47:ae:d9:8c:1f:a2:94:98:ca:
59:62:e5:05:2e:11:0b:be:2e:37:a0:61:a7:be:7a:22:af:0e:
e9:ee:6e:9f:16:7d:ff:fd:86:05:88:8b:56:5f:45:91:53:76:
db:83:ad:00:4b:af:06:59:c7:f1:aa:26:22:d3:eb:30:78:83:
6a:1f:28:ec:87:bd:35:c5:c6:13:05:ce:2c:bc:b4:1d:52:36:
89:15:29:37:d0:87:c3:39:e7:68:01:39:31:11:8d:d2:fd:27:
c0:da:9d:86:01:97:e6:fa:1d:ba:a8:3a:9e:6c:47:7a:db:4d:
e4:ae:9c:32:25:a1:22:9d:96:44:9c:39:9b:e5:f3:9f:14:e4:
2a:ae:03:f7:6f:d0:14:9b:f8:f1:e4:37:9d:c1:bd:b1:1f:2d:
3d:00:1f:72:c3:dd:c4:c0:73:a2:ed:83:7a:40:2d:b0:ba:09:
02:ee:ba:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:19 2026 by rpki-client