Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: cefNndQMokcDZG4k2lG+nwt2x5LRE1r0nTW0efIETVs=
Subject key identifier: 81:3C:8C:8F:67:13:6C:DE:B5:38:EB:DF:F3:C4:DA:F9:94:58:30:C4
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019D96980FC7A7D1EE14584B790B67C4DD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 16C7
Signing time: Thu 16 Apr 2026 14:00:41 +0000
Manifest this update: Thu 16 Apr 2026 14:00:41 +0000
Manifest next update: Fri 17 Apr 2026 14:00:41 +0000
Files and hashes: 1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: R1jpFdcfZ5Wygbj0hrAw47oATRs8lpkkzsl7Z615vGc=)
2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:98:0f:c7:a7:d1:ee:14:58:4b:79:0b:67:c4:dd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Apr 16 14:00:41 2026 GMT
Not After : Apr 17 14:00:41 2026 GMT
Subject: CN=813c8c8f67136cdeb538ebdff3c4daf9945830c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:10:f0:83:08:b8:fb:84:a9:5a:d1:7c:a7:
dd:8f:28:75:43:62:1b:2c:88:c7:c4:d0:a6:3e:e4:
a1:9f:f3:f3:93:68:be:b9:4e:be:b0:6e:49:c9:89:
cb:e7:67:fb:01:6a:5a:1e:2c:0f:74:f6:5e:1c:e1:
72:29:c7:94:2c:1d:34:a1:c5:c1:59:e4:6a:3e:21:
c0:b8:8e:53:70:3b:b1:ba:8a:94:68:8c:ef:8c:70:
80:56:14:52:04:0d:45:0d:2d:87:60:68:05:67:03:
e1:66:f6:11:1c:7f:42:5c:5e:82:b7:eb:3d:63:d9:
74:1c:7f:aa:45:8a:f7:b7:0e:e9:ba:0e:3f:b6:83:
c2:8f:fe:99:98:1a:bc:ea:32:9b:1c:7e:da:12:d6:
b9:8b:4a:6f:3f:83:35:49:89:49:be:d1:5f:44:dc:
e4:08:12:89:db:3e:b3:c3:f5:6e:e7:68:cd:79:87:
80:64:7e:07:76:47:9e:03:c0:b1:36:18:c6:67:dc:
65:f3:3f:60:59:8f:c6:99:83:88:bf:ef:3a:cc:9a:
a7:e0:25:0f:27:c1:4f:e9:09:06:04:4e:db:50:cf:
7b:92:30:c6:6b:44:74:7b:03:29:c5:bf:16:74:7c:
87:ed:bb:76:9c:bc:bb:28:62:db:01:13:83:a1:99:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3C:8C:8F:67:13:6C:DE:B5:38:EB:DF:F3:C4:DA:F9:94:58:30:C4
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:18:ce:b6:1b:d6:10:13:28:3a:7e:54:0c:16:14:95:a9:99:
6b:45:d6:02:a5:47:4d:a4:5e:61:c3:98:c2:1a:7a:d6:85:9e:
79:e3:af:6f:94:17:32:0b:81:2b:64:0d:1b:15:c0:9d:cd:f4:
e3:77:9f:9f:74:e9:6d:8f:a0:06:b5:5e:2a:11:aa:03:27:80:
72:ef:43:82:ff:35:85:cb:d4:87:07:ff:32:7d:1a:97:81:5b:
6c:bd:9f:2b:ff:e9:93:cf:cc:96:fb:44:86:25:bb:f5:31:91:
c6:ab:8b:25:c6:a3:b8:a6:96:d0:b8:02:5a:29:bf:92:1a:72:
d0:3a:eb:fe:a6:aa:c1:35:aa:f8:b8:e5:1a:cd:51:9d:63:58:
80:85:22:d9:43:1c:76:db:3d:bf:9c:6c:d0:d8:10:14:df:01:
c3:8b:43:24:74:7e:b1:1e:e7:65:68:bd:54:bb:0b:10:e5:70:
11:2d:b2:56:3a:7c:88:56:a6:91:c2:4c:a1:b0:33:75:ef:e7:
b4:ad:02:63:09:0a:53:6b:29:67:3d:d4:ed:bc:d9:79:fd:99:
26:fd:07:83:f7:87:f0:ac:65:22:28:36:da:0d:8d:db:fd:ec:
52:a8:e5:7f:1c:cd:e8:48:ae:0f:50:0c:67:e2:dc:a5:c4:bb:
c4:52:83:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:06:18 2026 by rpki-client