Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: bM31ZRQ1WBJ0aYFNj8pu25wd+0lqR0zuhyelu68caqQ=
Subject key identifier: F7:F7:59:CB:8A:4D:B5:00:3E:F7:52:CE:83:35:2E:6A:71:E6:4F:DB
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019DA2D379CFFCBC2A45885CB624B009D862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 18C7
Signing time: Sat 18 Apr 2026 23:01:01 +0000
Manifest this update: Sat 18 Apr 2026 23:01:01 +0000
Manifest next update: Sun 19 Apr 2026 23:01:01 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: HWNfzisVKtFQhpSafy5U14/Q6m1WFFntCWCs7vSAw7w=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:79:cf:fc:bc:2a:45:88:5c:b6:24:b0:09:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Apr 18 23:01:01 2026 GMT
Not After : Apr 19 23:01:01 2026 GMT
Subject: CN=f7f759cb8a4db5003ef752ce83352e6a71e64fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:e3:a3:46:33:da:40:9b:a4:06:f2:dd:3c:
62:3c:c1:39:48:06:75:b1:ca:cb:70:7e:e7:b1:67:
5e:eb:5f:58:c8:42:7e:b7:af:72:75:5e:74:3e:13:
c1:78:df:0d:26:01:66:9b:2e:0c:7c:a8:2a:d7:9a:
ef:30:3c:94:ab:ea:b6:06:95:5a:e4:f1:6a:4a:0f:
b2:bf:07:6d:0a:18:ad:12:d2:dc:e8:76:b6:3f:28:
fb:43:b5:28:34:12:22:e5:0e:75:f4:4b:fe:45:5a:
83:42:b6:b0:08:2a:98:6b:8c:74:71:62:d3:21:9e:
24:c1:4f:e8:80:12:30:aa:3e:7a:e8:f1:61:35:6d:
f1:95:6d:d9:54:60:57:a2:4a:ff:fe:58:05:09:c8:
e0:3c:95:13:19:94:ec:58:1e:e5:ff:2e:65:c9:f9:
a4:01:6b:4f:12:85:76:e9:f4:d0:40:a8:cd:95:29:
43:e1:58:f3:b5:2d:8d:d4:1c:9e:98:05:9c:61:f6:
e6:2e:b1:55:d7:21:48:7f:5e:ab:0e:50:80:e1:fd:
4a:46:34:6d:4d:eb:4f:0c:f9:f3:02:c5:b8:5e:d4:
2f:d7:0a:08:b3:4f:d0:74:fb:7a:e1:8a:3a:73:46:
4f:ec:f0:b2:0b:09:a3:91:cd:bc:95:07:d3:4e:05:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F7:59:CB:8A:4D:B5:00:3E:F7:52:CE:83:35:2E:6A:71:E6:4F:DB
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:45:fe:ef:9e:a2:ba:aa:8e:85:f1:3e:35:78:59:cd:1f:
ee:56:06:0e:a9:8b:71:5a:f1:e1:6c:3e:73:22:bf:3c:60:d2:
e8:97:17:cb:31:22:b9:ec:ab:cf:b6:16:c5:d8:f6:c2:d7:bb:
dc:32:31:3c:87:dc:ea:7f:50:9c:22:bb:33:9a:ba:1f:54:fe:
b0:a1:35:82:79:f4:c9:42:52:e0:38:09:80:d4:d1:56:44:44:
72:12:6d:b2:5f:42:5f:d8:8d:8d:ce:76:96:a4:b4:2d:2b:51:
2e:7d:8f:e5:be:23:4c:8c:b6:04:91:86:c5:e9:c6:89:d5:c7:
83:4c:ef:a1:e8:84:c3:cf:1b:bb:6a:91:39:dd:75:ba:75:11:
22:0b:5c:af:5a:07:c5:ff:9f:59:f7:c4:b4:3f:af:bf:7d:8b:
e8:2c:aa:91:01:9e:54:3c:a1:64:f0:4c:12:c9:46:4f:e0:a9:
c2:b1:62:79:01:9d:77:5c:ed:56:0e:e6:25:a7:af:15:21:f5:
31:ec:a0:3b:51:bc:c7:07:c1:8c:f6:39:69:20:d0:00:de:59:
be:70:01:14:41:fd:c3:4c:a7:0d:96:9f:a4:09:d7:ff:fa:85:
4c:2b:49:1b:07:95:31:6d:d8:e0:b1:0c:ea:45:57:f5:47:b4:
f4:5b:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:07 2026 by rpki-client