
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: yVJyaoUUmUOTVCDIuNJgQ/j01lQQycGr49vhyjVfpJI=
Subject key identifier: 19:CD:AB:76:D8:9E:0B:1B:2E:3F:1E:4E:59:C5:F0:3A:C9:45:A1:35
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 019D99998703FA845A5380461B84FF3C76F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0D27
Signing time: Fri 17 Apr 2026 04:01:08 +0000
Manifest this update: Fri 17 Apr 2026 04:01:08 +0000
Manifest next update: Sat 18 Apr 2026 04:01:08 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: QdsMsS7TGg9vnPh4Ivzj1iy8B9g84Ovu8Od4MwehhC8=)
2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:87:03:fa:84:5a:53:80:46:1b:84:ff:3c:76:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Apr 17 04:01:08 2026 GMT
Not After : Apr 18 04:01:08 2026 GMT
Subject: CN=19cdab76d89e0b1b2e3f1e4e59c5f03ac945a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:d3:2b:05:31:48:67:06:69:ab:b9:0a:68:
40:ee:4a:77:a2:cf:77:16:02:12:e8:7d:7d:ce:d3:
85:04:a7:c3:55:a1:2b:be:8e:6b:ed:1f:99:fb:a3:
3c:ce:4d:05:ff:9a:9d:70:14:49:91:7e:c4:40:9f:
05:fb:c9:d8:78:32:08:d0:ec:98:7e:13:cd:86:e4:
5a:e8:36:d6:d9:14:e4:7e:72:5f:67:e9:4a:ab:72:
8c:e0:2a:d5:67:a0:5c:7b:f5:97:35:53:68:a6:5a:
3b:6f:53:72:76:8c:ed:2d:57:35:ee:10:c0:05:3d:
dd:2a:33:2d:fb:78:f9:8f:6f:26:5b:f8:ab:c5:97:
9a:7c:6f:c2:69:f3:95:12:f5:ee:8a:2d:cb:ba:97:
8b:4c:38:09:01:6f:f8:57:f5:c5:a3:fd:d7:79:4a:
16:f1:0e:46:19:54:af:4f:ea:d3:06:34:40:9d:cf:
41:fa:df:94:aa:49:5c:cd:c2:38:e7:5f:5d:da:35:
a1:ca:8f:87:f2:31:0b:9f:61:dc:c2:d1:bc:41:16:
68:52:06:ab:f5:69:61:3e:77:e9:ce:68:bc:2a:27:
19:44:70:ce:e7:12:15:c8:66:61:80:c6:ff:2f:d1:
52:6d:dc:ea:f7:43:17:8e:5f:d7:14:e1:0b:5e:93:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:AB:76:D8:9E:0B:1B:2E:3F:1E:4E:59:C5:F0:3A:C9:45:A1:35
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:66:46:32:ef:6b:b8:42:9e:7c:1c:42:35:32:9f:cb:14:06:
77:06:a6:8c:f8:40:41:b7:b7:69:3e:9a:e4:43:24:cf:76:23:
aa:c8:47:0b:21:9d:42:3d:94:1e:c3:be:6f:0d:c1:a6:b3:40:
93:91:bc:8d:09:b7:ca:f0:31:4f:d8:d5:6d:6b:aa:f2:e9:a4:
6d:a8:95:f1:4e:2a:80:a2:dc:37:49:c7:66:2f:43:83:a3:a5:
d4:3b:d7:63:57:0c:08:16:aa:c6:1e:b5:01:fc:bf:37:40:9e:
d3:60:29:d8:61:a5:e9:30:f1:e1:28:79:b6:5a:59:db:c4:68:
5b:0f:a2:dd:bb:ca:b4:86:29:1b:df:63:8e:37:16:31:dd:5b:
05:a0:7e:83:6f:8a:20:d6:48:37:99:8c:03:cc:b6:5f:7d:09:
20:a4:40:81:b3:81:84:1c:5c:9f:c9:ff:da:aa:2e:64:22:b4:
94:bb:c2:81:21:89:a0:3d:6e:f5:31:1b:de:d6:90:4a:bb:a7:
d7:66:73:e0:a7:07:8d:39:79:f1:d8:84:4c:2f:48:56:20:b8:
16:0b:b6:7a:a5:47:7b:f7:ef:eb:d3:0c:08:ab:72:80:e1:6b:
d7:be:58:f7:a0:d1:da:38:f9:78:4a:69:69:9e:9a:30:4a:ed:
fd:92:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:03 2026 by rpki-client