Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: vgsdVrQpLN0zE9jWzkp9p5QSIZlWcqSYmHSmJvBYqQc=
Subject key identifier: B0:44:3E:C3:A7:FF:3F:20:D5:7F:F9:FA:20:D8:9B:5C:CD:26:8D:04
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 019DA41CD32A2547942075AFD1B41A38F03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 05:00:45 +0000
Manifest this update: Sun 19 Apr 2026 05:00:45 +0000
Manifest next update: Mon 20 Apr 2026 05:00:45 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: 2QOJkOtjp1nC0zFCqEKpazSngdaAlxNXxILQIccem/Y=)
2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:d3:2a:25:47:94:20:75:af:d1:b4:1a:38:f0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Apr 19 05:00:45 2026 GMT
Not After : Apr 20 05:00:45 2026 GMT
Subject: CN=b0443ec3a7ff3f20d57ff9fa20d89b5ccd268d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:6c:a0:14:9f:14:22:fc:aa:ac:c2:8c:cb:
b6:66:05:18:4b:bd:11:57:07:e6:19:a6:98:60:c1:
5e:c0:d5:36:e1:5e:b3:d6:f8:8c:68:9d:b7:b1:07:
75:e1:cc:5a:8a:47:5c:03:e6:4d:75:61:6d:f5:e8:
1e:af:79:5f:c1:4f:14:ed:5f:9f:0b:aa:d3:b2:76:
08:a2:60:9b:cb:2e:2a:90:a1:5f:b9:69:3f:84:f8:
a8:58:c8:1d:d7:33:af:5d:8d:11:55:58:f1:08:4b:
f8:6f:56:df:7c:09:ec:aa:06:a6:d5:9d:f1:3c:01:
72:99:5e:c3:8e:32:2f:1d:d1:ee:c5:a1:0e:ba:ed:
b0:52:40:27:89:cd:30:87:c1:7e:1d:ad:7a:7c:20:
a8:be:4e:6f:27:15:06:3e:8a:14:3e:63:ad:ed:d2:
db:94:05:6a:72:2c:80:ef:e4:89:c3:3a:be:38:4a:
09:9f:10:a9:b7:4d:e9:5d:c6:22:81:ce:ec:9f:f2:
d8:97:cb:66:da:19:69:b9:87:55:13:f5:25:38:72:
23:02:66:c8:40:8c:b5:23:8b:fb:18:04:6b:47:5b:
7f:9d:a0:12:2d:df:dd:fa:66:08:a4:23:2c:a7:e4:
a0:19:e6:d2:0f:4c:88:7a:5e:60:ca:63:1b:64:13:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:3E:C3:A7:FF:3F:20:D5:7F:F9:FA:20:D8:9B:5C:CD:26:8D:04
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:d7:29:0b:29:6d:35:fa:48:45:4d:d5:78:15:fa:6d:34:
06:02:4e:f8:5c:98:8a:e4:78:b9:44:ca:9f:db:4c:48:1a:45:
cb:a6:d9:e7:78:6d:1c:c3:17:62:c4:be:38:f1:a8:a4:f2:da:
37:13:02:e7:3b:51:c2:c0:11:47:be:80:27:7e:a2:c6:fc:ee:
81:37:cb:06:96:f4:ec:fc:10:49:52:8e:17:9b:4e:af:ce:85:
ee:1e:2e:41:75:44:6d:65:32:43:97:0a:fd:fa:86:ce:31:5f:
98:1a:e7:4b:77:8e:75:69:4d:56:38:45:df:73:a8:1d:51:c2:
c8:f0:ab:26:86:82:fb:b9:04:cd:80:2c:02:e6:06:38:16:e4:
50:56:ea:c1:25:82:39:08:12:67:12:70:7b:7e:53:5e:4b:39:
c4:ee:4c:cc:40:78:ba:b3:e1:c0:c2:17:5c:31:e5:44:ec:4e:
fa:1c:4f:bf:ac:f1:bf:d1:99:7e:95:c4:76:a2:da:27:9c:0d:
37:63:12:93:f7:c0:79:7a:1d:4b:12:f6:af:57:8c:e4:f8:bb:
48:e5:c7:c5:32:ac:cf:76:05:9e:7f:76:f5:ad:d6:14:fc:51:
85:76:15:45:78:4d:1b:07:75:ca:b8:63:08:81:4d:f6:1d:a1:
0b:c4:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:08 2026 by rpki-client