Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: 5F7iFj50P4GfsFSgVmachAbVm02KM8CeVRhG436+iNg=
Subject key identifier: D2:96:9C:79:36:0D:98:85:BB:C7:56:7E:5C:55:E6:E9:B3:9D:76:A5
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 019DA30A77313B75A9A3F35E38CC44290AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 00:01:05 +0000
Manifest this update: Sun 19 Apr 2026 00:01:05 +0000
Manifest next update: Mon 20 Apr 2026 00:01:05 +0000
Files and hashes: 1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: V2o7XrhX1jEKAuLYEffckiwrrdbCkmocAvdhOfpjEK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:77:31:3b:75:a9:a3:f3:5e:38:cc:44:29:0a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Apr 19 00:01:05 2026 GMT
Not After : Apr 20 00:01:05 2026 GMT
Subject: CN=d2969c79360d9885bbc7567e5c55e6e9b39d76a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:84:f4:67:09:f5:99:5a:b2:2a:3e:83:20:c8:
96:b6:2f:86:d8:5d:fa:2b:c1:66:07:0a:84:55:0a:
1e:4e:30:c5:2c:c4:ac:1d:1c:22:d7:ba:d9:e4:fd:
b8:d0:4b:e1:c6:01:0d:9d:6b:04:5a:37:89:7f:c3:
96:8a:a5:98:91:92:52:68:20:40:86:0d:35:a0:ff:
9d:bc:bd:25:84:3f:f2:08:2e:01:1c:f2:0d:49:eb:
b9:93:87:a8:a5:24:73:3d:f6:a4:b1:08:56:03:a3:
96:7a:36:32:26:cd:ac:55:9c:bb:9e:13:eb:03:52:
95:ff:7e:5d:2a:68:2c:d4:0d:84:5b:3b:cf:6d:67:
32:61:09:86:96:a2:f2:98:92:ac:61:3a:d1:25:40:
af:12:5d:e6:d8:80:16:4d:12:fe:00:d9:59:02:f4:
8b:9f:e8:16:ac:d1:28:25:59:4d:ab:55:ea:ca:bb:
16:b0:40:3b:c0:28:9c:9a:1a:0d:de:e3:b8:59:95:
c4:4c:f2:f7:04:9d:7d:11:14:7e:62:86:e7:85:fa:
0e:d2:04:99:53:bd:1c:b4:9f:f5:1c:55:84:e7:f4:
c6:cf:d3:95:c7:b5:d9:25:e6:76:1f:99:2e:58:a3:
5b:45:8a:d9:a9:cd:b9:38:e1:4c:69:7b:3f:f9:2f:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:9C:79:36:0D:98:85:BB:C7:56:7E:5C:55:E6:E9:B3:9D:76:A5
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:de:cf:bf:81:db:5e:d1:d2:ae:3a:f9:f1:79:7d:f0:76:
af:2a:35:06:04:ca:f2:83:fb:00:41:66:33:10:07:0a:32:84:
64:91:d7:e0:95:9b:1a:4c:89:ac:2d:d4:d1:a1:49:ba:4d:7d:
86:f3:10:58:35:60:8f:ac:15:cd:39:9f:18:35:29:85:b2:c6:
8c:e6:41:18:cb:5c:9a:2c:85:3c:6b:47:72:53:23:92:76:fd:
fd:e4:08:c7:82:f3:6c:4c:99:49:72:db:80:f8:42:15:d3:23:
fd:76:11:06:9d:12:cf:c9:a0:88:1c:72:e3:35:15:2e:82:a0:
9f:af:a9:6a:b3:09:a5:90:09:65:12:44:33:4e:97:fa:3c:95:
e9:3b:6b:14:32:d4:4c:0f:27:b9:e6:7b:f5:30:60:bd:45:eb:
2f:96:45:d7:27:eb:65:45:cc:2e:01:89:1b:0f:21:b4:6c:d1:
f9:96:95:9a:d0:fb:7b:25:53:20:c7:30:d4:87:08:06:d5:fc:
b4:64:65:31:53:2a:01:dc:82:5e:0f:82:09:a3:19:10:de:d8:
10:89:e6:7a:56:14:1c:4a:01:49:d1:3b:bf:58:75:60:c9:44:
de:5d:ac:09:95:69:66:31:79:9d:f5:fc:68:53:4a:b3:9b:c3:
89:c4:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:52 2026 by rpki-client