Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: /2OhA6uQCqK5s5gjHu+ORNOOpGZMe2HFMcS2GJBh5vU=
Subject key identifier: 03:17:96:70:0E:F2:35:24:D4:30:17:5B:06:C2:F1:47:D3:59:DA:0A
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019D98BDA12E50379285FC9592ED70A2FA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 07D9
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=)
2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: tJXeUeywqdpY8yjjAm70P6YD+Wyp/9oP8A4BfPVOFz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a1:2e:50:37:92:85:fc:95:92:ed:70:a2:fa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=031796700ef23524d430175b06c2f147d359da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:67:a9:80:a6:8e:4b:6d:26:73:a2:70:fa:
b8:b5:31:eb:b3:e0:c3:ab:3f:4d:1d:c2:13:42:72:
ce:4a:a9:de:d4:76:5f:90:9c:4f:fc:58:84:a8:11:
fa:bc:ed:70:3e:40:ca:db:08:77:6c:d3:01:02:d6:
64:11:7f:77:cf:87:8e:9e:79:ec:1f:e0:1f:41:22:
fe:91:2a:de:37:37:8c:13:01:17:b8:ea:7b:dd:be:
9c:56:01:0b:bf:3f:2e:b0:4e:77:10:07:69:8c:31:
2f:9d:e2:83:be:07:45:95:0a:9a:15:96:9e:2e:81:
78:dc:b4:c3:f0:d6:68:9e:26:7c:8a:b6:24:d9:24:
9c:44:e9:3e:01:64:57:9b:13:16:50:2b:3b:51:0b:
fa:d5:df:a9:e6:09:77:f5:33:cf:5e:0d:1f:32:01:
81:e4:64:9f:ad:49:7b:6f:26:51:90:67:12:22:a8:
ca:84:51:f8:d9:c6:56:4d:01:eb:2e:49:5f:9f:70:
72:73:e4:82:3e:6e:e7:cb:18:c6:e5:d2:f0:ae:91:
63:f3:db:c7:c8:df:45:08:17:d1:25:ef:53:19:9c:
2f:f3:3e:da:9d:1a:06:28:2e:db:00:36:49:27:f3:
ee:93:44:53:71:55:66:45:e4:29:9b:96:2f:d9:48:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:96:70:0E:F2:35:24:D4:30:17:5B:06:C2:F1:47:D3:59:DA:0A
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:58:96:e2:5f:72:13:66:11:bf:08:c5:7d:0e:ae:3d:8b:30:
34:f8:a0:e7:96:57:5d:b7:35:d8:9d:25:4f:0b:1f:65:3d:98:
17:c0:e2:f7:fc:34:f9:86:48:b2:db:60:63:7e:a4:96:e1:7d:
d5:1e:13:5a:78:16:c2:71:4f:d3:bb:d4:9a:0e:57:1b:c4:4f:
e1:71:26:ee:a6:4c:b7:09:4f:fc:aa:cf:22:7b:69:05:81:d0:
8d:92:2d:85:40:2c:ef:89:71:64:64:57:1d:52:5a:82:03:8f:
b5:79:4a:2f:19:20:d9:5b:bc:e8:c1:80:d0:33:db:dd:21:8d:
74:b9:dd:75:d8:c1:02:f8:72:62:21:c9:3f:a5:5d:a9:9f:8a:
c5:d0:cc:36:84:8b:b5:43:da:2b:d9:23:f8:dc:80:e2:be:24:
a6:44:f1:54:c8:9d:78:cb:03:3b:6e:df:52:9b:f7:64:e3:0f:
82:20:4b:f6:d3:ae:42:ea:34:27:da:60:46:80:4b:75:84:4c:
68:c3:0c:dd:2f:bb:9d:ea:ec:fa:14:2c:1d:81:74:8f:bd:7f:
cb:ad:a9:26:57:a3:93:0c:3f:d4:38:1d:72:d0:12:c4:c8:4a:
71:19:66:8a:28:65:c1:8a:5e:cb:96:3e:05:da:c3:0f:94:54:
48:0e:cd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:10 2026 by rpki-client