Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: 1Z0eXITKe77DnZfeHkXGlNhxd40ZxWH6oxMQAiqaynw=
Subject key identifier: E4:BF:05:40:20:03:BA:E2:88:62:1B:79:9E:D7:CA:E5:25:26:94:BE
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019D9818CBD3CE001E8FCEFC10A879F9F39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 108E
Signing time: Thu 16 Apr 2026 21:00:54 +0000
Manifest this update: Thu 16 Apr 2026 21:00:54 +0000
Manifest next update: Fri 17 Apr 2026 21:00:54 +0000
Files and hashes: 1: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: 3zyh9cd+/mhDBmb8hBoRNlHMWc4bb66V85XG+oExwU4=)
2: GJC0hK61YfoTGiu4_BgSpKpEET8.roa (hash: WwyFHk/cwNc1twKhKndoqjGYh79zgc/kHaQHCW2vww4=)
3: XmgvodIVZlwmFpJZFx9OEb_S0YI.roa (hash: U77Nh8N61bX2SG2LWG51QmpxAadiZWSFMU1pOMYXXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:cb:d3:ce:00:1e:8f:ce:fc:10:a8:79:f9:f3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Apr 16 21:00:54 2026 GMT
Not After : Apr 17 21:00:54 2026 GMT
Subject: CN=e4bf05402003bae288621b799ed7cae5252694be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:90:d7:da:d6:f0:5a:bf:63:73:8e:bc:73:
83:bb:e8:e7:43:fe:fe:17:30:e4:84:fc:b5:95:81:
5b:bb:6d:92:af:49:ae:48:e8:4a:9a:f3:2a:0e:a9:
e4:38:f5:2d:df:94:16:e4:f6:f0:e9:d7:98:ea:d5:
7e:bb:44:fe:cb:22:77:57:9a:3b:c6:e5:0d:9a:91:
73:9e:46:e1:24:24:02:fe:44:5b:d7:3d:a0:7d:cb:
6b:20:04:56:e0:72:76:56:ab:2c:15:74:39:2a:a5:
7c:48:67:ff:89:5e:61:c5:88:2e:cd:be:92:dd:2f:
ed:2e:cc:0e:0d:ef:42:f9:c1:f1:12:28:95:92:0f:
40:a2:65:b6:b6:9d:19:0b:ac:cd:fa:98:71:2d:e4:
dd:74:fe:cf:07:aa:db:33:02:84:ce:9c:7e:1d:ac:
70:da:08:b0:1b:dd:cd:2d:f3:ce:03:1d:5b:27:42:
f1:f3:58:4f:5b:e0:97:8c:0f:62:9b:12:3c:40:6b:
48:8f:dc:c6:5c:c6:4e:50:46:b5:bf:79:9a:c6:9b:
2f:b5:8b:42:cf:ba:0f:a2:39:9c:0a:7b:b8:4c:ff:
33:42:cc:6b:28:02:6c:79:50:71:40:29:7e:10:6c:
5d:d5:2d:b0:d1:39:38:5d:4d:96:53:6b:ac:98:03:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BF:05:40:20:03:BA:E2:88:62:1B:79:9E:D7:CA:E5:25:26:94:BE
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9d:8b:d2:4a:6b:59:e5:67:c1:5d:ee:69:0e:3a:1e:90:a6:
2d:99:d9:30:6d:57:be:4a:cb:b1:81:7c:d2:d7:c9:b6:79:58:
29:5d:a0:fc:7a:82:5e:df:50:42:06:d9:03:9f:27:54:37:99:
fa:2d:f0:2d:48:71:32:7c:dc:4f:6d:fd:41:2e:9d:21:3c:2a:
97:1e:55:2c:fe:da:0b:e5:ef:79:20:6f:e0:99:38:d8:3d:e5:
65:b0:a5:a7:01:c2:cc:f7:ba:f0:9a:bb:90:f2:f1:03:ac:da:
aa:94:f1:28:a2:60:c4:2e:bb:48:10:dd:9e:fb:2e:35:8c:6b:
c7:3c:c1:22:bc:6c:05:90:3e:1c:cb:b7:be:43:5c:95:79:a5:
97:e4:97:77:01:b1:f8:7c:db:c2:6b:3c:b5:47:51:c1:81:21:
16:9d:33:38:75:e8:2e:19:87:64:5e:e0:48:17:66:13:b0:c9:
83:11:ae:b5:d4:40:a3:6d:22:11:89:b6:7c:42:4c:14:59:25:
6e:c9:09:56:b4:f1:6e:33:7e:f6:65:0f:36:1a:78:7f:0b:8a:
55:a6:4f:1f:6c:94:49:0a:13:42:57:4a:c5:bc:2e:6a:c6:24:
c9:2e:69:c3:60:47:00:20:b0:89:b9:9e:85:2b:5e:b5:0e:3b:
48:75:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:07 2026 by rpki-client