Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: bZVF33DE2RPHFfIL5Nd21YiPC1J3zFEUGzHEOXCZ9JA=
Subject key identifier: CD:12:C5:5E:1F:7D:7C:A8:EC:CB:D6:5D:F6:E1:5D:CD:5F:67:AF:FC
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 019D99CFDBA6A1F7E17308D32E56D81F004E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 12E9
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: nSmApTBoI1f9vaQRs2JHJ4y8vbWESW2acDUxZ+ICx5k=)
2: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (hash: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc=)
3: zQxCSJAybTKhMbu9tj9geo08EHM.roa (hash: vRuFfeMEunDY9UG2VQ5bdPd5mpRSySgDc592VktLEXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:db:a6:a1:f7:e1:73:08:d3:2e:56:d8:1f:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=cd12c55e1f7d7ca8eccbd65df6e15dcd5f67affc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:fa:d3:3e:3f:e7:b8:00:88:3f:ab:f5:cd:
5b:0a:3c:55:45:e1:aa:5f:77:80:2f:6f:24:59:b3:
40:bb:15:c9:83:11:3c:f7:75:c6:f2:e8:9e:2c:0b:
1b:bd:00:53:42:22:77:cc:6d:b8:f3:e3:84:f4:4b:
bb:a9:54:14:f0:34:9f:77:52:7f:2f:15:4a:06:59:
c6:34:32:4e:c1:31:62:bf:cb:ad:66:d1:51:18:be:
75:92:de:7a:80:3d:e2:7b:8a:2c:ab:f1:77:0c:b8:
a1:f1:3e:ea:c6:35:c1:8a:43:fa:d4:b6:e8:e8:d7:
3c:76:b5:2a:34:09:64:60:df:3d:bf:e8:9b:8d:68:
76:72:7d:e9:aa:fd:00:23:f0:79:22:07:17:84:5f:
3c:5b:b9:5b:8c:87:29:e8:47:4c:65:9d:e8:97:bc:
46:b9:57:f9:4a:a2:a7:7d:55:47:ce:91:04:cc:06:
a7:56:b7:14:72:77:52:2b:bb:49:70:7d:b2:57:ec:
d6:cd:c8:e9:01:74:a9:72:06:b4:98:eb:7e:98:c4:
59:7b:c8:58:f8:34:5c:c7:f3:43:5e:00:72:96:39:
e7:40:99:82:7e:fb:89:2c:f3:28:63:78:3c:08:57:
a0:6c:a1:40:a6:dc:88:d7:fc:07:fe:b0:31:42:af:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:C5:5E:1F:7D:7C:A8:EC:CB:D6:5D:F6:E1:5D:CD:5F:67:AF:FC
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1a:36:f9:7b:92:1a:50:ac:c1:e2:6e:22:1f:97:4f:36:d5:
fa:83:ae:7e:44:98:02:40:66:a8:0b:04:52:ed:04:57:c7:72:
a8:21:c9:0b:2a:76:15:82:55:1f:d4:16:08:28:ba:95:db:4c:
ee:8e:40:17:86:50:01:78:ac:ae:37:a7:fa:82:c0:b0:11:7b:
00:ea:00:bc:9b:9f:86:09:0f:52:7b:bf:89:59:1c:58:80:e7:
16:c6:b1:8e:ee:8e:eb:fc:9b:27:96:66:6c:63:1f:1e:a7:a0:
23:63:d2:36:6d:88:98:a6:af:73:5f:f6:5a:34:a6:79:86:ce:
33:e1:8d:ee:17:ef:dd:5d:df:2c:1c:08:09:7f:f5:82:af:f7:
bf:30:37:a4:11:9b:18:38:cf:b9:a1:13:aa:15:61:ad:cb:25:
8c:ed:19:85:1e:4d:97:f5:df:cb:ea:d3:8c:7f:68:20:e9:f7:
7a:2b:4d:a5:ff:4e:48:6d:81:22:2e:db:f2:fd:0e:ed:64:d7:
1e:c6:4f:6c:91:88:24:e4:e1:cc:ac:76:e3:f5:f6:35:e3:cc:
c8:0b:f8:a2:a8:1e:1b:e4:a2:79:4f:a0:84:0a:4d:cc:2b:78:
20:a1:a6:74:a4:d1:95:cc:cc:c0:82:49:df:0d:f9:f7:69:f0:
06:1c:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:25 2026 by rpki-client