Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: 2DwUoTUbTh/vXUjteLSmkne7flPI2cBgk+eLZQLX8P8=
Subject key identifier: F2:6F:B4:EC:33:6C:F5:89:A5:F1:C2:87:11:2B:20:3E:E9:54:85:7A
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019D9B87B75E94A428B3D549CFDA8ED9699A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 13:00:55 +0000
Manifest this update: Fri 17 Apr 2026 13:00:55 +0000
Manifest next update: Sat 18 Apr 2026 13:00:55 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: D1WDygXFiumc2MZeCh5GL/vHUt1jJ6zdg0JxhQ7yOyM=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b7:5e:94:a4:28:b3:d5:49:cf:da:8e:d9:69:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Apr 17 13:00:55 2026 GMT
Not After : Apr 18 13:00:55 2026 GMT
Subject: CN=f26fb4ec336cf589a5f1c287112b203ee954857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:de:9f:e7:7b:86:6f:af:3f:e4:87:a2:89:
a1:1b:ee:86:f5:43:7d:a7:5a:9f:61:05:d6:90:14:
d1:fe:d8:ef:a2:b4:89:b3:a9:e4:e6:06:42:7c:e0:
db:56:da:b3:04:a2:91:73:f3:51:2c:b4:38:6e:9f:
85:e6:b3:1c:be:cf:60:9f:72:cd:42:58:56:b4:25:
d9:4d:d2:07:9b:a3:8c:bd:ea:e4:e8:41:c1:de:ef:
1e:87:26:5a:9b:42:40:96:53:a7:db:86:a6:2a:ef:
34:fc:ab:d7:2c:ba:80:62:dd:be:8c:7e:49:87:32:
75:60:2a:4f:29:df:4e:49:cd:30:80:c5:51:59:d5:
34:f5:20:0b:c3:4f:0e:54:08:80:60:97:81:d9:85:
bb:f1:23:d5:68:d4:73:5b:db:3c:36:9f:75:af:59:
c1:14:5f:4d:1a:d0:e0:37:54:3e:26:cf:f0:ce:a3:
95:d7:88:7c:46:a6:56:2e:78:d8:90:d4:fc:e2:c6:
bb:d5:9c:6f:e9:78:40:97:f9:84:d7:6b:59:80:a2:
af:ee:cc:22:26:b4:07:8e:e5:82:7b:5d:5d:f6:76:
df:f1:b7:3c:5b:e3:fd:6f:06:73:c6:df:83:3b:6c:
fe:fe:fa:57:55:69:1d:30:8c:90:bb:40:f6:db:28:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:B4:EC:33:6C:F5:89:A5:F1:C2:87:11:2B:20:3E:E9:54:85:7A
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6e:50:e2:5d:53:d7:c8:fa:c0:09:2e:ab:8a:72:c2:5a:5e:
11:13:48:d0:a2:92:ed:e0:3a:3b:22:83:21:d3:47:d1:d0:99:
87:ea:7b:32:9b:3d:25:60:1f:ce:0a:00:65:89:c2:e0:2f:2d:
fc:66:ef:05:7b:69:c4:e4:64:5a:f0:26:cc:cb:4f:5a:38:27:
e9:a4:ea:95:6e:73:dc:ed:af:7b:c2:55:e6:3f:ab:89:2e:e2:
aa:16:7d:4c:8f:84:96:e2:ba:28:18:db:a1:eb:17:d5:55:f4:
ce:74:d7:9d:51:2e:61:62:d4:09:3c:3a:d2:3b:f7:3f:81:04:
40:72:10:8b:48:67:55:1d:e4:98:c8:4e:26:1e:e7:06:5c:e6:
9d:60:c4:fa:96:36:9d:d6:15:11:05:8c:3e:7f:57:a4:87:30:
a4:95:64:4d:fc:0f:a6:71:f4:bd:72:d7:79:7d:8f:ba:79:a0:
7d:4e:c0:dd:08:cc:a6:9e:b8:f3:08:13:84:2d:30:be:3b:0c:
c8:a3:e7:04:ab:9c:15:ee:c7:17:4a:93:93:20:37:53:69:92:
9a:de:5a:38:f7:78:22:47:0b:40:c7:dd:6d:d9:63:50:95:fd:
50:d6:87:d1:f1:c3:12:28:33:62:35:99:bf:65:5d:48:f8:b6:
ea:8e:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:33 2026 by rpki-client