Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: DvSsmIQGtPwXpko3QYNG08L+1pHcmBtRB0GQ4ubyRMk=
Subject key identifier: 5D:16:35:3D:8A:05:17:E9:AB:93:9F:9B:84:DD:AC:7D:46:1A:CA:E0
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019D9886480DDE20016E187CBCBEE58CF73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 0754
Signing time: Thu 16 Apr 2026 23:00:30 +0000
Manifest this update: Thu 16 Apr 2026 23:00:30 +0000
Manifest next update: Fri 17 Apr 2026 23:00:30 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: 6Y1mU5oVBZXBeX1HCp0CWkJHO/uimu3VpA6SKuF33Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:48:0d:de:20:01:6e:18:7c:bc:be:e5:8c:f7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Apr 16 23:00:30 2026 GMT
Not After : Apr 17 23:00:30 2026 GMT
Subject: CN=5d16353d8a0517e9ab939f9b84ddac7d461acae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:9e:dd:66:46:6a:23:2d:9a:1f:a9:dc:7f:
c7:3e:46:69:6d:0f:07:57:0f:64:34:e3:ec:b0:2d:
c9:c2:b3:76:1f:71:88:d3:34:46:b9:44:0c:57:43:
2e:98:df:b8:a7:ae:61:af:cc:15:9d:0d:78:36:b8:
86:9b:18:ea:84:e4:bd:e8:de:3f:08:79:ea:99:13:
96:17:14:80:aa:34:9e:8b:09:e7:aa:74:ff:69:3c:
c6:2e:52:32:53:aa:9d:a3:5d:53:37:19:2a:44:8c:
4a:5c:ad:50:a6:ce:0b:3a:90:66:2b:a5:15:1c:5f:
7e:90:b6:d6:b6:2b:c5:49:20:9c:84:71:d4:82:57:
f2:74:94:3d:9c:82:91:49:52:05:72:df:f5:ad:2f:
fa:80:24:c7:35:ac:91:3a:3f:80:1f:cc:0c:89:c9:
48:ea:b7:e2:57:27:3e:9b:d1:30:1b:c5:1e:6a:a9:
41:d7:5f:63:d7:8b:b2:ff:96:bf:ba:51:1b:0d:5d:
fc:17:b4:7b:22:f6:cb:e8:d1:e6:75:fe:67:6d:ce:
82:d6:0a:e0:da:dc:09:b9:1d:8a:fa:09:2c:3b:b4:
62:6e:e2:75:84:ca:23:4e:26:36:48:5a:fe:5a:3f:
55:cb:26:ac:60:b9:d5:34:69:34:d5:1c:a6:cd:07:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:35:3D:8A:05:17:E9:AB:93:9F:9B:84:DD:AC:7D:46:1A:CA:E0
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:5e:03:ad:7f:21:de:bd:c5:bc:9f:7a:e0:01:59:d6:b0:
e6:bf:78:08:2c:7e:00:30:5a:ba:1f:ef:7a:ac:6c:bf:46:82:
73:ca:db:88:11:75:96:d1:6d:2a:96:b6:05:a4:3a:92:1d:c8:
f9:5d:b7:fa:f7:27:39:06:41:8a:b1:4f:6d:fa:f5:81:8a:47:
a8:c8:66:e8:a0:01:0c:a7:d2:59:d9:4e:68:c4:6a:09:ab:f8:
2f:0b:07:3a:80:54:56:65:4a:10:4b:7e:5a:25:4f:b5:4f:c7:
41:08:8f:2f:17:7c:55:08:da:9d:b7:58:68:b0:71:64:db:da:
f2:cb:bc:b0:ae:75:2e:42:cc:24:e7:9d:54:35:9e:55:24:66:
b4:41:de:4e:4e:92:26:f3:a9:45:3a:ed:a8:91:e8:55:81:e5:
84:11:a0:32:eb:6c:e1:13:f7:8a:b3:01:29:49:74:bf:0c:d4:
e8:98:c4:0e:03:dd:7f:82:73:07:a6:6d:56:6d:04:64:73:62:
5d:32:71:3c:38:8d:73:ed:21:46:9a:1f:2d:02:2c:82:f4:ed:
d4:96:f5:e7:69:40:a9:8b:38:92:05:5e:94:78:3d:77:2c:f2:
9d:36:9c:e1:da:63:af:85:b1:89:07:24:41:fc:ac:26:1f:a0:
38:88:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:41 2026 by rpki-client