Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: dfqIMu0HwoKowFCb9X+eHFVbrn5t2t9RDQY5qCLL9gs=
Subject key identifier: 28:FD:9C:B2:B8:D2:02:CE:C9:6A:26:47:8B:35:2C:53:25:C2:D4:9D
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019D9A3DEECECF83BD30D01E9F4205127194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 168C
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: E48MFZIgyTPDLgOvcVU3TghVl9s5Txo/q4DsXjXZv20=)
2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ee:ce:cf:83:bd:30:d0:1e:9f:42:05:12:71:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=28fd9cb2b8d202cec96a26478b352c5325c2d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:82:87:36:ab:a6:ba:eb:81:50:76:2f:f2:
a4:78:71:07:2a:a5:41:f9:f5:e5:18:da:a7:a8:db:
32:91:e1:c9:73:bf:ae:9d:59:83:9e:87:d0:32:dd:
54:80:6d:9a:01:08:d9:08:b8:ac:da:74:34:e3:60:
e6:82:22:ea:1f:ff:a3:f7:9b:8e:d6:df:db:64:25:
79:89:59:1d:a1:45:c4:49:8e:ed:37:bd:5c:05:93:
1f:33:d4:29:70:79:ac:d3:1a:5f:74:3b:f5:ab:5b:
17:e6:75:77:f9:aa:a7:f1:2b:9e:1e:b5:35:1e:ad:
66:84:ce:65:cf:fd:18:ec:5e:b1:52:df:12:e8:59:
34:37:c4:13:5d:7b:44:63:7f:c5:a4:91:2b:c1:2a:
ea:2f:69:4d:a9:95:23:5f:ff:8c:ce:05:32:dc:d3:
36:ef:a2:ff:c0:b0:3b:01:f3:cf:39:22:62:a2:5e:
3c:ec:86:7f:bb:9b:34:6f:62:a0:0a:dd:f4:83:5e:
b9:19:ae:0d:f1:5b:a4:63:80:43:35:6d:a7:93:f1:
52:92:8e:97:85:95:4c:41:40:5f:39:33:d6:47:9f:
1a:d6:19:89:83:26:b1:35:61:c1:27:69:b8:d7:8a:
dd:c8:ae:da:9d:bd:8a:aa:f3:a0:e0:09:4c:21:6a:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:9C:B2:B8:D2:02:CE:C9:6A:26:47:8B:35:2C:53:25:C2:D4:9D
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7e:8b:99:d6:a5:46:c8:a2:11:6a:77:0c:d1:26:a5:88:c2:
9a:61:98:0c:e5:c4:0f:f1:42:2a:31:65:84:9c:f7:34:15:33:
c3:ac:1e:74:88:d8:aa:7e:a1:1f:3c:03:4d:12:e3:b8:13:c9:
b4:6c:b7:ad:54:06:55:54:3e:b0:28:b6:8f:8c:8e:34:63:9c:
f2:26:28:54:4c:87:a3:cb:4d:00:86:9a:70:19:c6:72:e1:44:
c6:b9:b2:09:97:8b:2f:8c:78:04:54:a3:c0:7c:d3:96:2a:66:
d3:9d:bd:53:d4:cd:bb:54:83:ba:ba:39:fc:8b:ed:ef:85:7a:
cc:c1:a2:29:a4:c1:11:1b:f0:af:75:83:e7:8c:43:ac:a5:d2:
69:65:ff:89:a7:bd:0a:61:2b:17:33:86:0e:31:96:db:be:fb:
3e:a3:ab:8f:0f:0b:0e:d4:07:d8:84:67:8a:a3:3d:72:d9:fb:
c3:9c:1a:7c:0a:f6:ef:94:5d:10:6c:0d:bd:61:d2:8f:77:14:
97:38:c4:9c:ba:ac:cf:16:c9:75:51:33:33:13:b3:da:34:e2:
68:b2:c1:13:1b:70:3f:35:43:e7:c5:1c:55:11:b7:9b:6d:8c:
ee:6b:5c:35:52:80:e8:0f:c0:0e:b9:a4:06:32:3b:53:31:7a:
00:d9:75:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPe7Oz4O9MNAen0IFEnGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMmU4MjFkODhkZTdhMDExMzQxNzA0MjAyMzQ2ZjdjMmJi
OWViY2YwHhcNMjYwNDE3MDcwMDQzWhcNMjYwNDE4MDcwMDQzWjAzMTEwLwYDVQQD
EygyOGZkOWNiMmI4ZDIwMmNlYzk2YTI2NDc4YjM1MmM1MzI1YzJkNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1uChzarprrrgVB2L/KkeHEHKqVB
+fXlGNqnqNsykeHJc7+unVmDnofQMt1UgG2aAQjZCLis2nQ042DmgiLqH/+j95uO
1t/bZCV5iVkdoUXESY7tN71cBZMfM9QpcHms0xpfdDv1q1sX5nV3+aqn8SueHrU1
Hq1mhM5lz/0Y7F6xUt8S6Fk0N8QTXXtEY3/FpJErwSrqL2lNqZUjX/+MzgUy3NM2
76L/wLA7AfPPOSJiol487IZ/u5s0b2KgCt30g165Ga4N8VukY4BDNW2nk/FSko6X
hZVMQUBfOTPWR58a1hmJgyaxNWHBJ2m414rdyK7anb2KqvOg4AlMIWpZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj9nLK40gLOyWomR4s1LFMlwtSdMB8GA1UdIwQY
MBaAFOwugh2I3noBE0FwQgI0b3wruevPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjkt
ZGZhMGI4MDUyNjE0LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZGRhNGYtZjBjNy00MDA4LTlhYjktZGZhMGI4MDUyNjE0
LzEvN0M2Q0hZamVlZ0VUUVhCQ0FqUnZmQ3U1Njg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASX6Lmdal
RsiiEWp3DNEmpYjCmmGYDOXED/FCKjFlhJz3NBUzw6wedIjYqn6hHzwDTRLjuBPJ
tGy3rVQGVVQ+sCi2j4yONGOc8iYoVEyHo8tNAIaacBnGcuFExrmyCZeLL4x4BFSj
wHzTlipm0529U9TNu1SDuro5/Ivt74V6zMGiKaTBERvwr3WD54xDrKXSaWX/iae9
CmErFzOGDjGW2777PqOrjw8LDtQH2IRniqM9ctn7w5wafAr275RdEGwNvWHSj3cU
lzjEnLqszxbJdVEzMxOz2jTiaLLBExtwPzVD58UcVRG3m22M7mtcNVKA6A/ADrmk
BjI7UzF6ANl18A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:53 2026 by rpki-client