Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: bq7GCpm4S358pPrrKkB4liNx4VDZ4gAdgescLzAfmNc=
Subject key identifier: 4D:73:68:47:AF:25:B2:D5:01:D3:FF:4E:6D:8A:07:EE:73:71:5A:CE
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019D99CFE9F397D9495F669A9653AA6F8F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 05:00:32 +0000
Manifest this update: Fri 17 Apr 2026 05:00:32 +0000
Manifest next update: Sat 18 Apr 2026 05:00:32 +0000
Files and hashes: 1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: KAkFcedCb7MUnUULTjeV7PFR+XmWEwDrL4HTp6XAiDE=)
2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e9:f3:97:d9:49:5f:66:9a:96:53:aa:6f:8f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Apr 17 05:00:32 2026 GMT
Not After : Apr 18 05:00:32 2026 GMT
Subject: CN=4d736847af25b2d501d3ff4e6d8a07ee73715ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:73:6a:8d:ce:31:61:0c:c3:c1:f4:e4:a6:
ea:ad:22:f2:c4:5f:20:fd:ec:f6:36:af:9a:be:6a:
52:8a:a3:84:ac:13:e3:03:76:1a:81:e6:c0:b9:74:
0f:5f:fe:3e:f4:e3:48:10:1b:a9:64:6f:bd:7b:0e:
20:ae:d0:21:3a:e6:d7:99:db:dd:af:02:68:ca:71:
86:82:6f:8a:02:a6:4c:38:27:e0:6e:16:c0:fc:cf:
95:e1:94:ad:88:0b:fc:6e:6a:dc:b5:8d:be:73:22:
62:95:44:c8:d7:0c:65:b5:73:25:19:76:3e:20:ef:
0e:db:a2:3c:bc:bc:ec:d4:2d:dd:92:36:08:41:63:
5c:a8:02:1b:df:cf:90:97:0b:4e:6e:51:86:90:e6:
cc:a2:b6:3c:f9:33:4c:86:c5:53:f7:a9:3d:e3:70:
d8:fc:5d:cc:d1:39:d1:94:8c:20:b5:cd:e4:d0:b5:
8d:36:e8:15:12:7d:71:99:da:63:4c:8c:0a:70:72:
07:eb:9c:1e:df:ef:34:a9:4a:20:8b:d8:0b:1c:f5:
ac:f9:43:72:86:9b:fa:6e:c3:dd:d2:02:81:05:6b:
64:e6:6c:33:bb:48:8a:03:36:b7:3c:ab:c5:61:d2:
59:5d:9c:5d:f9:26:99:8d:3f:35:d3:0a:f2:a4:fb:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:73:68:47:AF:25:B2:D5:01:D3:FF:4E:6D:8A:07:EE:73:71:5A:CE
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d3:ed:01:2b:a5:07:d4:b8:47:08:4b:23:8d:2d:43:15:53:
d4:f7:9b:96:0f:98:91:40:45:e1:3f:6f:85:45:82:6e:4b:e5:
b6:97:0b:5f:ff:b8:f6:f8:fe:d3:d5:35:5f:a1:b6:43:ac:b5:
6e:68:cf:d9:80:8a:c6:93:cb:73:26:2c:61:7a:3e:5f:3b:eb:
91:c8:9f:d4:32:98:54:29:ff:0c:90:20:e0:91:27:68:0a:b9:
7c:bf:6d:ad:f2:36:56:18:b4:c9:4e:22:4f:54:e8:5c:ca:5c:
f3:fc:10:7d:80:81:70:1e:86:c3:66:53:0b:84:de:06:65:6c:
73:54:9e:79:66:80:72:39:e1:6f:57:d3:81:a8:d5:39:03:96:
c8:5a:94:b8:3e:a2:95:99:5c:5c:e0:6f:5e:1f:c1:ce:ed:2a:
7e:45:18:35:4d:0d:3f:ce:41:58:8b:46:b6:34:08:4d:6e:1a:
77:26:fa:f2:77:07:1e:a4:12:08:b7:12:b3:c7:54:97:a3:cf:
c8:99:3d:97:c0:6f:0b:cf:1f:ea:15:cf:d4:12:dd:90:cb:71:
e5:5c:96:ce:48:3f:af:ab:88:47:25:ff:de:2f:63:4c:d5:c9:
f8:f2:19:29:0f:bc:9f:9a:6e:48:f7:66:12:80:6f:34:75:0a:
5a:e6:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:32 2026 by rpki-client