Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: i9fyLVzlk/jMnThkfJ6yT5RbnerOhIvd4E8kfIXJ0ao=
Subject key identifier: D1:D3:AB:0D:35:6E:E6:4D:15:9C:94:E7:BA:4D:5F:28:10:52:11:54
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 019D98F533935B03A5FBBE37C5BE9542A7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:01:39 +0000
Manifest this update: Fri 17 Apr 2026 01:01:39 +0000
Manifest next update: Sat 18 Apr 2026 01:01:39 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: 0EAmQNpFbyzmDYhJ6mW5ZvGmFCouMRj+69A7N7wZ6ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:33:93:5b:03:a5:fb:be:37:c5:be:95:42:a7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Apr 17 01:01:39 2026 GMT
Not After : Apr 18 01:01:39 2026 GMT
Subject: CN=d1d3ab0d356ee64d159c94e7ba4d5f2810521154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:25:d0:90:a5:f4:01:9b:b5:53:6e:3b:a5:
d1:c5:46:4c:ce:6a:a8:81:5b:db:0e:07:21:68:ce:
fb:40:f7:40:38:b2:74:15:e4:3c:f4:72:36:f6:dd:
05:9b:b2:d3:a5:6c:75:01:9e:18:5a:ef:42:f8:0f:
d4:64:01:ce:03:25:b3:03:43:cf:d6:94:af:88:77:
a7:5a:bd:e8:7d:5c:b9:fd:99:50:46:ee:97:b6:9d:
a8:c0:84:ca:8c:88:5c:c9:46:47:82:8a:40:77:81:
f5:48:73:75:af:2a:14:2c:bd:96:9d:9c:84:bd:ed:
84:47:4d:82:ef:db:d5:7a:e7:9a:45:23:f4:e0:a7:
1f:ea:f2:da:c3:12:53:7f:4c:c5:1f:6b:b0:38:e8:
c8:b2:1e:ce:18:46:41:b2:75:0b:59:6b:6f:e3:26:
47:a3:a7:7b:44:ec:f2:1d:6f:bd:9d:dc:79:66:d5:
e9:dd:ee:1c:d1:96:f8:75:c2:a1:42:8c:95:28:da:
05:73:fc:0f:bf:40:a3:e4:87:90:31:a0:76:c2:8a:
22:54:74:21:30:49:d4:c2:fd:89:fa:d5:e8:f9:ca:
9f:7e:58:2e:a6:54:d8:32:8a:fc:03:2d:fd:75:56:
b9:c9:eb:51:cb:dd:a8:cb:28:4c:75:0a:27:84:d3:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:AB:0D:35:6E:E6:4D:15:9C:94:E7:BA:4D:5F:28:10:52:11:54
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:15:b5:1a:af:04:29:2c:6a:f4:35:53:17:00:7e:81:39:01:
ee:bb:c4:66:5b:45:61:9e:78:c3:d4:6b:a4:fd:13:84:2d:f8:
95:28:ea:ad:55:4d:75:60:c5:96:b4:bc:95:6e:8d:29:61:9d:
09:91:b3:3e:f2:9d:4a:68:4b:b4:b0:60:da:41:9e:d8:23:9a:
bd:9c:9b:7f:52:db:ce:5c:ab:5b:00:29:04:0d:8f:42:f9:56:
65:9b:7e:52:2b:4a:5d:e9:6a:fd:e1:5d:6d:09:12:34:2a:c2:
55:29:e4:e2:00:16:1f:ce:60:b7:c4:52:55:24:94:f6:b4:57:
4c:bb:59:35:24:47:48:69:12:1f:7b:43:3e:69:fe:7c:ea:e5:
da:ab:0a:d2:95:be:00:fb:34:11:d0:c5:07:47:c6:b6:81:40:
87:79:93:e6:57:65:a5:83:0c:02:4f:d5:1d:22:0d:d7:8a:c7:
94:b2:fc:59:3d:24:b4:58:ae:00:29:08:0a:96:cc:77:60:9e:
c6:44:aa:06:e8:17:49:7e:63:9a:4d:9c:e5:39:23:54:b4:cb:
96:48:d3:cf:76:31:db:45:3f:2c:50:18:bf:4f:49:c0:e2:14:
c5:15:3b:fb:42:06:b7:ac:ca:13:d6:ae:ac:2f:2d:ca:7c:3e:
5f:d3:7c:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9TOTWwOl+743xb6VQqe4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDUxYmYxZTJhNTMwMDBiYzIzMDYwNTYwZjJjYzBiMzlk
NDk2ZWYwHhcNMjYwNDE3MDEwMTM5WhcNMjYwNDE4MDEwMTM5WjAzMTEwLwYDVQQD
EyhkMWQzYWIwZDM1NmVlNjRkMTU5Yzk0ZTdiYTRkNWYyODEwNTIxMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHQl0JCl9AGbtVNuO6XRxUZMzmqo
gVvbDgchaM77QPdAOLJ0FeQ89HI29t0Fm7LTpWx1AZ4YWu9C+A/UZAHOAyWzA0PP
1pSviHenWr3ofVy5/ZlQRu6Xtp2owITKjIhcyUZHgopAd4H1SHN1ryoULL2WnZyE
ve2ER02C79vVeueaRSP04Kcf6vLawxJTf0zFH2uwOOjIsh7OGEZBsnULWWtv4yZH
o6d7ROzyHW+9ndx5ZtXp3e4c0Zb4dcKhQoyVKNoFc/wPv0Cj5IeQMaB2wooiVHQh
MEnUwv2J+tXo+cqfflguplTYMor8Ay39dVa5yetRy92oyyhMdQonhNMhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHTqw01buZNFZyU57pNXygQUhFUMB8GA1UdIwQY
MBaAFO3VG/HipTAAvCMGBWDyzAs51JbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEt
Yzc1N2IxNWYxY2NmLzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEtYzc1N2IxNWYxY2Nm
LzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRW1Gq8E
KSxq9DVTFwB+gTkB7rvEZltFYZ54w9RrpP0ThC34lSjqrVVNdWDFlrS8lW6NKWGd
CZGzPvKdSmhLtLBg2kGe2COavZybf1LbzlyrWwApBA2PQvlWZZt+UitKXelq/eFd
bQkSNCrCVSnk4gAWH85gt8RSVSSU9rRXTLtZNSRHSGkSH3tDPmn+fOrl2qsK0pW+
APs0EdDFB0fGtoFAh3mT5ldlpYMMAk/VHSIN14rHlLL8WT0ktFiuACkICpbMd2Ce
xkSqBugXSX5jmk2c5TkjVLTLlkjTz3Yx20U/LFAYv09JwOIUxRU7+0IGt6zKE9au
rC8tynw+X9N8IA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:44 2026 by rpki-client