Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: 93lgPOgzUQpb06AwM4PbT5cSCcnVjtptDGek5H5F8Z4=
Subject key identifier: 38:44:83:DE:86:12:66:91:52:51:51:48:93:D8:4A:62:E1:49:60:86
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 019D9962B658C9B53BF91C5FDA904A3F28F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 1823
Signing time: Fri 17 Apr 2026 03:01:16 +0000
Manifest this update: Fri 17 Apr 2026 03:01:16 +0000
Manifest next update: Sat 18 Apr 2026 03:01:16 +0000
Files and hashes: 1: Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa (hash: PLBVzKzfY6V8bQMUJREfJf+D4bMzTqr7tyLzjpGHOPk=)
2: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: wOtktm8ndyWZ6J6tPj/aQsCaiiNHysfvD4uNAmMFfBo=)
3: dj2slW3vOttM2lqgWk6ocAGgDC0.roa (hash: +gmMzsdCL+TQ11aBaKus+EwBw7GGlK23QYqU5eoC/TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b6:58:c9:b5:3b:f9:1c:5f:da:90:4a:3f:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Apr 17 03:01:16 2026 GMT
Not After : Apr 18 03:01:16 2026 GMT
Subject: CN=384483de861266915251514893d84a62e1496086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:ed:46:68:0e:b8:6f:39:13:08:ba:8b:35:
60:31:94:75:72:50:65:59:26:85:c4:39:f0:9a:ef:
d8:91:7d:5c:4e:91:a1:c7:24:1f:30:f7:ae:8b:de:
33:3e:58:ea:85:48:29:4c:3d:79:bd:76:0e:03:13:
2a:02:5d:a5:2c:67:7c:a7:e0:bf:b0:00:1d:fb:7d:
da:bf:5f:58:08:c4:02:38:14:ac:10:e6:cc:13:06:
d4:d8:2f:dc:a2:6a:3c:44:47:0e:6c:7e:cb:b8:18:
b9:d6:29:4b:70:f7:f8:ea:de:cf:e7:ea:ac:83:7a:
7d:81:17:46:c5:b6:22:f0:54:03:28:a9:7a:75:ba:
b0:02:46:64:df:3f:3a:14:21:90:ba:6e:dc:46:06:
0c:02:20:a9:83:62:c4:9d:54:c9:88:f3:9c:d5:08:
82:ca:ed:ec:41:87:69:b2:80:11:f7:f2:54:bc:23:
37:f5:54:ef:81:11:f4:9b:e2:1a:f6:96:a7:68:eb:
fc:8c:9a:b7:d9:bf:f5:44:13:78:f2:c2:e3:57:56:
16:9e:8c:49:2e:cb:eb:7e:74:b1:8f:12:4c:e8:76:
8f:81:94:b3:95:3b:98:cb:66:5b:e9:04:fa:25:3c:
0f:6c:c6:09:95:a1:7e:de:1a:e5:7d:1f:11:57:ea:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:83:DE:86:12:66:91:52:51:51:48:93:D8:4A:62:E1:49:60:86
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:41:8a:36:83:5b:03:c6:6c:5c:a9:fa:2a:7b:92:48:41:2c:
00:19:0e:fc:06:3f:b8:43:f2:55:d8:b8:d2:5a:de:cb:92:d6:
e0:e7:fd:e0:44:ad:da:ee:a8:8f:f0:11:9b:41:e4:84:49:4c:
ed:55:b5:f0:d8:eb:83:28:6f:53:7e:43:f6:5e:0d:7d:a8:92:
15:48:6c:28:84:73:a9:e4:21:51:9c:7b:f1:a4:15:f4:2a:0a:
d9:03:af:b5:8e:91:7a:a6:56:e0:49:d2:3d:b9:67:f9:97:9b:
d9:8d:3b:18:56:b1:6e:1c:9a:7e:73:1c:5e:1f:ac:0b:69:bf:
ba:b1:bb:ee:08:09:1f:0d:26:40:a7:2a:b4:f5:5d:79:81:9d:
6e:81:43:ea:79:86:a6:8f:d9:46:aa:48:64:c3:11:e4:98:cf:
2d:d5:78:c1:d9:a0:01:36:c4:1e:a0:92:50:5a:db:2d:4c:ff:
fa:96:b5:9d:bb:d0:ff:e7:c8:3c:17:dc:9f:f2:22:f7:bd:db:
54:42:4c:54:87:7a:25:09:3e:9a:27:f7:8b:80:1e:1a:7b:f6:
ec:7a:80:b7:37:6e:9c:27:95:cb:36:bf:c1:13:1e:86:63:2c:
fe:8e:92:fb:51:cb:04:54:10:6d:0e:ed:ca:d0:75:fa:b1:c2:
12:08:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:15 2026 by rpki-client