Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier: PmUJ5Cg+zpOsvSXQFIdHxJfx3gBko6jNHkU5tMG5SiQ=
Subject key identifier: BC:00:5D:D4:8B:CA:0A:E7:09:C7:61:7E:5F:1D:3F:BA:70:60:79:A8
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial: 019D98F541776E48A01FF95E223E73F1F059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:01:43 +0000
Manifest this update: Fri 17 Apr 2026 01:01:43 +0000
Manifest next update: Sat 18 Apr 2026 01:01:43 +0000
Files and hashes: 1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: S4Kfj5GIqrrIM8YX1hWv5I/P663rVG/k3/2ZAQ3Ygm4=)
2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:41:77:6e:48:a0:1f:f9:5e:22:3e:73:f1:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Validity
Not Before: Apr 17 01:01:43 2026 GMT
Not After : Apr 18 01:01:43 2026 GMT
Subject: CN=bc005dd48bca0ae709c7617e5f1d3fba706079a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:2f:e6:61:19:ee:3d:7b:9a:83:11:ac:88:
83:a5:69:6b:57:9f:b3:09:af:18:15:8c:0f:91:28:
82:92:dd:aa:b4:3e:5a:3c:ee:bb:1a:42:68:b9:c8:
22:43:67:20:ea:46:5e:2c:68:3a:6d:a2:af:01:11:
fc:80:b0:70:87:25:21:e4:bb:34:9a:bd:0f:ea:6c:
c4:32:0a:4c:32:cb:ae:c3:b8:0b:c2:41:81:56:37:
51:fb:33:8e:f3:38:26:31:9b:8c:87:1c:e0:2c:41:
c4:a5:71:6b:62:fc:4e:40:c2:60:9a:3f:7a:50:63:
93:33:a7:9b:ef:72:be:46:9e:b3:65:d8:07:fb:28:
7c:d3:8a:3b:f5:77:c5:5e:0f:08:7d:f7:4f:38:4d:
d4:ed:79:75:f8:1b:6f:a2:a5:2c:93:31:f5:b9:78:
91:f3:4a:69:ee:c7:4f:d0:c7:2d:3f:2b:8d:69:db:
00:80:cb:40:1f:70:6c:0d:1b:c1:57:68:f2:14:3c:
eb:ba:97:4e:fc:38:78:80:c8:4e:23:7f:73:c5:1e:
56:28:48:99:c4:4d:cd:0b:77:52:f5:c8:9c:90:df:
aa:49:01:38:b3:74:3d:e9:e8:95:b0:ce:10:03:dc:
f8:01:f0:27:5f:6b:e6:45:70:65:1d:c6:85:50:e4:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:5D:D4:8B:CA:0A:E7:09:C7:61:7E:5F:1D:3F:BA:70:60:79:A8
X509v3 Authority Key Identifier:
keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:87:bd:da:bd:50:6d:29:8e:fe:91:4e:9d:a5:81:c5:ca:40:
4b:e3:89:39:ce:bb:46:65:17:ea:1c:a2:48:7d:80:1c:63:01:
61:9d:71:d8:0b:af:0e:ea:81:90:03:34:02:d9:b9:de:61:8e:
e1:a5:09:ca:3d:48:6c:e9:e4:37:f5:8e:10:df:e1:0f:84:0c:
52:47:b8:dc:8c:e4:de:4e:4d:ba:4c:77:84:4f:1e:7e:9d:3c:
22:75:da:35:cf:79:c1:b1:3a:a1:42:eb:e1:14:5d:9e:2a:25:
49:44:0b:56:f9:96:ca:20:bc:0d:36:37:92:65:49:08:c6:49:
38:b4:d9:2d:ed:0c:7c:e2:e1:af:ae:46:eb:b8:ea:1b:03:08:
5d:82:da:70:bc:21:85:da:17:71:73:cf:66:1a:b5:60:24:24:
56:23:a5:70:3c:5d:4f:25:f2:13:6c:97:fb:ce:13:5b:dc:22:
4c:19:2f:30:a3:51:a5:f8:86:2c:50:c7:e3:a1:22:6d:f0:01:
d3:58:28:b4:47:23:08:66:1f:15:7d:8c:f1:df:d7:da:c7:08:
cc:b6:cf:63:64:77:59:14:7a:10:b4:2e:cf:c6:a0:b2:99:c8:
f3:3c:37:73:e2:a6:4b:91:20:36:a1:88:24:7d:f6:8e:3f:d0:
03:4f:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:36 2026 by rpki-client