Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: fqtxLcW9m8I5ku6egdmUV/SBKf9OBtSVCCop7P7E5AA=
Subject key identifier: 66:7A:00:7D:E5:4B:6D:82:70:25:07:8A:1F:0F:91:A1:07:02:6B:DA
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 019D98F41095AD995E6D04AA796A79B68E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:24 +0000
Manifest this update: Fri 17 Apr 2026 01:00:24 +0000
Manifest next update: Sat 18 Apr 2026 01:00:24 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: nz24LnHyErBFuKB40yCeBdxUu4Bv65jB35RK8tpbgbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:10:95:ad:99:5e:6d:04:aa:79:6a:79:b6:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Apr 17 01:00:24 2026 GMT
Not After : Apr 18 01:00:24 2026 GMT
Subject: CN=667a007de54b6d827025078a1f0f91a107026bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:c6:64:29:1b:f2:d8:fa:20:aa:4d:17:f2:
29:9c:a1:f2:dd:3d:27:c7:38:b5:53:38:fa:a9:0f:
7f:06:24:9d:48:c4:d8:14:f0:5f:d8:5d:3c:8a:03:
85:b8:1e:b3:2a:49:e2:b5:6a:3c:df:60:21:0d:72:
ad:c5:2c:d0:c2:cf:4d:81:48:21:f0:d9:c7:77:89:
cd:b0:a7:06:a1:39:6b:97:1a:da:2e:51:11:7e:d0:
13:86:6a:69:fb:38:ae:3a:59:65:1f:2f:c5:cd:8e:
2a:3e:f1:44:60:07:d4:9d:65:18:18:d3:7a:f0:a2:
f7:97:4d:18:56:8f:5b:ed:5f:dc:c9:c2:d3:31:25:
3b:0f:ba:cc:1d:72:25:99:5a:5a:64:6b:77:76:1c:
b1:17:c6:8d:ab:f6:7e:33:d1:db:40:a6:10:9b:a5:
85:57:d7:66:ef:ab:4c:01:27:d1:ca:1e:a8:1d:02:
ad:8a:dd:ff:fd:b6:f7:45:d0:cc:a5:69:6b:cd:6e:
4a:77:ba:92:78:23:5a:74:c0:b6:26:06:b2:7d:58:
71:10:1a:08:a3:cb:fb:52:33:ac:c9:d9:91:d1:06:
a9:dd:90:29:90:3f:24:92:3c:79:7b:5e:a5:b4:44:
2f:b0:98:38:84:e5:8a:f0:70:5b:68:c3:3f:d4:b9:
8e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:00:7D:E5:4B:6D:82:70:25:07:8A:1F:0F:91:A1:07:02:6B:DA
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:c5:58:4b:e4:ec:b8:6b:7a:39:4c:c9:93:49:de:79:24:
5b:69:b9:45:35:d1:b4:77:2b:3c:48:33:f9:10:56:6c:51:5f:
89:49:d2:c7:f5:0b:85:14:04:66:7b:af:73:a7:ae:81:43:e9:
ba:20:4e:87:6f:1d:8a:25:14:57:ed:9c:ca:69:ab:89:13:ef:
e8:8c:31:d3:50:56:c2:4e:e1:35:5c:67:92:c3:48:95:e3:dd:
23:be:e5:e2:51:04:eb:23:8b:15:51:12:0a:dc:5d:ab:11:a9:
99:b9:a0:bc:0f:d0:9e:33:c9:91:fe:b1:20:9e:69:df:02:7b:
0e:bd:77:b7:f0:d2:b4:61:34:f9:b2:3b:99:c8:19:e6:61:ed:
22:c4:b8:dc:89:cd:53:43:83:ab:8a:5a:c0:df:b8:f9:0d:30:
84:4a:8d:d1:cf:ca:f4:33:35:3b:60:9d:63:14:1f:2e:25:67:
00:59:d7:17:5e:51:85:44:fd:a5:75:32:33:29:eb:4d:d4:4e:
33:dc:3c:ba:3a:13:cd:20:40:e9:12:90:91:a9:cb:d0:39:f6:
ac:ce:0f:86:e2:7b:9b:65:bf:cc:d5:36:3c:d2:15:b3:4d:e9:
2a:39:87:34:44:b7:8f:22:97:d9:ef:5f:1f:ec:49:c0:5c:92:
74:b2:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:38 2026 by rpki-client