Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: Bstlz7EH7H2kSgtcIbE1nPA/2b0rMKG8bhn2PT+v7d4=
Subject key identifier: C9:E2:E1:DF:40:8C:94:85:A2:42:5B:8C:89:A4:8B:56:7B:1F:2A:1D
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019D999972A8DEECD5A9C16985DE363A6433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 04:01:03 +0000
Manifest this update: Fri 17 Apr 2026 04:01:03 +0000
Manifest next update: Sat 18 Apr 2026 04:01:03 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: IinxnlvKpyPD4KC4OiYu+AbrB9R97UnEChZmWnka4k4=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:72:a8:de:ec:d5:a9:c1:69:85:de:36:3a:64:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Apr 17 04:01:03 2026 GMT
Not After : Apr 18 04:01:03 2026 GMT
Subject: CN=c9e2e1df408c9485a2425b8c89a48b567b1f2a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:93:e6:c5:6b:49:6c:39:fb:32:c1:16:3d:
03:3f:9d:2e:e0:ac:8d:e0:58:e7:b7:cb:65:45:9b:
1b:18:96:b5:4a:8e:4a:c4:6c:ae:c7:44:7a:ef:0b:
2d:f1:ab:ea:e0:ed:84:7c:f6:2d:c2:90:af:47:3e:
19:73:41:65:9c:73:d9:e6:61:58:30:22:c2:42:f7:
cd:cb:0c:c1:9d:db:a6:74:09:38:60:9d:54:ec:26:
67:42:bc:8a:17:76:d5:a3:1a:24:0d:e0:75:1a:3c:
fd:b9:d3:b0:59:b7:c0:9e:1a:64:f6:dc:54:63:aa:
d9:4c:bc:21:01:eb:de:3a:f8:3c:2d:b0:be:84:8f:
40:df:be:be:4b:be:9b:67:c0:a1:00:9d:68:0a:79:
11:3a:15:0a:4f:ef:90:98:27:1e:c7:30:3a:a9:a4:
0b:80:e2:48:ed:a8:f2:1c:36:5e:51:ea:96:17:3e:
e7:c8:11:ff:a5:81:a0:36:41:db:30:bb:1a:b3:bf:
bd:c9:ed:bf:08:f6:02:1f:02:11:e5:36:bb:82:cf:
e2:ca:df:44:8b:3e:79:f6:17:16:db:9d:22:e8:67:
60:b2:46:bf:88:98:ba:8f:43:bd:8f:87:fd:d6:16:
78:01:23:49:14:5e:28:d7:bc:c4:13:7f:23:e3:ec:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E2:E1:DF:40:8C:94:85:A2:42:5B:8C:89:A4:8B:56:7B:1F:2A:1D
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4c:8e:83:bb:ba:cd:dc:f5:9d:ce:ea:f8:78:e8:55:e9:a0:
15:b9:64:34:d3:d1:95:2e:ba:c9:bf:9f:e9:e3:76:ef:8c:a7:
d4:35:1d:87:ad:93:41:d2:dd:07:b7:5d:2b:db:47:21:5a:a7:
08:f0:a3:63:6a:c9:55:a0:d6:5c:d2:5f:36:19:b9:ca:10:27:
19:81:ae:54:73:af:70:75:71:c7:31:9f:56:ef:a3:6d:1e:2a:
ed:3f:9a:05:11:1d:37:f9:07:95:f9:e6:5c:ae:28:4c:8a:9d:
b8:a8:3f:c3:9b:c7:f7:d0:4a:bd:c0:98:e4:45:ca:8b:12:24:
1d:5a:54:f3:bc:ed:66:e6:67:f2:43:e8:11:9e:b5:00:0f:f0:
c8:64:16:39:eb:e1:8a:26:9c:95:b8:b8:36:a2:d3:3e:eb:08:
37:06:b6:2e:8e:a2:2b:83:ba:64:07:93:c8:65:32:6c:bc:09:
27:77:48:07:88:ad:46:08:56:11:f0:61:02:1c:15:f9:af:62:
12:49:70:43:e8:6a:80:91:f1:1d:cf:30:4e:ab:22:66:74:e4:
16:04:9e:bc:92:5a:7c:52:f5:e4:18:f3:9f:50:d1:4a:12:f9:
18:67:0b:10:37:00:83:53:3d:e7:92:55:3f:4c:1d:05:36:d0:
60:f6:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:10 2026 by rpki-client