Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: NwcBwZLw0a/vOZH2+m+ecUF2yROkAzGxFs4Rywe5P6E=
Subject key identifier: 38:5A:F6:07:C7:3B:CC:C1:EC:DA:5A:DC:48:6B:5F:A7:DD:A7:69:4A
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019D9AABBD12B09407BCF5806DA276F988E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:00:39 +0000
Manifest this update: Fri 17 Apr 2026 09:00:39 +0000
Manifest next update: Sat 18 Apr 2026 09:00:39 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: mR8Z78N1no8WS0m9lcO3n+I+9WfJgSmjPQK1T80pzTk=)
2: RwU9zWthyfSOUWuvsWlsVhpMbmQ.roa (hash: 74TavDCjufR6GUNTwdp6AJnNFnxix31gx+8KWS5C2g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:bd:12:b0:94:07:bc:f5:80:6d:a2:76:f9:88:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Apr 17 09:00:39 2026 GMT
Not After : Apr 18 09:00:39 2026 GMT
Subject: CN=385af607c73bccc1ecda5adc486b5fa7dda7694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:59:a5:be:59:17:1a:80:fb:43:6d:8a:71:
13:96:b5:27:99:68:99:ba:9d:7a:6c:9d:3e:34:4f:
92:10:a4:ce:fd:c7:77:97:28:9c:a9:62:03:6b:97:
34:a6:6c:34:f8:9b:c9:ad:83:8d:ae:1b:2a:f1:f4:
d0:4e:a8:e6:0f:aa:79:f9:f6:11:10:bb:68:8a:b9:
63:66:22:17:f6:b3:bb:b9:45:a4:06:48:f1:ef:52:
b4:2e:7b:d1:65:33:1d:6a:3f:70:f7:80:a7:13:29:
b1:ae:c9:9c:54:51:92:a1:d5:1c:74:a4:dd:28:df:
39:a5:3e:d6:a3:d6:dc:ac:4c:a4:3b:f4:5b:9e:d2:
31:8d:a2:e9:95:35:7d:62:04:3c:f1:6e:0b:ad:93:
34:66:6a:1f:cd:92:db:4d:c3:55:63:21:48:87:2a:
91:6d:eb:f2:20:6e:84:57:70:68:d6:a1:85:6e:96:
2b:0e:bc:4e:57:b6:78:10:96:91:00:c8:e9:9a:a8:
c8:31:11:77:b1:cb:45:ab:f4:98:f2:f9:84:4b:ab:
fa:b0:9c:bc:95:a9:92:3d:a0:c6:6c:78:d0:28:28:
a4:b9:1a:4e:76:dc:e3:2c:31:b0:09:bd:ec:70:43:
ba:db:f0:95:3f:e2:4e:43:34:ca:89:7e:ac:fe:f9:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:F6:07:C7:3B:CC:C1:EC:DA:5A:DC:48:6B:5F:A7:DD:A7:69:4A
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4c:51:8d:b6:62:8c:37:ef:c8:b2:cc:c2:22:0e:4f:7c:17:
9a:1d:72:05:ab:87:bf:aa:a7:36:d0:90:0c:78:6b:b1:7a:06:
bc:57:ea:3a:0e:2f:61:a7:24:e1:66:67:96:c0:06:e5:3d:b2:
a9:6e:02:3b:08:4b:10:79:dc:a1:da:31:3b:01:c9:6b:ab:be:
71:c5:b7:2b:05:dc:a8:0f:f3:8e:a3:1a:a3:04:10:69:a4:d9:
85:20:80:ad:a5:1c:10:3c:64:4f:f7:1b:9e:04:f1:75:0c:65:
bb:de:be:84:56:f4:fa:52:62:01:e1:ff:a5:77:6f:da:00:8b:
6c:5d:7a:83:2b:4a:55:77:48:40:17:b5:e9:c5:53:81:00:ec:
4d:bc:46:34:26:e2:fa:14:81:77:dd:ff:a8:6b:5f:e9:ff:84:
51:48:b3:ee:f7:d4:4b:4b:3f:d3:c3:c5:0b:c2:82:03:7d:03:
87:da:2f:ae:06:bc:5d:5a:f5:29:89:9e:8c:81:fd:32:02:90:
29:14:45:57:8a:c6:cb:79:bc:bb:8e:f7:ee:61:66:25:51:10:
43:22:b8:eb:84:40:03:c4:ce:ca:ea:54:ba:62:a6:37:9e:2d:
eb:05:b0:e8:75:a4:a5:66:8b:45:46:76:b4:e4:40:92:a0:3e:
c0:49:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:45 2026 by rpki-client