Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: hGZPpoaSJMSmQaMu9QDO+np/gfoopN5EpinIul/rjhg=
Subject key identifier: E3:FC:09:07:89:0D:C2:BE:4E:02:E9:93:CF:FA:68:B1:DC:C3:23:AD
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019D9A3EFFAA98B223EAE04F6D018E5CF9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:52 +0000
Manifest this update: Fri 17 Apr 2026 07:01:52 +0000
Manifest next update: Sat 18 Apr 2026 07:01:52 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: 567620tEqB9n/K3R4liazJSTu/LGPM+LAzyRGkJKAhI=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ff:aa:98:b2:23:ea:e0:4f:6d:01:8e:5c:f9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Apr 17 07:01:52 2026 GMT
Not After : Apr 18 07:01:52 2026 GMT
Subject: CN=e3fc0907890dc2be4e02e993cffa68b1dcc323ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:b7:75:fc:b6:f0:61:b0:04:9c:9c:ac:fd:
b4:d4:fd:90:67:fd:f1:31:7d:c8:88:dc:21:93:0a:
a9:3e:f0:ae:73:6e:8f:20:13:34:aa:08:89:44:8c:
41:4f:b9:00:7d:f2:d4:d1:7f:6f:21:6e:bd:c4:71:
e7:3c:df:db:06:6b:d3:c5:3f:1a:81:dd:9d:42:e2:
4d:89:7a:3a:5e:13:72:0c:04:e9:f8:b1:2d:5f:f8:
02:02:3c:8d:36:7c:bb:9a:05:8c:3a:b0:9d:96:f1:
c4:f0:11:e5:e3:fa:18:7e:a1:c2:89:47:a0:a7:cd:
05:ef:fa:c0:22:70:e4:b1:70:07:71:b8:e4:60:6a:
7f:98:ba:85:97:d3:62:ef:70:af:cc:bd:ad:bd:9a:
ca:ca:6e:86:c9:b8:47:5d:ab:9c:06:66:6b:fa:2b:
e9:96:3b:36:9b:38:16:4c:ca:69:ca:63:a3:6f:3e:
76:1f:76:55:2d:d7:70:06:b8:c1:1e:dd:41:29:d0:
74:fc:dc:9b:99:f5:8e:ad:c0:47:5e:41:a4:d4:d4:
d8:f8:5b:88:07:5d:84:65:34:13:d1:07:dd:0d:75:
f6:5f:e7:1d:48:41:79:85:e9:eb:ab:b4:0e:d3:e6:
1b:29:38:60:14:e2:6a:64:4f:75:28:b4:da:e4:71:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FC:09:07:89:0D:C2:BE:4E:02:E9:93:CF:FA:68:B1:DC:C3:23:AD
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3a:7e:71:e4:82:a6:f7:0b:64:c6:55:fe:6d:1c:bb:10:36:
6f:c1:d2:04:12:3d:ed:d8:27:d4:9b:31:d2:a7:cd:0d:43:4c:
12:cd:73:9a:6b:76:34:a2:4a:5a:90:63:b7:78:f3:af:35:07:
fd:22:2c:75:75:a5:9e:0e:87:fa:30:35:6a:1f:87:e0:4a:e9:
75:d2:18:7e:8d:5e:2d:fe:8c:35:bf:84:b3:32:cf:6e:91:23:
bc:bc:67:24:a7:f9:21:6e:c9:c6:b7:c9:f9:11:32:ec:84:4b:
4e:87:19:f5:32:b1:ee:92:03:e4:e4:39:31:4f:6c:da:b9:d8:
bd:66:f1:53:fd:19:8c:67:57:23:0a:1d:99:8b:50:d2:fb:70:
4f:78:87:eb:ac:74:6c:d9:e3:a6:56:eb:a9:5a:65:d1:0c:1c:
8c:f1:54:f4:71:e7:e2:4c:7c:82:97:93:f9:7e:0f:69:ed:7f:
0d:cc:79:80:e9:d9:fd:87:14:d0:6b:45:d7:ba:fd:39:7d:57:
52:50:ef:bf:b5:90:27:b5:e8:5a:a6:f5:09:80:de:1d:8b:f2:
f4:2e:89:ee:7f:a5:d9:41:09:3a:bf:4f:28:20:12:80:d4:8b:
ce:56:1a:23:9a:4d:a7:c7:a5:29:da:01:65:af:a2:de:32:1d:
9b:4f:5a:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPv+qmLIj6uBPbQGOXPn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjYwNDE3MDcwMTUyWhcNMjYwNDE4MDcwMTUyWjAzMTEwLwYDVQQD
EyhlM2ZjMDkwNzg5MGRjMmJlNGUwMmU5OTNjZmZhNjhiMWRjYzMyM2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc+3dfy28GGwBJycrP201P2QZ/3x
MX3IiNwhkwqpPvCuc26PIBM0qgiJRIxBT7kAffLU0X9vIW69xHHnPN/bBmvTxT8a
gd2dQuJNiXo6XhNyDATp+LEtX/gCAjyNNny7mgWMOrCdlvHE8BHl4/oYfqHCiUeg
p80F7/rAInDksXAHcbjkYGp/mLqFl9Ni73CvzL2tvZrKym6GybhHXaucBmZr+ivp
ljs2mzgWTMppymOjbz52H3ZVLddwBrjBHt1BKdB0/NybmfWOrcBHXkGk1NTY+FuI
B12EZTQT0QfdDXX2X+cdSEF5henrq7QO0+YbKThgFOJqZE91KLTa5HEu9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP8CQeJDcK+TgLpk8/6aLHcwyOtMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATp+ceSC
pvcLZMZV/m0cuxA2b8HSBBI97dgn1Jsx0qfNDUNMEs1zmmt2NKJKWpBjt3jzrzUH
/SIsdXWlng6H+jA1ah+H4ErpddIYfo1eLf6MNb+EszLPbpEjvLxnJKf5IW7JxrfJ
+REy7IRLTocZ9TKx7pID5OQ5MU9s2rnYvWbxU/0ZjGdXIwodmYtQ0vtwT3iH66x0
bNnjplbrqVpl0QwcjPFU9HHn4kx8gpeT+X4Pae1/Dcx5gOnZ/YcU0GtF17r9OX1X
UlDvv7WQJ7XoWqb1CYDeHYvy9C6J7n+l2UEJOr9PKCASgNSLzlYaI5pNp8elKdoB
Za+i3jIdm09acw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:22 2026 by rpki-client