Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: 75LQXe8r6yzdaps+0EfovRheM6/PBpn1PlLZZxju6jo=
Subject key identifier: 20:D4:7F:0B:D4:F5:2C:2A:35:01:C6:A1:EB:95:B6:5F:16:48:40:F4
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 019D9C2C72453ACAAE3732464549FC044BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 16:00:51 +0000
Manifest this update: Fri 17 Apr 2026 16:00:51 +0000
Manifest next update: Sat 18 Apr 2026 16:00:51 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: 35R2BqWtPfkCNZTp6Ro04Um0dzZ4OxAcMuaTBC0/w8Q=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:72:45:3a:ca:ae:37:32:46:45:49:fc:04:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Apr 17 16:00:51 2026 GMT
Not After : Apr 18 16:00:51 2026 GMT
Subject: CN=20d47f0bd4f52c2a3501c6a1eb95b65f164840f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:0e:84:0e:6d:aa:8e:60:83:96:48:a1:b0:
0f:aa:21:36:a7:25:c2:9b:5e:05:62:2b:0f:f3:b2:
18:61:c6:c6:e9:88:c6:57:92:c1:ec:88:e7:b4:13:
66:54:bb:c3:b7:a6:3d:f5:d5:1c:13:96:b1:13:50:
ed:61:45:7a:05:71:b3:23:08:5f:bd:55:5b:03:e3:
f3:b0:c7:75:5b:d7:84:6a:bd:7f:7f:1e:bd:da:28:
c1:c7:d3:96:ce:05:e1:ec:62:4c:15:85:87:fa:a6:
3b:bf:a6:e8:be:d2:15:7a:3d:65:0e:43:02:cd:d5:
f0:52:b4:1a:85:4a:bf:f8:1f:07:4b:3e:78:83:58:
e5:d3:e5:e9:a0:99:76:49:6e:0a:b0:5b:d8:30:69:
21:0e:1e:48:80:46:a1:36:64:46:1a:3e:2e:bd:f4:
48:e9:a6:94:fc:14:68:7e:61:97:0e:4c:ba:fe:ea:
e5:dd:e7:69:cb:f0:b9:67:dc:8c:dd:5c:a0:2d:26:
df:ca:8e:81:a2:98:4f:11:04:36:29:51:c6:8c:59:
7e:f4:50:44:d8:f1:a3:39:a7:29:48:ff:a7:04:68:
4b:95:09:4e:e9:9f:7d:ee:81:a3:79:46:b0:3d:d9:
3b:0a:1f:70:93:f9:81:1c:e8:7f:a4:5e:47:48:dd:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:7F:0B:D4:F5:2C:2A:35:01:C6:A1:EB:95:B6:5F:16:48:40:F4
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:04:9f:e2:29:aa:c8:41:c8:88:bd:b3:49:4a:f5:83:a2:
2d:e6:5f:12:0f:74:9e:cd:6e:26:43:47:82:01:b3:69:f5:ac:
90:29:24:b3:bb:2a:43:bb:d9:a3:34:be:3a:cd:d9:56:a3:e1:
ba:93:3c:7a:a6:83:f9:09:25:53:5d:09:5a:43:f2:e6:d1:62:
5c:33:3d:85:23:9c:90:91:0b:89:d1:e1:e1:a8:f4:58:90:3a:
68:ef:05:6c:ac:3e:ff:2b:13:33:6e:94:12:34:34:5b:f1:d9:
e7:cc:c3:0c:12:32:48:3e:b4:63:2f:10:07:ef:95:97:bd:e0:
8b:5e:40:b0:38:02:25:c0:2e:ea:84:5e:bd:62:48:4a:7b:53:
47:09:1d:77:f4:45:4c:db:38:d0:26:a6:3c:f6:39:0d:5e:05:
6d:aa:57:51:54:8e:6b:c3:42:4d:9c:73:fc:66:72:7a:98:32:
fe:17:b7:b7:b2:8f:c7:ab:fc:76:2b:09:45:f8:b5:0d:fd:b3:
85:85:33:6a:00:95:c1:97:b1:1f:c0:ca:cf:92:79:63:5b:fa:
d1:ff:3d:44:8f:31:9c:25:10:34:3b:44:96:db:c2:38:71:8c:
c1:1e:a8:f2:04:28:57:15:d1:36:77:92:da:e4:86:ac:d4:84:
01:f1:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:38 2026 by rpki-client