Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: cRpHmiztGyhNfgCFYZRpr/hislwiRsjoGJ+mHs/ZuDA=
Subject key identifier: DA:6D:27:0D:69:99:76:38:3B:48:AE:7E:E9:1B:C2:95:4C:4E:34:9C
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019D9E51E0FECE85C621AF05D693B34C7A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 16CB
Signing time: Sat 18 Apr 2026 02:00:59 +0000
Manifest this update: Sat 18 Apr 2026 02:00:59 +0000
Manifest next update: Sun 19 Apr 2026 02:00:59 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: t9L9eG1yQ5u9r9VuZL62OyO1Tzd3bM8u8R0b10OjOAQ=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:51:e0:fe:ce:85:c6:21:af:05:d6:93:b3:4c:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Apr 18 02:00:59 2026 GMT
Not After : Apr 19 02:00:59 2026 GMT
Subject: CN=da6d270d699976383b48ae7ee91bc2954c4e349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:4e:eb:31:90:c3:64:9f:1c:38:51:fd:30:
de:67:11:d8:d3:d9:31:08:7f:35:0a:5a:6d:3e:27:
e2:41:94:9c:4d:4e:5e:33:f0:56:67:1f:01:3f:b9:
4d:2b:ab:4e:77:f7:9c:fd:23:c0:1c:b6:76:07:58:
63:2f:d9:b3:3f:b1:0f:b4:e9:f0:db:4d:0d:08:d8:
40:95:53:3c:71:bf:8e:94:94:01:56:f4:e1:6e:11:
f8:22:79:b2:d0:f7:c8:4c:a5:b4:5b:36:97:ee:54:
69:60:9b:8a:02:7f:96:4c:4c:29:1e:66:3c:e3:28:
0a:81:57:d9:b8:cd:60:88:da:09:54:4e:f0:78:48:
c0:0d:74:02:33:f5:2c:c1:28:0a:87:aa:89:58:eb:
cd:34:16:32:77:55:ce:0a:7a:fb:76:fb:24:ec:c9:
cd:fc:3c:74:53:9c:f5:93:3d:eb:b9:1c:0b:a8:8a:
b0:9d:e1:8b:28:c7:6d:f6:2d:28:9e:1a:cb:5e:af:
b4:8e:35:88:47:97:60:96:00:24:37:cf:cc:ea:1f:
53:c0:9b:7b:46:76:6e:2f:cb:3c:f5:05:37:c0:ed:
58:b6:a9:44:2e:33:d0:23:ac:85:bb:54:98:85:84:
0f:46:d6:a5:c4:88:85:f3:ef:14:ca:40:e7:7b:41:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:27:0D:69:99:76:38:3B:48:AE:7E:E9:1B:C2:95:4C:4E:34:9C
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8c:b4:c5:21:82:4c:6e:c4:d6:ab:5c:24:2d:13:de:74:38:
02:48:25:11:59:e5:7a:07:54:cb:39:83:87:1f:b0:58:7d:c1:
f5:45:06:9c:bc:ab:bd:44:ac:5e:67:eb:5e:70:7b:2f:7c:a7:
09:16:d4:df:a7:08:9f:e3:e9:82:d9:a1:d7:95:52:46:8f:7f:
5e:c6:5f:30:6e:a8:d0:a2:ab:02:07:67:85:79:3d:a7:da:76:
a4:d5:63:19:9f:4a:59:71:2d:75:dd:7c:1d:73:c8:c5:d7:c6:
d4:90:04:ee:3b:da:f0:ee:20:f5:ef:26:53:56:25:d4:36:52:
c9:53:a8:98:b7:c4:88:b8:d7:d1:cb:9b:de:7a:10:d6:c8:85:
57:a7:5e:1f:15:52:a7:a1:85:0e:b4:f1:46:28:80:28:60:cc:
b9:5b:fa:fe:9b:db:7a:f5:b3:d0:f2:01:7b:26:06:38:38:32:
35:9c:06:5c:92:71:2b:e9:3b:5a:2a:52:bc:43:82:18:1d:ad:
38:5b:c2:2c:80:54:fe:77:29:17:a1:b6:b7:05:dd:25:b9:3a:
50:17:cf:54:af:01:8b:57:1a:61:33:23:cc:b5:bc:a5:b8:d3:
f5:f4:81:76:a3:f2:15:e6:45:89:7f:84:27:19:c8:7e:6f:b6:
6a:f0:17:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eUeD+zoXGIa8F1pOzTHpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDk1NzhlNDk4MjVjNDJmM2MxMzFiOTRjYjBmZGRlNWM3
OWFkNzcwHhcNMjYwNDE4MDIwMDU5WhcNMjYwNDE5MDIwMDU5WjAzMTEwLwYDVQQD
EyhkYTZkMjcwZDY5OTk3NjM4M2I0OGFlN2VlOTFiYzI5NTRjNGUzNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9hO6zGQw2SfHDhR/TDeZxHY09kx
CH81ClptPifiQZScTU5eM/BWZx8BP7lNK6tOd/ec/SPAHLZ2B1hjL9mzP7EPtOnw
200NCNhAlVM8cb+OlJQBVvThbhH4Inmy0PfITKW0WzaX7lRpYJuKAn+WTEwpHmY8
4ygKgVfZuM1giNoJVE7weEjADXQCM/UswSgKh6qJWOvNNBYyd1XOCnr7dvsk7MnN
/Dx0U5z1kz3ruRwLqIqwneGLKMdt9i0onhrLXq+0jjWIR5dglgAkN8/M6h9TwJt7
RnZuL8s89QU3wO1YtqlELjPQI6yFu1SYhYQPRtalxIiF8+8UykDne0HprQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNptJw1pmXY4O0iufukbwpVMTjScMB8GA1UdIwQY
MBaAFO7ZV45JglxC88ExuUyw/d5cea13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYt
M2UxMGQxYWI3NDA4LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82NDliMTctMDM5ZC00MmRhLTkwZjYtM2UxMGQxYWI3NDA4
LzEvN3RsWGprbUNYRUx6d1RHNVRMRDkzbHg1clhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoy0xSGC
TG7E1qtcJC0T3nQ4AkglEVnlegdUyzmDhx+wWH3B9UUGnLyrvUSsXmfrXnB7L3yn
CRbU36cIn+Ppgtmh15VSRo9/XsZfMG6o0KKrAgdnhXk9p9p2pNVjGZ9KWXEtdd18
HXPIxdfG1JAE7jva8O4g9e8mU1Yl1DZSyVOomLfEiLjX0cub3noQ1siFV6deHxVS
p6GFDrTxRiiAKGDMuVv6/pvbevWz0PIBeyYGODgyNZwGXJJxK+k7WipSvEOCGB2t
OFvCLIBU/ncpF6G2twXdJbk6UBfPVK8Bi1caYTMjzLW8pbjT9fSBdqPyFeZFiX+E
JxnIfm+2avAXJg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:31 2026 by rpki-client