Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: IHhy6ogFM8w+PcoFS4HpGPMzMvUw7QyYxgqVutWpTco=
Subject key identifier: 94:E1:18:1E:6F:5B:B3:A2:E0:3F:0F:23:9C:12:E7:70:32:8D:A2:A3
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019DA41CDB4B6AE28596B4DAA0577D91A2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 18E7
Signing time: Sun 19 Apr 2026 05:00:47 +0000
Manifest this update: Sun 19 Apr 2026 05:00:47 +0000
Manifest next update: Mon 20 Apr 2026 05:00:47 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: aXIOerpcdsMpGyuUdNOcYnw1Jfm66Xxu726j+KHkUMY=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:db:4b:6a:e2:85:96:b4:da:a0:57:7d:91:a2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Apr 19 05:00:47 2026 GMT
Not After : Apr 20 05:00:47 2026 GMT
Subject: CN=94e1181e6f5bb3a2e03f0f239c12e770328da2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:f2:ee:54:86:47:dc:d0:5e:7a:27:ef:5f:
57:a4:12:f8:44:5a:0c:75:5e:8e:ab:64:10:d9:a5:
84:5f:f8:0d:98:76:64:81:28:8a:36:be:51:bd:57:
9b:9d:e2:22:a3:e3:af:2f:a1:96:19:f4:ef:66:41:
e2:02:25:3c:c0:25:a6:92:f9:e2:72:74:b0:c5:b9:
b8:5a:ad:db:85:4e:0e:06:9d:a3:3e:a2:f4:1e:7e:
07:0a:09:3d:cf:da:a3:47:43:11:e9:4a:1a:93:7d:
69:5c:da:6a:f3:c9:16:48:85:77:6e:54:70:3b:34:
95:16:92:e3:ce:96:33:b9:ab:94:17:94:77:8c:08:
db:f2:15:97:02:bd:ed:d1:81:bc:6f:e6:fd:ee:12:
87:67:56:89:31:30:8b:1a:89:4b:6d:8d:bd:83:ec:
5f:29:dc:6c:7d:d0:91:15:45:74:1a:f0:87:ff:79:
4c:98:3b:56:b6:2e:f8:2c:08:1e:d1:e4:86:19:c3:
40:9e:43:ab:67:2d:1a:33:16:23:ac:0b:35:58:b4:
53:f2:6f:f2:58:a1:32:27:48:fc:d1:9f:3d:32:1e:
6a:b9:5a:bc:c6:33:2a:50:61:9f:d6:60:2b:4d:e5:
18:f5:06:7d:a5:37:cf:5a:f9:71:34:70:75:8e:17:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E1:18:1E:6F:5B:B3:A2:E0:3F:0F:23:9C:12:E7:70:32:8D:A2:A3
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c6:45:35:b9:89:8d:a3:2b:ed:25:f1:76:a6:48:cf:3c:62:
be:8e:5f:36:e9:9d:f1:69:72:a0:9f:28:71:f5:3e:e5:e0:19:
07:3b:d4:7a:16:43:40:7a:d3:57:3a:e7:8d:40:1e:7e:28:98:
16:7f:07:41:9e:d9:0e:1f:af:de:6a:d5:2c:e3:3e:8d:95:32:
22:85:8d:e6:85:ac:35:62:23:98:49:4f:33:b5:3b:28:51:b2:
c3:04:e9:99:e8:92:31:73:9d:3a:da:e1:ba:ca:bf:33:d4:6a:
0f:04:35:0a:46:7d:f7:02:56:11:e2:3b:61:51:1c:8e:85:e2:
0f:66:60:b2:3c:78:81:cd:d5:05:3e:d2:02:98:a0:55:11:07:
95:94:89:ab:94:05:f4:e5:63:cb:23:1d:20:55:cb:14:79:cc:
c9:5e:0e:89:40:51:6b:05:e5:c3:10:e9:24:2e:9f:82:18:1e:
87:73:56:90:80:1d:87:a3:9e:01:c4:c0:91:27:fd:93:48:e2:
5e:0d:5c:14:1f:e0:d2:60:67:30:e9:48:b5:2f:0b:8c:4f:42:
f5:02:84:bd:5d:b4:73:c3:8e:f2:fd:cc:64:0a:e2:49:87:87:
8a:fa:01:a8:30:ea:70:61:60:55:40:99:2b:52:1f:79:4b:8a:
c0:c8:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:36 2026 by rpki-client