Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: yaZk2zC1/5YrEo/3RhZfOUD+zEaEW5iEWvoHoRq0eOU=
Subject key identifier: DF:30:49:E1:DE:46:79:7E:10:14:00:C8:47:2F:5D:79:E9:AD:D5:28
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019D98BDEE7CEC43FE06D53DA425EC90FD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 16AA
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: 4VDga0wrktin3lFoePLe1jdIf7dLhiLEHgT8PG80N+c=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ee:7c:ec:43:fe:06:d5:3d:a4:25:ec:90:fd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=df3049e1de46797e101400c8472f5d79e9add528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:13:20:86:25:68:f4:72:bf:79:32:48:73:
ce:5b:1b:5b:52:95:76:bb:7f:4d:76:12:75:f9:a3:
c5:4c:4d:62:ad:c0:5f:b0:4d:77:f3:c7:5f:1a:01:
94:0b:a5:c0:de:4c:6d:8c:68:79:58:13:40:8a:69:
31:7e:32:67:c4:b7:30:d9:8a:bb:fc:1e:2f:5f:67:
e6:88:82:8a:5d:71:67:4c:3f:8f:77:a8:ac:2a:28:
54:42:86:37:ba:1e:f5:19:d3:eb:c9:67:d0:97:97:
82:6c:64:d6:11:06:37:21:81:ec:5d:04:0f:ec:7b:
11:00:62:e8:f2:58:70:fc:e6:a7:d4:8c:f9:95:41:
46:ff:f3:2e:9f:73:fa:bc:98:2c:15:ef:75:06:00:
09:42:82:a0:2e:10:df:20:8c:06:96:96:33:ba:fe:
c6:a6:45:03:d5:2e:ef:fe:ae:00:93:98:4b:c5:e2:
54:53:bc:a6:7f:74:6e:ec:4a:9f:a6:d7:44:80:0d:
e3:6e:b5:43:42:3e:df:e9:83:4f:89:7c:24:81:86:
9c:d3:a2:69:58:48:07:da:90:74:93:11:28:92:fc:
92:0e:0b:38:b4:95:68:68:c8:2d:ca:9f:d3:d6:04:
59:79:fc:d5:7a:c9:fb:3d:5e:e6:d8:a2:8b:58:55:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:49:E1:DE:46:79:7E:10:14:00:C8:47:2F:5D:79:E9:AD:D5:28
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:43:e2:e2:77:98:00:6b:16:0d:5c:74:11:53:d5:90:0e:a5:
4f:75:97:2a:05:56:6f:db:de:4b:c6:5c:71:48:4d:2a:69:e7:
b1:c7:ad:18:79:d1:57:6a:77:9c:ca:58:fe:ca:04:46:7f:ea:
6b:d5:6e:bb:64:d1:c6:60:65:ca:68:26:f1:c8:64:57:92:3a:
a4:52:f6:ba:c2:e6:1d:f1:9d:bb:ea:20:4a:92:ed:79:db:14:
ce:c9:71:0d:6e:c4:9e:03:02:9b:b6:32:cf:2b:33:6c:1e:4e:
c8:23:20:09:b4:da:00:3e:f9:02:f5:67:bc:c0:e6:5e:1d:fb:
e0:05:71:ec:2a:62:c3:6e:81:8b:98:f6:b2:5b:15:ec:bd:ca:
7d:30:e4:9f:92:a7:25:54:9d:e2:33:c1:4b:24:6d:57:8f:6a:
5a:8f:1a:97:2f:fd:20:85:4c:df:9d:ce:d9:e1:e4:c0:8c:1a:
3a:1a:c5:70:c9:10:66:df:b3:be:c9:b4:0c:84:77:14:be:c7:
cb:6e:8e:86:d4:8c:53:38:e2:da:e1:5f:ed:75:03:d8:87:1b:
c7:f6:94:45:16:bc:e7:f8:18:a4:41:6b:84:c8:3c:e1:4c:6c:
ea:9b:5c:77:e3:9d:8c:b8:77:e0:49:07:c4:59:8f:b5:cd:99:
ad:23:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:49 2026 by rpki-client