Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File: 7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier: qa8CXVEMDrdOivNpDIqDSZbW1k/FYQjN5LsvsDZqp9g=
Subject key identifier: A7:5A:8E:4F:AF:3B:33:3B:F4:15:E6:8D:F9:C5:0E:7F:6D:D9:0C:D9
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer: /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial: 019D98F4AFD1FEEBBD304DFB5326C7D4B33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number: 18AE
Signing time: Fri 17 Apr 2026 01:01:05 +0000
Manifest this update: Fri 17 Apr 2026 01:01:05 +0000
Manifest next update: Sat 18 Apr 2026 01:01:05 +0000
Files and hashes: 1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: x1FdiGkw77VKI+xlkVPlVFWDPW4sNDAhwYgzdWige+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:af:d1:fe:eb:bd:30:4d:fb:53:26:c7:d4:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Validity
Not Before: Apr 17 01:01:05 2026 GMT
Not After : Apr 18 01:01:05 2026 GMT
Subject: CN=a75a8e4faf3b333bf415e68df9c50e7f6dd90cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:cd:bd:5c:18:cd:6e:68:45:43:4d:5e:63:
21:46:ee:29:1c:4e:99:fe:c4:8a:88:02:5c:8b:8d:
79:a1:1e:c5:54:01:aa:b1:ac:da:71:e0:5f:f4:57:
3e:b8:af:2e:a1:b1:cf:e1:24:27:a6:e1:4f:3d:a5:
4a:8c:32:c4:89:60:98:8d:50:08:d6:12:65:98:61:
16:4c:01:50:e2:0b:91:7c:02:9b:2d:9a:14:59:78:
e3:92:e3:a1:f3:18:5d:01:2a:d2:85:1e:71:0c:2f:
b1:95:eb:87:d7:97:d9:98:bd:62:14:3f:47:04:42:
8f:7d:c1:46:e2:45:d8:2c:e5:1e:f6:6d:6b:ec:de:
c8:a9:b3:6b:55:5d:a8:28:46:da:42:a8:be:2b:e5:
c8:57:5c:0f:51:93:ba:44:ff:b9:e2:d3:42:e1:64:
13:cb:ac:b2:99:2f:f1:3f:fa:79:98:24:a9:7e:34:
ca:57:18:5c:92:af:9e:33:8c:a6:42:0c:e4:fa:5f:
b4:e1:5c:6b:3e:9d:6f:fc:2c:fc:6d:9d:f2:84:dc:
3a:ce:00:de:79:b3:85:0d:43:5c:2b:82:91:1c:cb:
92:f5:4d:92:10:e3:c4:b5:80:12:28:51:ed:59:90:
d2:20:04:a9:cd:f2:61:8f:2a:ca:fb:0f:4e:47:9d:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:8E:4F:AF:3B:33:3B:F4:15:E6:8D:F9:C5:0E:7F:6D:D9:0C:D9
X509v3 Authority Key Identifier:
keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0d:b8:e1:a8:44:56:0e:2b:18:e5:37:55:d5:d4:b3:b2:6a:
53:41:58:a1:f5:c9:2f:3f:c6:06:47:c3:27:76:ae:2a:4d:c7:
5f:2f:26:02:36:5f:9e:93:a9:c1:90:5d:42:3e:cb:70:60:eb:
b7:d5:95:61:e8:bf:37:76:2c:19:ba:a6:5c:91:f4:c0:09:df:
d3:d0:03:1a:40:2c:88:b2:34:b8:1a:8b:c9:96:11:80:15:51:
39:24:e0:62:b6:1a:a3:92:91:b3:cb:2d:5a:b9:44:11:af:e2:
d1:c8:68:af:fb:0a:ec:2a:8b:be:ad:4f:7f:8c:9e:73:12:51:
e4:2b:2e:b6:7e:79:6c:29:7a:3a:44:38:c7:76:c7:49:9b:bb:
3c:a4:ad:95:7e:1b:f3:af:9f:84:5d:83:9f:8f:a3:0e:61:a8:
38:5f:e0:9d:4c:08:47:2b:2a:c0:b7:27:62:f7:a0:d5:c6:34:
7b:61:59:ff:ec:37:65:24:e8:9a:76:4b:1f:5e:ee:29:c3:7f:
31:3c:0a:43:48:f9:9a:54:0a:e6:a5:f6:c0:b8:f1:47:fd:b0:
08:5e:aa:14:ac:72:48:d5:d8:f4:a9:8f:fe:23:f3:9a:4b:8a:
44:ce:23:67:dd:7f:0b:95:c4:1e:a6:da:66:49:17:1b:32:43:
7a:9c:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:09 2026 by rpki-client