Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
File: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft (raw, json)
Hash identifier: Zjx7KN/yAnRMs2ZDZEWpSQoS08qXuvuDfFzbGU/rb40=
Subject key identifier: 4A:75:AC:5A:24:F6:E3:AF:A2:C2:97:1F:7E:A9:94:31:EC:C2:A5:92
Authority key identifier: ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
Certificate issuer: /CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Certificate serial: 019DA4C1EFF0F84113AEB0567636411E25FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
Manifest number: 15CA
Signing time: Sun 19 Apr 2026 08:01:06 +0000
Manifest this update: Sun 19 Apr 2026 08:01:06 +0000
Manifest next update: Mon 20 Apr 2026 08:01:06 +0000
Files and hashes: 1: 7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl (hash: eaBkSL1qm0B1WD0LIrQC2WNoeFlwSQVlbRfAsNKSi9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:ef:f0:f8:41:13:ae:b0:56:76:36:41:1e:25:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed2fa686d18c8020afc6adf55afdbe660dbaac15
Validity
Not Before: Apr 19 08:01:06 2026 GMT
Not After : Apr 20 08:01:06 2026 GMT
Subject: CN=4a75ac5a24f6e3afa2c2971f7ea99431ecc2a592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:c9:52:46:03:f5:19:5d:8f:cb:00:94:0f:
49:67:0e:f5:1f:a7:b4:8f:42:93:30:a4:8e:07:4c:
4a:fe:bf:79:65:fd:e2:1b:fe:ca:87:3a:c5:38:a2:
83:18:74:b1:4c:c5:28:a5:f6:dc:2e:63:b8:c8:44:
c2:a0:47:d9:4d:29:5e:5a:69:ac:89:4d:4f:45:9b:
00:db:82:ee:7c:b8:31:38:9c:d9:40:d8:3d:ee:94:
95:a6:c1:78:ba:2c:48:0f:63:a9:f4:91:5f:ee:59:
13:08:db:83:33:93:6c:d7:f6:e5:73:52:ef:fe:50:
0a:14:be:1e:78:eb:4b:f8:d0:59:4f:51:38:e8:98:
97:61:48:ca:08:0e:cf:9a:80:57:30:93:08:c3:ce:
47:7c:f7:a0:40:df:93:74:be:88:97:ca:aa:30:d3:
b0:82:25:50:e6:ac:ea:d4:5c:0a:d2:7a:7d:26:f9:
7b:93:43:b9:02:a9:d7:b0:15:fd:d2:07:5c:37:81:
56:1d:77:ac:c3:62:3e:81:22:cf:59:00:d5:08:82:
ed:c2:f3:62:47:d3:bd:c6:41:6b:6e:1f:ae:c0:d7:
73:aa:8a:d0:73:e8:48:e0:e5:d9:8a:5a:d7:33:9e:
e3:e5:12:4a:01:a7:03:51:c1:db:60:ec:d2:06:31:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:AC:5A:24:F6:E3:AF:A2:C2:97:1F:7E:A9:94:31:EC:C2:A5:92
X509v3 Authority Key Identifier:
keyid:ED:2F:A6:86:D1:8C:80:20:AF:C6:AD:F5:5A:FD:BE:66:0D:BA:AC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7S-mhtGMgCCvxq31Wv2-Zg26rBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d78fc5-bf3e-4686-8d85-c33f8a21122c/1/7S-mhtGMgCCvxq31Wv2-Zg26rBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:03:0c:b1:15:e4:a5:6a:b5:5d:7c:62:4e:20:52:84:c7:c2:
8a:71:f1:2d:dd:05:89:31:aa:61:96:6c:48:e7:ab:76:cb:28:
90:81:98:27:df:3d:2b:e1:57:99:68:c5:fc:51:6a:49:20:6d:
18:4a:4e:e2:04:29:ad:ef:2f:67:93:06:3a:05:a0:fb:c2:f1:
00:54:b8:0a:54:c9:45:bf:b9:8d:d2:d6:d0:df:c9:0f:45:b7:
86:3f:c4:17:2e:c7:73:88:97:72:32:26:39:2d:49:ec:f7:46:
5d:b9:d6:14:76:e4:41:f8:68:22:99:69:fe:d9:60:58:08:d1:
8b:c3:39:3e:9c:9e:ad:35:19:f0:53:8b:44:da:de:06:f4:6b:
a5:01:d4:d2:33:c0:72:03:22:a6:fa:de:4c:cb:16:d2:5d:43:
62:9a:d7:db:8e:1c:f2:bc:70:77:84:cd:86:be:14:00:29:b3:
09:8a:3b:99:fa:e1:77:7d:de:2f:75:20:95:7d:59:a6:92:d9:
88:96:5b:fb:c1:1b:7d:c7:99:02:76:4b:d9:56:1d:d9:de:c0:
8a:d0:e7:c0:cb:c3:52:e7:43:7b:c1:e0:ec:e6:95:00:ef:55:
4c:4c:4f:25:39:41:54:5b:0c:df:49:7e:64:d8:8b:13:f8:21:
01:04:da:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:53:03 2026 by rpki-client