Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier: HPeKHcZ4CixkFwofwjxJ27eafvWpdkR5aXJ1Vvz/7p4=
Subject key identifier: 42:D9:41:1C:82:75:4A:1A:92:51:5C:DC:DA:AE:06:C9:DA:6E:D0:12
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial: 019D9AE32C8F562FCB783474055DED3E314B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 10:01:12 +0000
Manifest this update: Fri 17 Apr 2026 10:01:12 +0000
Manifest next update: Sat 18 Apr 2026 10:01:12 +0000
Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: FDvf/SiuaEznk46xGPFMMgFK1gSLLba1nrZJrIae/60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:2c:8f:56:2f:cb:78:34:74:05:5d:ed:3e:31:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Validity
Not Before: Apr 17 10:01:12 2026 GMT
Not After : Apr 18 10:01:12 2026 GMT
Subject: CN=42d9411c82754a1a92515cdcdaae06c9da6ed012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:e4:37:40:8d:f7:56:97:9e:58:ed:65:b6:
91:22:79:c0:eb:1e:93:55:a4:46:71:82:72:ef:58:
c1:b7:67:24:7c:70:30:2a:0c:d3:3a:d5:6e:95:a3:
6a:4c:ec:3a:f4:53:3c:a2:3a:17:27:c0:98:85:9e:
e8:61:6d:41:75:3d:ea:77:ad:7c:62:d7:d0:da:63:
1f:80:51:fd:97:df:49:d6:17:9c:c7:6c:9f:d3:60:
3c:68:ef:b4:f1:39:a8:61:90:9a:7d:f7:cc:d2:77:
89:bb:2f:dd:fc:07:fd:23:29:50:4a:c4:c2:91:3d:
84:ae:99:42:d8:32:6e:6d:7e:6f:52:b1:61:a7:56:
98:94:be:1c:9f:97:6d:22:9a:af:31:78:aa:1a:13:
e0:38:81:cb:0a:27:ae:55:c1:f7:55:a8:6f:97:1d:
0a:07:e8:54:e2:40:9d:ca:62:19:69:d8:60:05:5a:
47:38:a4:1f:69:d8:dc:3d:b4:e4:18:28:ad:fe:e5:
a7:ba:d4:57:dd:06:e0:fc:6e:69:88:f1:74:ac:88:
99:0d:20:ca:72:86:81:a9:0e:ea:be:d9:c6:4e:42:
e6:b3:b8:c5:70:23:b2:be:80:5c:30:20:87:60:3f:
0a:94:b8:8e:dd:a3:18:0c:a6:78:a0:05:f4:e2:da:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:41:1C:82:75:4A:1A:92:51:5C:DC:DA:AE:06:C9:DA:6E:D0:12
X509v3 Authority Key Identifier:
keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:85:be:93:b2:c8:fa:0c:80:83:59:c2:95:d7:86:c0:59:4c:
5e:59:24:c4:63:d8:35:0c:41:45:3d:7c:b6:b4:35:ab:10:93:
84:03:fd:df:8c:c4:f3:4a:44:88:fc:1e:9f:21:d7:53:53:a4:
ca:fb:e8:7c:e6:69:f9:47:7f:d9:17:5d:42:15:fa:69:2c:9a:
1f:78:df:0f:c3:80:ee:5f:20:9a:a2:aa:b9:21:75:49:40:84:
83:19:6d:a0:26:e2:1c:23:7b:d7:97:a4:a2:c4:c1:db:10:7a:
b3:09:64:ef:72:e8:f7:7d:78:37:1a:78:da:80:d6:7d:d5:5c:
75:e9:6f:50:29:0d:1f:f9:34:80:6c:a8:5b:1b:76:ee:e1:a2:
a5:d3:15:08:58:4b:ec:ad:23:8f:80:9c:96:c8:3d:45:b0:00:
6a:e2:3a:cc:54:c2:b1:45:48:9d:47:37:18:ae:9a:86:63:55:
1f:82:71:9a:34:7b:d9:ff:e3:96:ee:c6:5f:c4:7a:dc:3b:12:
81:03:ef:79:e8:9a:c2:46:72:3c:2f:15:d2:89:82:f4:35:f8:
08:d2:9a:27:57:88:62:93:83:b3:b5:62:99:16:25:40:70:8a:
f8:f2:80:91:fc:47:76:35:52:00:fb:e2:10:6a:c5:e8:8b:6c:
b2:fa:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:56 2026 by rpki-client