Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: GRL8Ng0zDoZJfT/Bl/ND2oEqrzQ3VGYTv3BERzc9SVE=
Subject key identifier: 82:00:89:F0:2D:AF:E8:66:32:D1:1D:F6:6D:27:5B:91:2E:21:D3:3B
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 019D98BD9DE5DA90763D82B860F6F01B4ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 14C7
Signing time: Fri 17 Apr 2026 00:00:56 +0000
Manifest this update: Fri 17 Apr 2026 00:00:56 +0000
Manifest next update: Sat 18 Apr 2026 00:00:56 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: /hCkaltl1jA2SYXesDl7O76BRF25L2qQXBikDlHlsNc=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9d:e5:da:90:76:3d:82:b8:60:f6:f0:1b:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Apr 17 00:00:56 2026 GMT
Not After : Apr 18 00:00:56 2026 GMT
Subject: CN=820089f02dafe86632d11df66d275b912e21d33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:bd:84:e5:32:b4:73:1a:26:c8:f3:b2:4e:
e8:81:65:a5:9c:f9:1e:d9:78:97:75:f1:87:e1:8b:
f9:4d:bb:ac:18:e4:b2:b9:d7:38:52:b4:3d:db:89:
c2:f8:e4:b4:89:a0:ae:43:43:55:a7:bb:7f:4c:1a:
2c:fa:af:39:f8:63:cf:9f:a7:9f:7a:05:9c:b3:83:
c0:b7:5d:3a:ae:26:8f:5b:34:3b:1a:bd:e1:a6:0b:
f9:7b:97:9b:80:ab:82:16:6e:f2:1e:e5:d4:46:c6:
69:b1:42:fd:5b:a4:59:5b:52:de:df:57:f9:e0:b6:
41:6b:6a:98:20:9a:6d:47:e1:27:72:f3:70:57:0e:
5b:77:20:65:b4:70:b9:ee:9d:71:1e:79:18:3b:b3:
8c:04:35:34:6a:dd:9c:4f:fc:c7:50:47:2d:22:34:
b2:30:4e:52:dc:8e:ca:d5:3b:f5:c6:5e:30:ef:54:
51:79:08:87:a4:ca:e1:cc:b0:67:7a:87:42:21:a0:
eb:f2:98:6b:83:30:ed:48:74:95:07:cc:c3:ab:67:
cd:8c:69:8b:9a:1e:07:da:b9:29:bb:f7:d5:ab:08:
10:5e:87:99:b9:c1:20:70:dd:64:10:9a:d9:50:c0:
f3:93:c4:90:0c:12:07:74:f7:3a:8d:86:7f:02:7f:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:89:F0:2D:AF:E8:66:32:D1:1D:F6:6D:27:5B:91:2E:21:D3:3B
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e8:1f:1a:d4:90:90:6c:a0:20:c1:a0:a0:25:bd:d0:3b:ef:
4b:a4:ea:af:da:9a:e5:89:78:b8:33:5b:f9:30:91:e5:23:00:
77:20:54:3c:77:2a:98:be:28:c1:6d:bc:54:f1:a8:b1:34:c6:
ca:ac:c5:0b:0d:de:32:f0:e1:aa:a2:68:b6:4e:67:13:d8:c2:
02:30:fc:48:64:ac:23:c9:16:93:da:9b:29:ad:08:92:e6:70:
11:98:42:8f:27:b9:03:59:ce:15:01:d1:8f:0f:82:e8:25:ad:
0d:96:4a:ff:13:49:b3:83:3d:fc:24:15:04:c4:85:65:73:a0:
30:fd:ef:06:25:b2:6c:5b:6c:e3:98:6c:b6:53:b0:91:9c:6d:
59:a7:76:23:fa:95:62:e5:a6:f0:f0:cc:2b:56:6f:4f:b6:9c:
f6:12:b6:5f:ad:65:c3:49:fe:61:a5:e1:74:f2:7c:d6:a2:6c:
82:d2:a9:2a:eb:40:62:29:7e:b6:75:79:b2:05:53:57:de:47:
76:f7:b2:7c:5b:a2:53:fc:36:6c:6e:de:8f:04:a9:37:4b:0a:
c1:73:2c:0b:97:a7:10:73:98:28:b9:d2:c7:1c:25:f4:6f:00:
e2:fd:e7:0f:68:1c:a8:11:c2:90:c8:20:ad:ba:31:67:c2:7a:
35:70:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:38 2026 by rpki-client