Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: 2bKmm1fxFSeRWYnZv7rT/2mUtxexDSFC/d2WkNpIonk=
Subject key identifier: 68:87:F5:D9:C6:46:18:74:C0:C8:EF:0D:08:C1:DE:79:1F:57:2B:EF
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019D99D0251DD16CFFBC9E0536DE3B8B8DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 122C
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: VOYjVK+z1zkOEwvc1jzMKuaUHVZBu+k+5A8IZRIZHeA=)
2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:25:1d:d1:6c:ff:bc:9e:05:36:de:3b:8b:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=6887f5d9c6461874c0c8ef0d08c1de791f572bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:34:cb:e5:cb:00:fc:04:b2:ac:1a:a7:a9:
8f:cc:c6:45:c9:d0:16:bb:13:ba:d3:d1:ed:de:a1:
15:b1:73:79:e5:0a:b4:c9:f0:8c:b7:2b:7c:a6:5e:
34:55:2b:ab:ba:c0:00:be:58:20:93:71:d3:b5:a1:
34:a7:d1:07:bc:7f:61:a9:c9:9b:48:fa:ba:81:ff:
e7:e2:a2:44:36:e3:d1:f7:84:00:4d:82:44:f8:1b:
e5:2a:b1:88:43:c4:c9:c5:34:12:6b:e8:64:77:6b:
23:47:f1:08:e3:c1:ff:80:ab:d0:4a:01:82:01:06:
93:55:b5:c5:f7:b5:d1:27:02:47:77:01:43:61:75:
56:36:77:8a:7e:89:19:eb:de:ab:39:a7:39:e2:46:
62:8b:56:b9:34:5d:8b:8b:f6:55:6d:00:46:3f:af:
b6:12:6a:6f:6d:82:34:9d:d3:bf:3b:dc:0f:d2:9e:
77:8a:fe:1d:39:21:cd:d4:4d:15:39:2f:3b:92:d7:
dc:a3:d4:f3:d2:84:5c:fe:f6:f4:0e:69:01:b1:7e:
8a:4e:6a:86:34:65:14:99:6e:82:ad:2f:a3:6f:f0:
55:f4:d9:78:a9:67:6f:92:9d:57:83:75:16:a5:e9:
b1:6f:56:90:7b:c4:27:e1:5e:ff:fc:41:7d:4f:9a:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:F5:D9:C6:46:18:74:C0:C8:EF:0D:08:C1:DE:79:1F:57:2B:EF
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d7:90:45:f8:d6:d6:6e:0b:f5:31:1a:20:68:8d:9b:16:b4:
2c:cf:95:e4:44:f7:d1:b0:11:94:22:cf:b7:85:f8:80:bc:be:
e8:94:29:1c:c9:df:7c:7c:4e:ac:25:68:59:65:5d:45:71:65:
3d:a8:6a:86:b3:d8:ae:40:c4:79:7c:68:14:a9:ed:c5:51:ef:
99:bb:80:b7:c8:96:45:fe:3e:f1:ae:9c:3c:59:14:e4:45:8f:
79:10:6a:d0:55:71:f6:93:2c:45:fe:3b:d9:bb:92:4c:da:3c:
22:8e:94:e5:32:c4:5c:81:34:62:c9:17:d0:76:3d:97:7e:ae:
55:a6:78:1f:e3:1f:d6:4a:a4:b8:e5:45:97:71:e5:c2:32:81:
ec:bb:aa:e8:e1:0f:9e:7f:8a:a6:61:ab:76:d4:cf:dc:85:27:
a7:5a:75:76:14:6e:4e:4e:99:8a:96:bc:a8:89:a1:00:85:37:
b6:47:47:96:68:0c:72:fc:52:84:22:3f:d5:cf:5e:41:b8:19:
cb:d3:68:a9:2a:8c:01:2a:d0:4e:ce:70:6e:27:32:54:c6:2c:
6f:78:dd:53:cc:75:8d:0a:ad:a0:07:c4:2b:13:eb:38:40:e2:
d1:41:7f:d6:ba:72:b4:4a:f2:ac:5f:c7:01:04:b5:c4:80:6e:
e1:ed:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:00 2026 by rpki-client