Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: 6zd7teKJOMrG8f31P6E4hv+xLOhwlnyxNZpkAX4iPMg=
Subject key identifier: C2:C2:85:50:28:59:C6:37:63:CC:D1:3C:9B:FE:62:C5:80:9D:CE:F7
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 019D98F44DEC1BEB701EBD558B897B329364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:00:40 +0000
Manifest this update: Fri 17 Apr 2026 01:00:40 +0000
Manifest next update: Sat 18 Apr 2026 01:00:40 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: ChhmrbNT067j8XbJkRD2NYcYsymDwydPpVDqtbOiq2U=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4d:ec:1b:eb:70:1e:bd:55:8b:89:7b:32:93:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Apr 17 01:00:40 2026 GMT
Not After : Apr 18 01:00:40 2026 GMT
Subject: CN=c2c285502859c63763ccd13c9bfe62c5809dcef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:a1:95:5e:e7:d5:9d:15:33:1f:f5:e0:ec:
a2:fb:cb:e8:a7:fc:28:b5:d2:38:9e:56:03:0d:0d:
c6:d3:4b:19:a2:7b:c3:bc:64:16:08:b1:ef:13:a8:
68:17:d9:7e:9d:97:42:f4:f4:eb:e1:f0:f2:a3:b6:
48:42:20:7e:04:6e:c5:83:ed:5c:80:0b:99:1f:91:
2c:41:90:2e:87:19:0d:9b:a2:c5:65:c8:a0:f7:eb:
55:fa:f9:19:12:10:69:06:1e:c6:fc:ae:d9:c6:21:
49:f2:46:5b:3e:99:7c:1f:ef:c8:fe:ab:1f:35:db:
7a:41:cb:1c:c6:3f:f8:07:bd:db:84:48:7e:93:23:
35:f4:30:a7:95:5d:26:0c:09:9d:8d:0c:c3:67:19:
81:99:31:6f:94:c6:79:96:77:2d:e5:93:e6:ad:a0:
61:57:8b:cd:c4:40:cc:36:55:43:db:85:19:1c:1c:
f3:45:71:a9:9d:9a:0c:35:81:a9:3a:fd:c9:af:4c:
04:66:62:9e:16:8d:b0:b6:a6:d6:ac:02:f5:99:52:
c1:14:3b:c0:7d:f9:1c:2e:ae:7a:01:77:fe:59:33:
09:40:f6:1e:d5:8f:76:7d:bc:26:5e:0d:17:12:f0:
55:79:c5:d8:ef:1f:bd:5b:9c:81:37:f4:24:31:db:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:85:50:28:59:C6:37:63:CC:D1:3C:9B:FE:62:C5:80:9D:CE:F7
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d4:2c:e8:29:04:97:60:be:b4:16:df:44:59:16:29:18:f4:
a0:10:f2:01:fe:de:44:8d:6e:3e:03:e0:62:45:db:f1:6a:d5:
0e:bb:e5:f3:10:9b:29:00:20:51:89:af:e6:49:71:87:d0:f7:
bc:62:d0:55:c2:f2:9c:ea:36:af:af:43:a7:1b:24:6f:78:41:
c3:c7:32:c0:53:8b:15:b8:8a:59:c4:ef:a0:a7:83:35:ff:4a:
af:02:e6:94:88:6e:14:7c:65:f7:7a:b8:5c:20:e0:a4:e7:29:
12:13:c3:ad:46:ee:20:55:56:65:c3:02:cd:70:dc:08:1f:94:
cc:dd:86:a0:96:5b:d3:ed:1c:cd:26:af:22:98:80:43:d2:ca:
f9:45:f2:38:70:47:fe:1b:61:34:92:c8:1b:0a:1c:4f:c7:3f:
20:7b:c7:d4:66:5b:3b:97:d7:14:5b:80:07:89:57:a0:03:9b:
4d:85:d2:cf:f6:66:f1:98:36:68:a1:7f:d7:34:3a:96:1d:6e:
e5:de:76:a2:fc:f2:bf:c5:09:0a:bd:b2:1f:b9:be:47:b6:95:
d4:f8:c1:d3:7f:59:1f:a0:f1:8f:2d:fc:e1:87:5a:09:82:c1:
9b:be:2d:c9:45:f3:0c:18:6d:45:2f:99:e4:60:22:57:09:b7:
1f:98:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:37 2026 by rpki-client