Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: aeRH8bVwPKnpQe8LfXtokvxV14OxVU5K95qLQg/lTGY=
Subject key identifier: BB:CE:49:7C:74:51:02:55:7E:03:13:61:1D:D5:74:01:86:19:A1:D4
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 019D9B50E5C0CECA94DD2B4D0C6068565BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:01:03 +0000
Manifest this update: Fri 17 Apr 2026 12:01:03 +0000
Manifest next update: Sat 18 Apr 2026 12:01:03 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: FAFenXVkQGLmmpYq5uYuzAoFd0dig10/UnpN5Y1YFMk=)
2: 7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa (hash: ytpfJ9vNS5JwRc89yU0uWlEyTvzj77675KecMolldFc=)
3: Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa (hash: f1TQFLKcOmbSU1W2vbI+gyaehRaTN+oWeXN0L2tAh3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e5:c0:ce:ca:94:dd:2b:4d:0c:60:68:56:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Apr 17 12:01:03 2026 GMT
Not After : Apr 18 12:01:03 2026 GMT
Subject: CN=bbce497c745102557e0313611dd574018619a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:5e:49:d3:23:db:82:4f:1a:03:01:90:84:
37:f0:31:f2:61:7a:09:5b:d0:57:d2:b7:8a:0b:5a:
99:f1:3a:b8:11:6b:e9:19:3a:15:d0:4b:b9:02:91:
e8:a8:b9:a5:6b:a6:e6:48:d0:0e:4e:dd:6b:6f:7e:
ee:08:7c:88:db:53:c1:47:3e:25:5b:5a:23:21:9e:
fe:8f:21:c4:1d:78:0e:09:64:6b:c8:0d:96:53:21:
49:65:18:b2:71:18:e1:6a:90:48:ac:a9:ad:8c:43:
0c:f1:ab:10:78:1a:cf:ce:b8:1c:c9:01:a2:23:9c:
f6:f1:ca:d7:a9:bb:cc:cd:fd:94:69:92:c7:2d:3c:
1c:67:37:9f:d3:b7:b6:c1:4a:7e:09:e1:0b:e7:16:
dd:ae:83:bb:4e:bc:3e:95:94:f9:15:eb:10:67:a3:
1f:55:1e:2a:e1:33:c9:88:5a:98:29:6f:3b:c6:41:
a0:70:05:ce:c0:3c:b1:1b:80:2d:84:09:05:c5:c8:
13:0f:38:02:85:8d:1a:c3:71:69:29:68:e7:2d:6f:
a8:00:df:2b:00:6c:73:ce:d9:20:e1:4f:af:41:da:
4c:67:12:d7:ae:bb:6c:58:14:54:16:ed:77:c9:18:
fc:be:52:15:fc:d7:a5:56:4c:c7:c3:6e:e4:b9:d4:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CE:49:7C:74:51:02:55:7E:03:13:61:1D:D5:74:01:86:19:A1:D4
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:67:5c:47:2d:b2:65:2c:1c:80:6a:ab:2c:66:ed:f5:11:f5:
47:c8:9e:ca:61:80:bf:77:11:eb:df:a5:43:7b:f3:1b:b5:8f:
2e:86:d6:01:bc:ce:ce:5f:d3:87:f0:3c:e0:be:98:af:3e:5a:
9d:e1:e0:60:95:7b:38:b3:fa:b3:d8:5d:31:f5:70:fa:da:49:
e5:f1:ae:e7:0f:ed:a1:fa:4c:5b:b6:ed:f7:c3:4f:04:f5:63:
fb:0c:ac:8b:14:e5:81:44:0c:43:f9:28:1e:63:83:9b:bc:16:
f3:ba:18:50:f4:64:dc:00:0d:db:3b:a1:48:8e:6a:10:6f:80:
56:a2:54:a6:4c:90:36:66:7c:10:9e:fd:63:e4:e8:36:d4:6c:
3b:12:83:52:ff:af:fd:c4:ba:8c:25:05:7d:5e:a0:62:33:f1:
28:38:c2:d8:28:da:2b:3f:72:bf:ef:08:b6:f2:fe:42:d3:8e:
e5:f4:3b:33:a3:83:37:fc:f4:db:66:52:8b:2a:b2:1c:68:3f:
78:d4:2f:3e:36:f8:ee:5e:5e:90:aa:54:2d:1d:10:67:d7:2b:
c7:5a:e6:f6:bb:10:97:73:e8:7d:60:46:e1:8b:50:df:a3:0f:
b3:94:42:cb:ad:44:a9:e0:9e:93:58:6b:45:4a:28:37:fc:b4:
5b:d4:b1:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUOXAzsqU3StNDGBoVlvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0
ZTEzNDEwHhcNMjYwNDE3MTIwMTAzWhcNMjYwNDE4MTIwMTAzWjAzMTEwLwYDVQQD
EyhiYmNlNDk3Yzc0NTEwMjU1N2UwMzEzNjExZGQ1NzQwMTg2MTlhMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswpeSdMj24JPGgMBkIQ38DHyYXoJ
W9BX0reKC1qZ8Tq4EWvpGToV0Eu5ApHoqLmla6bmSNAOTt1rb37uCHyI21PBRz4l
W1ojIZ7+jyHEHXgOCWRryA2WUyFJZRiycRjhapBIrKmtjEMM8asQeBrPzrgcyQGi
I5z28crXqbvMzf2UaZLHLTwcZzef07e2wUp+CeEL5xbdroO7Trw+lZT5FesQZ6Mf
VR4q4TPJiFqYKW87xkGgcAXOwDyxG4AthAkFxcgTDzgChY0aw3FpKWjnLW+oAN8r
AGxzztkg4U+vQdpMZxLXrrtsWBRUFu13yRj8vlIV/NelVkzHw27kudRbCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvOSXx0UQJVfgMTYR3VdAGGGaHUMB8GA1UdIwQY
MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt
ZDNmNmNkOGU0NDQ0LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0
LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWdcRy2y
ZSwcgGqrLGbt9RH1R8ieymGAv3cR69+lQ3vzG7WPLobWAbzOzl/Th/A84L6Yrz5a
neHgYJV7OLP6s9hdMfVw+tpJ5fGu5w/tofpMW7bt98NPBPVj+wysixTlgUQMQ/ko
HmODm7wW87oYUPRk3AAN2zuhSI5qEG+AVqJUpkyQNmZ8EJ79Y+ToNtRsOxKDUv+v
/cS6jCUFfV6gYjPxKDjC2CjaKz9yv+8ItvL+QtOO5fQ7M6ODN/z022ZSiyqyHGg/
eNQvPjb47l5ekKpULR0QZ9crx1rm9rsQl3PofWBG4YtQ36MPs5RCy61EqeCek1hr
RUooN/y0W9Sx9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:04:41 2026 by rpki-client