Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier: kaWRw0LdyCs1HXP+sdaNBO7XyjSMHO5GZY/xvgYLKMQ=
Subject key identifier: 89:CB:3E:63:95:28:D4:DA:09:55:AD:38:E7:E3:DA:5F:FA:C1:36:EB
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 019D9A751F422FBBDC8E7F2430D7A3F52327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number: 0605
Signing time: Fri 17 Apr 2026 08:01:00 +0000
Manifest this update: Fri 17 Apr 2026 08:01:00 +0000
Manifest next update: Sat 18 Apr 2026 08:01:00 +0000
Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: pYvl6Ng2Xd3k4fYT73IBTl7xNao8Evg5+nUrBSvSstw=)
2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1f:42:2f:bb:dc:8e:7f:24:30:d7:a3:f5:23:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Apr 17 08:01:00 2026 GMT
Not After : Apr 18 08:01:00 2026 GMT
Subject: CN=89cb3e639528d4da0955ad38e7e3da5ffac136eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:62:09:5c:39:b3:20:b1:98:d0:eb:57:80:
eb:35:6f:8e:89:84:84:6c:47:6d:4c:08:f6:87:b9:
81:8d:dc:f1:28:fc:70:56:bf:43:ed:e2:71:42:eb:
fe:be:06:8a:59:41:f0:83:41:6a:71:14:89:49:19:
d4:66:61:49:55:71:9f:a4:1b:60:df:e4:5d:82:c5:
3f:25:82:17:7c:20:92:3a:9f:a3:af:c0:83:42:b5:
17:85:8e:a4:c6:65:6b:60:c5:a9:23:16:e9:ea:60:
1e:70:b7:40:97:e1:b3:47:d1:ce:da:0d:63:41:26:
ba:08:48:70:fb:1c:78:e4:d5:1a:48:5d:71:54:70:
04:ec:76:5a:18:05:db:5b:e9:8a:7e:76:8c:bd:36:
d7:13:2d:14:1d:f1:f7:dd:e7:0c:f0:f4:57:eb:98:
56:3a:00:62:90:a6:e3:a6:ea:06:95:2f:6e:c6:87:
a1:69:06:33:42:33:6a:89:c5:c3:74:9e:fe:26:26:
0d:34:09:28:99:7f:5d:91:b7:a5:7d:98:a8:ff:d7:
2d:89:f5:2a:e3:88:39:84:62:bd:48:06:50:d8:ab:
87:37:30:b1:89:d8:b1:9d:1e:97:0a:44:82:f7:a6:
d2:79:14:98:e7:3e:26:52:49:06:0f:19:f3:a3:9e:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CB:3E:63:95:28:D4:DA:09:55:AD:38:E7:E3:DA:5F:FA:C1:36:EB
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f1:f2:05:ce:8e:ee:aa:50:74:2f:f6:9a:ea:54:25:6d:1a:
61:b8:e6:79:b7:b3:cc:83:d2:f6:6f:6d:0a:13:ec:56:0f:77:
ad:91:b8:0a:38:d6:07:87:25:4f:42:1c:94:47:08:8c:e0:f6:
5e:44:d2:f8:6f:e6:81:7c:b8:2a:3f:87:b5:e7:9e:c2:b0:db:
e5:47:f9:50:8c:73:d1:42:2a:45:74:85:fa:3b:ea:a7:4a:bd:
8c:fc:3f:c5:f3:ff:b2:df:84:2c:a4:4f:8d:a3:05:9f:d2:f3:
38:7c:83:7f:6e:97:c6:e0:ef:70:c7:40:79:a5:79:9d:46:33:
33:fe:2e:80:eb:47:4e:f8:23:bc:64:64:f0:dd:3e:cd:59:6f:
69:da:bf:2c:fe:bf:12:47:a4:c0:f8:0e:3b:83:70:f5:7d:3d:
24:d1:f8:d8:c8:d8:a3:56:7d:89:20:3d:c3:a4:d0:dd:95:b2:
54:fd:59:00:36:de:01:10:2e:9a:75:fe:d3:67:dd:86:e6:04:
b6:eb:1c:72:34:94:ec:97:8b:f1:3d:ff:08:bc:dd:e9:ce:d2:
df:44:8c:2e:28:06:15:df:6a:f4:12:cc:c1:ad:d4:89:22:5f:
7b:fc:2c:e6:d1:45:4f:6e:f6:ff:0b:7c:2e:63:25:3a:6b:96:
01:09:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:17 2026 by rpki-client