Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: 56isrAMZ5i9t79LNF0woOCNf02ia99QQeSGLwF/ZjO8=
Subject key identifier: 9D:C4:DB:95:8F:F9:0A:8F:36:3C:4E:1A:30:1D:9E:B8:68:C1:2F:EE
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 019D9A3ECAC15C35967685FCCD1A2472465A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:01:39 +0000
Manifest this update: Fri 17 Apr 2026 07:01:39 +0000
Manifest next update: Sat 18 Apr 2026 07:01:39 +0000
Files and hashes: 1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: Rmnmt9weuq+IgKYl0mlb6BZ8a7HOsl41ThGv4HaMCqY=)
3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ca:c1:5c:35:96:76:85:fc:cd:1a:24:72:46:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Apr 17 07:01:39 2026 GMT
Not After : Apr 18 07:01:39 2026 GMT
Subject: CN=9dc4db958ff90a8f363c4e1a301d9eb868c12fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:e8:a4:71:7d:02:e8:84:83:b1:5f:2d:10:
4c:36:01:f7:c1:1d:6f:f6:98:56:21:6c:5a:0b:e7:
32:b4:7a:0a:9a:75:e9:0e:c4:67:44:69:aa:d3:76:
07:71:a1:e9:b4:1b:76:b9:5c:1a:47:1f:21:fa:2a:
bc:5c:d6:0e:dd:d9:3a:ac:2e:45:1a:89:0a:bd:d4:
b4:ff:6a:d8:1b:7f:64:c7:84:f7:b3:f5:19:fa:c2:
35:fd:b4:33:dc:82:b2:31:85:a0:33:af:ac:18:84:
52:f5:7c:90:5b:60:f7:d2:21:85:a0:e0:7f:90:a2:
4b:88:8a:fc:ed:c7:e7:9c:5d:1a:27:1e:6b:e5:9e:
03:4e:e7:db:58:62:5d:a3:b5:17:db:38:f5:56:13:
ed:fd:35:58:29:6a:e6:34:a7:99:fe:1c:88:a4:39:
4c:5f:d0:29:25:d5:e8:31:bb:0f:b0:dd:8e:fa:40:
3c:1a:03:af:31:3b:b9:9f:13:d5:7d:20:1c:bc:52:
da:18:d1:38:ca:f6:03:f5:7d:2b:e2:2a:42:01:68:
44:db:9b:b0:3d:b6:8e:cf:b4:95:f9:88:48:cb:3e:
18:6c:70:85:9a:33:b8:58:82:57:8f:4f:11:24:4b:
85:57:b4:90:db:66:87:dc:19:c9:26:45:b4:d4:50:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:DB:95:8F:F9:0A:8F:36:3C:4E:1A:30:1D:9E:B8:68:C1:2F:EE
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:00:a2:c7:af:61:13:7b:32:cf:63:96:41:95:85:48:3d:67:
cb:1c:fb:f4:ae:3c:6a:7d:f2:af:59:0e:90:29:59:16:37:f2:
53:0a:75:f1:dd:ec:c4:65:98:f0:d4:ab:51:41:ea:91:92:34:
2e:26:69:df:56:b2:ad:9d:59:93:1c:f4:98:7c:cf:48:03:ce:
e1:dc:9d:67:65:34:27:09:fe:5a:c5:56:e4:8c:2f:8d:48:56:
d9:e7:04:63:5a:5c:21:c6:48:81:11:9e:f6:bf:15:14:a7:88:
5a:83:0c:96:57:96:2b:26:ea:c3:00:c7:11:1f:64:cb:55:02:
6a:a0:91:97:ae:45:63:33:38:bd:d8:98:35:c2:2f:a4:f9:bf:
fa:78:83:c0:35:b9:d5:52:1b:93:70:cf:2c:c2:d6:ca:ed:71:
4f:42:29:e1:89:27:10:64:97:8c:af:b9:57:de:f7:a4:e3:3d:
47:3f:1d:fe:2b:c6:58:eb:db:00:03:3b:e2:b4:38:e0:5d:16:
18:e8:6c:27:cd:fb:a0:a1:b6:0e:7e:4a:ae:e2:58:6c:d2:aa:
a6:1c:9b:f9:26:92:b7:c7:21:9f:7c:69:14:82:e8:c8:27:b4:
4c:12:a2:64:ce:b3:c0:11:fe:83:4b:2d:2c:25:fe:8d:17:c1:
80:ef:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:17 2026 by rpki-client