Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: k8LLHbMAVNvm1qQN3G8UCwS4TvgPUd5iUFjIwAvExZQ=
Subject key identifier: BC:C5:DF:3B:94:F5:C1:CD:60:9A:64:0D:24:63:4E:E9:22:8B:8A:3A
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 019D99620CBC187A65D239B8B04182FA4AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 1030
Signing time: Fri 17 Apr 2026 03:00:32 +0000
Manifest this update: Fri 17 Apr 2026 03:00:32 +0000
Manifest next update: Sat 18 Apr 2026 03:00:32 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: GymWt/sgMmBDmscFYwgkviu+voQPkSsp2AN0wfyYWvA=)
2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0c:bc:18:7a:65:d2:39:b8:b0:41:82:fa:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Apr 17 03:00:32 2026 GMT
Not After : Apr 18 03:00:32 2026 GMT
Subject: CN=bcc5df3b94f5c1cd609a640d24634ee9228b8a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:e8:2b:37:9c:26:3a:e7:7b:f8:e8:bc:7c:
a7:43:1b:64:ca:d4:a7:1f:b2:41:c0:1a:e4:49:15:
9a:52:d0:32:f6:c9:ef:50:17:75:66:cf:18:2f:72:
e3:16:de:92:46:6e:71:85:66:2b:40:61:bd:27:89:
cf:30:c6:99:ea:08:c7:80:d1:31:89:af:b8:5d:86:
b9:8d:a2:a9:3b:f2:81:51:f2:cf:80:02:c2:e4:4a:
81:29:78:5a:fa:ce:77:84:56:ea:70:e1:b0:f0:50:
e9:ec:95:ab:07:13:5f:50:a7:29:a9:82:05:49:97:
58:07:5f:26:fa:cf:5f:8b:9b:1c:8b:1d:fa:01:d7:
17:a8:52:20:95:4c:71:7e:54:af:b9:b0:a6:91:8a:
3f:4f:6b:12:22:f9:8d:a9:f2:3c:2e:39:07:f8:24:
4b:3f:e0:1d:a1:db:71:93:32:97:70:f3:8f:61:16:
64:f3:92:de:c8:cf:17:5c:82:f5:15:19:3e:ee:06:
94:d9:39:ee:03:5a:fe:33:2d:80:e3:8f:37:99:ec:
97:ae:fe:94:3d:5b:cc:f1:ab:a2:d9:ee:9d:0e:f4:
61:2b:c8:9d:e8:d8:6b:65:84:f3:d0:c1:f8:22:b6:
b6:80:3c:b8:9b:a0:84:ce:be:b9:0a:94:82:b0:75:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C5:DF:3B:94:F5:C1:CD:60:9A:64:0D:24:63:4E:E9:22:8B:8A:3A
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:78:6e:df:ef:03:08:b2:3b:4f:7d:d1:51:ff:b7:44:b9:
ac:6e:a7:1b:3a:ac:0d:8a:33:41:97:73:b6:10:5c:c4:6f:21:
f3:e4:09:b0:1c:02:d8:45:88:68:08:77:e7:9e:3d:db:be:07:
39:a4:b5:66:4d:fb:b3:20:9a:9e:fe:eb:07:0d:3a:93:31:60:
9c:3b:cc:ff:76:c6:b9:ac:1d:e2:2e:00:34:85:1e:a7:79:d7:
7b:62:d8:80:ba:aa:0b:6a:ac:b7:ef:e6:a1:71:e4:a4:4b:86:
4b:7a:9c:d5:ef:dc:34:ae:5c:b8:28:eb:a2:ae:c8:01:7b:27:
00:28:f4:b3:a7:0c:4c:0a:43:a3:01:c7:84:05:e0:64:85:65:
98:93:65:d6:6b:79:c7:fd:33:20:01:70:fd:a9:04:f9:2b:27:
a3:9d:a0:53:d7:0d:61:65:ff:96:46:19:38:2c:c0:23:dd:d9:
b5:96:a3:20:ed:a8:88:2a:27:70:b9:7e:d1:a4:95:65:f3:81:
66:ae:cc:46:2b:67:10:37:24:8f:16:41:0c:bc:f3:7a:61:5e:
61:9c:b8:24:02:91:c0:7d:22:34:28:b8:2b:36:88:02:db:03:
53:2c:35:00:fa:9c:af:13:58:cd:1a:cb:ed:f1:c3:f6:c9:a7:
b7:a7:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:12 2026 by rpki-client