Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: 0vCGZSW+XgFIf2EvudPOw7MVVfQzNMouEka6OBDNLHs=
Subject key identifier: 49:8E:2D:86:29:4E:2B:E0:05:CE:CB:62:D1:F4:79:15:EC:1F:8B:E0
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019D98BD9BC5BEAA297FA74CBF654162B413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 1031
Signing time: Fri 17 Apr 2026 00:00:56 +0000
Manifest this update: Fri 17 Apr 2026 00:00:56 +0000
Manifest next update: Sat 18 Apr 2026 00:00:56 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: QjSQBYUQ/XDfE7BP6lsXEcuVnXipr40ZuZXgLIgaBOA=)
2: seylKk68qXKxhoBzXl7E0-tTkU0.roa (hash: 14ms6tysm87Rxm8W+2zvydPUm5MTtyrDqlszeDC47Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9b:c5:be:aa:29:7f:a7:4c:bf:65:41:62:b4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Apr 17 00:00:56 2026 GMT
Not After : Apr 18 00:00:56 2026 GMT
Subject: CN=498e2d86294e2be005cecb62d1f47915ec1f8be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:e0:a5:9b:2e:66:17:c8:ae:67:67:69:91:
9e:08:f2:e4:2d:53:7a:3a:ac:af:33:f5:e3:d6:3d:
e6:33:37:93:9f:a2:5b:cc:09:ad:70:44:39:60:62:
a8:6b:a6:aa:b5:9e:19:38:08:e6:6f:ab:3a:f7:75:
59:c8:17:13:de:b9:67:a0:f3:8b:61:64:fd:92:07:
3d:86:44:9f:f0:41:ea:b4:17:92:b3:f7:15:b1:13:
9a:7d:1f:a4:29:f8:48:47:72:ca:d8:d9:24:32:1c:
0c:f6:66:c4:2d:aa:a4:90:86:e7:e4:db:6f:e1:00:
4c:53:21:b0:49:64:4a:e0:ad:08:06:bc:fe:7e:a9:
af:e1:77:fd:fc:e9:de:c3:ba:eb:a5:47:7a:91:39:
61:bf:03:a7:39:2b:f8:27:0c:94:59:ff:57:77:02:
10:68:16:d5:70:53:36:a3:57:da:79:12:dd:19:9a:
54:27:f0:a5:4f:12:67:2a:40:a1:0b:e9:12:4b:27:
95:b0:10:29:09:7e:e6:ab:66:28:81:d5:34:86:27:
11:75:83:29:0f:fb:81:9b:44:d0:73:1f:a8:7e:0c:
3d:73:8c:ea:b2:6c:61:8a:00:d3:a7:e5:d6:49:2b:
5e:17:5d:96:5a:c8:b4:27:f8:13:00:b5:f3:d9:02:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8E:2D:86:29:4E:2B:E0:05:CE:CB:62:D1:F4:79:15:EC:1F:8B:E0
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:50:b8:d1:cf:49:ba:7e:5c:6e:df:2d:70:28:c4:78:13:
06:06:4e:42:e8:d0:0c:42:5e:51:99:ad:db:6c:f5:60:f6:d9:
18:4c:23:f8:ec:bb:14:57:98:8f:b0:93:5b:c1:94:6a:29:e8:
62:cd:67:66:d9:c3:d2:ab:ba:8f:1b:df:2e:60:99:8c:20:2d:
19:2d:df:5a:43:35:36:11:56:3e:60:4f:ce:5e:99:93:3c:4c:
28:92:2d:5d:0c:a8:35:a8:f0:d8:93:9d:52:13:da:1c:f0:10:
b4:4d:92:70:ad:40:99:a1:de:ea:08:e2:4f:6c:17:73:c6:b8:
48:cd:74:ed:cb:51:09:13:e1:22:c1:ac:d2:a7:93:39:29:89:
ad:e7:29:a4:8e:a5:d2:d9:30:71:65:f7:39:cd:ff:98:d1:0a:
56:5f:b1:78:d5:3c:24:a2:60:4f:35:41:55:3f:47:42:b9:9c:
1b:8d:25:96:20:d6:1a:6d:c8:ab:20:3e:32:ec:73:31:08:b3:
c4:7e:1b:4f:cc:47:e3:97:49:da:cd:5f:59:b4:34:0b:a3:e0:
0b:3c:aa:0b:c8:e0:23:e5:22:38:35:76:bd:0c:bc:5f:8d:63:
13:50:78:78:5d:9a:fc:92:2c:85:90:87:00:16:5e:79:5f:a4:
3a:73:b0:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvZvFvqopf6dMv2VBYrQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzNkZjA0NmUxZTFkNWJmMDUyMmJiOTEzZjI5NTcyODdh
NDliNGIwHhcNMjYwNDE3MDAwMDU2WhcNMjYwNDE4MDAwMDU2WjAzMTEwLwYDVQQD
Eyg0OThlMmQ4NjI5NGUyYmUwMDVjZWNiNjJkMWY0NzkxNWVjMWY4YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T/gpZsuZhfIrmdnaZGeCPLkLVN6
OqyvM/Xj1j3mMzeTn6JbzAmtcEQ5YGKoa6aqtZ4ZOAjmb6s693VZyBcT3rlnoPOL
YWT9kgc9hkSf8EHqtBeSs/cVsROafR+kKfhIR3LK2NkkMhwM9mbELaqkkIbn5Ntv
4QBMUyGwSWRK4K0IBrz+fqmv4Xf9/Onew7rrpUd6kTlhvwOnOSv4JwyUWf9XdwIQ
aBbVcFM2o1faeRLdGZpUJ/ClTxJnKkChC+kSSyeVsBApCX7mq2YogdU0hicRdYMp
D/uBm0TQcx+ofgw9c4zqsmxhigDTp+XWSSteF12WWsi0J/gTALXz2QKARQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmOLYYpTivgBc7LYtH0eRXsH4vgMB8GA1UdIwQY
MBaAFO3D3wRuHh1b8FIruRPylXKHpJtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQt
NTIzZTQ0NWY5MGRjLzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQtNTIzZTQ0NWY5MGRj
LzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAERQuNHP
Sbp+XG7fLXAoxHgTBgZOQujQDEJeUZmt22z1YPbZGEwj+Oy7FFeYj7CTW8GUaino
Ys1nZtnD0qu6jxvfLmCZjCAtGS3fWkM1NhFWPmBPzl6ZkzxMKJItXQyoNajw2JOd
UhPaHPAQtE2ScK1AmaHe6gjiT2wXc8a4SM107ctRCRPhIsGs0qeTOSmJrecppI6l
0tkwcWX3Oc3/mNEKVl+xeNU8JKJgTzVBVT9HQrmcG40lliDWGm3IqyA+MuxzMQiz
xH4bT8xH45dJ2s1fWbQ0C6PgCzyqC8jgI+UiODV2vQy8X41jE1B4eF2a/JIshZCH
ABZeeV+kOnOw3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:14 2026 by rpki-client