Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: hnIT4FlrrwadQn+eLVjHx+GI3A3xn3axym/eguFRIJw=
Subject key identifier: 20:0F:6C:31:9A:1E:38:EB:A6:9E:39:B4:B5:4E:19:65:0C:18:98:03
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 019D996264CDAF23AB9CBA8D0EC5B032B94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 03:00:55 +0000
Manifest this update: Fri 17 Apr 2026 03:00:55 +0000
Manifest next update: Sat 18 Apr 2026 03:00:55 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: WMDyAnh5jZ6lFqo/v27H99rcIerfSdpexcKq5mSTHqE=)
2: XHVi61WiazNgcFLfPPLSGooyVY0.roa (hash: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA=)
3: mYTd35kRkIBF88OmyEhVri7c_EM.roa (hash: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:64:cd:af:23:ab:9c:ba:8d:0e:c5:b0:32:b9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Apr 17 03:00:55 2026 GMT
Not After : Apr 18 03:00:55 2026 GMT
Subject: CN=200f6c319a1e38eba69e39b4b54e19650c189803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:80:aa:ad:83:a9:87:c4:36:d7:7b:97:68:
c8:85:5e:7a:e9:1a:b4:21:8c:13:02:7f:8d:4b:f6:
02:c5:f8:0a:32:8d:b7:a2:c5:62:70:d5:04:09:3c:
98:e4:77:f0:1d:5a:aa:42:39:d8:a4:07:46:07:3d:
e3:bb:49:71:f1:cf:68:38:6c:6c:73:98:9d:a7:94:
5c:3b:55:2d:4f:09:a2:ed:73:83:5a:e6:c4:26:8a:
4e:48:b4:18:52:65:ad:8d:06:5e:56:ef:90:06:b9:
d8:67:83:ac:50:bf:33:46:68:c3:3c:ea:25:44:8a:
90:c2:3f:d1:14:65:e4:d8:32:09:36:59:14:cc:ef:
1b:8f:b5:c3:2d:2d:eb:0c:e2:fd:1e:22:29:6c:cd:
bb:9e:cb:27:87:65:3c:f7:ae:90:08:b1:c1:55:bd:
be:b4:34:ed:b7:10:4f:81:5e:31:31:c7:a3:48:4e:
71:58:ac:7a:39:ca:3d:a4:9b:29:d2:1d:df:22:0c:
7b:7f:ac:ed:13:6c:6b:5b:5e:52:5e:89:bb:e2:16:
9d:ba:f7:e1:b0:4c:17:8b:0c:1c:07:54:08:34:db:
26:77:88:53:73:2f:d3:52:76:b4:49:46:99:d1:b5:
26:31:b4:6b:bf:dd:5e:94:97:9c:82:04:07:22:b9:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0F:6C:31:9A:1E:38:EB:A6:9E:39:B4:B5:4E:19:65:0C:18:98:03
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1a:88:59:df:59:20:f0:a5:ab:44:0f:93:20:e1:de:8b:1c:
8c:0d:1b:26:9f:85:3c:52:56:25:a7:58:b3:6a:eb:55:b4:85:
5a:e0:c0:4a:e5:46:4f:b7:29:da:ff:06:81:e6:5c:89:0b:13:
e0:ef:ae:f1:50:6b:79:fb:26:a7:4d:4c:ae:37:83:6d:83:ac:
b3:ab:0e:60:e9:db:b5:e7:d5:3f:28:5b:c0:a1:45:ff:b3:7d:
13:6b:82:20:a1:53:39:51:a5:73:94:0d:60:d3:7d:2d:83:a3:
7b:cc:fa:61:5a:25:65:dd:e3:63:f9:87:0c:18:1d:97:ee:e3:
31:91:82:bb:a4:f4:54:67:86:6e:4f:06:88:4e:34:54:b9:1a:
f9:10:91:33:93:70:9f:0a:23:bc:fb:ad:6e:5b:d2:c7:a3:fb:
d1:c9:90:7c:97:73:6e:c4:0d:80:e4:53:8d:26:49:10:b2:e9:
16:33:5b:2b:69:13:15:a2:bf:33:e7:72:1d:74:48:69:f6:f2:
ef:70:94:ab:00:ed:57:26:de:25:1e:5f:01:75:2c:a1:b9:9d:
1c:82:79:d3:4a:18:92:05:41:c8:a5:54:f8:3d:5d:7f:75:23:
2a:27:0c:dd:ec:04:4c:39:15:3f:84:f3:f6:67:3f:08:27:cf:
2d:50:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:18 2026 by rpki-client