Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File: 7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier: Me5e3cRUMd5NfF7q9F5QBxPRf3iWLzoVWSyuKXN8X8E=
Subject key identifier: D0:08:9C:41:E4:70:09:B7:B2:13:B1:65:6A:BE:81:A7:77:22:D8:D3
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer: /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial: 019DA48A828F253DA41984395FC916F3142E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number: 088C
Signing time: Sun 19 Apr 2026 07:00:33 +0000
Manifest this update: Sun 19 Apr 2026 07:00:33 +0000
Manifest next update: Mon 20 Apr 2026 07:00:33 +0000
Files and hashes: 1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: T/hpdE5aqSqzrxGwj8OPXccSCSpbd7deHa7l84/BeHY=)
2: rvf0hbFsWVEpBXykcpuVRP8DxR4.roa (hash: GCo9KByc6i3SxxBxNly9glVqB6hv/1pXfge2kLwR0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:82:8f:25:3d:a4:19:84:39:5f:c9:16:f3:14:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Validity
Not Before: Apr 19 07:00:33 2026 GMT
Not After : Apr 20 07:00:33 2026 GMT
Subject: CN=d0089c41e47009b7b213b1656abe81a77722d8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:03:13:01:49:29:e2:b5:26:d4:ac:80:0b:
56:0d:c6:65:96:7e:e6:af:b3:77:ad:74:ad:55:db:
7e:cf:82:9f:26:98:8a:3f:5c:20:92:05:c7:30:b4:
28:a3:06:47:62:05:7f:1c:ff:4c:11:7a:5f:db:23:
f1:88:11:11:82:19:5b:ef:8c:39:29:43:c5:13:b1:
95:f1:f1:1a:0f:21:c8:f9:02:2c:7a:05:ca:a6:5b:
59:75:22:a3:da:d7:8b:7e:fb:0e:0a:fb:a8:28:d3:
2b:27:6e:a9:32:6b:14:3c:72:fb:35:a0:6a:22:2e:
3d:5b:00:66:2b:e7:3d:2e:9d:ce:33:4e:56:ab:d9:
6d:90:93:ac:ad:ad:e1:b2:03:09:0c:d1:71:ad:8b:
df:5a:12:a6:b6:4a:31:b9:c1:f5:8d:14:f0:d1:ea:
4a:aa:42:41:3a:18:c5:5f:23:88:5a:20:02:3d:fc:
e7:ee:91:84:76:cc:44:7b:2c:87:b9:a4:f0:e1:1a:
33:8c:0d:c0:fb:04:b3:84:99:fc:38:88:46:87:1c:
97:7e:69:e3:6f:97:ad:0e:3a:57:ce:ae:b2:44:14:
f7:39:0e:6d:04:3d:20:8b:73:8c:13:42:ab:bf:7d:
60:52:cc:50:8e:03:4d:9d:ab:a7:94:6b:eb:bb:d5:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:9C:41:E4:70:09:B7:B2:13:B1:65:6A:BE:81:A7:77:22:D8:D3
X509v3 Authority Key Identifier:
keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:59:0e:d6:7b:04:c7:d1:69:0e:a7:be:1d:30:40:23:17:4f:
cd:52:1b:7d:f5:84:ec:29:e9:7d:70:e6:f3:1a:94:bc:b0:c0:
48:8c:c7:c5:fe:5e:02:32:a8:a1:9d:6c:13:c2:8d:18:79:08:
cb:00:38:a6:a0:ad:06:b5:c2:4b:da:78:75:02:24:7c:b3:51:
3f:43:eb:56:a1:9d:0c:88:88:e7:52:80:78:58:17:ef:4e:3d:
b9:31:5a:21:28:c4:62:5c:10:db:93:ee:b6:cc:07:8b:9f:c8:
00:31:fe:fe:0d:80:1d:43:7b:bb:d1:22:28:ce:62:50:88:6a:
61:a3:27:c2:c9:1e:10:ea:06:b9:94:a3:31:a6:8e:55:41:aa:
c7:fe:40:2c:18:e2:57:4d:e4:e5:29:82:76:68:10:c8:55:d0:
ab:65:82:50:b3:1d:b9:db:24:44:37:1d:bf:cb:60:c8:b3:1d:
84:b5:d8:b5:ba:79:94:2a:ab:c3:a7:2c:5c:6d:29:47:b0:f1:
6c:04:90:46:8a:6d:76:18:ff:c8:30:06:e6:c9:22:40:86:03:
28:42:3a:7d:12:39:86:2f:e1:44:31:5a:36:d7:e9:43:fc:e9:
c9:3a:c3:cb:ea:0b:51:17:dd:0d:8c:ef:fc:a3:11:b9:20:eb:
82:c9:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:21 2026 by rpki-client