Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier: h+5ojp4RwlyofoGmGZ9MojG/nTqoKu3tvHiDeKWobyI=
Subject key identifier: CA:E3:DA:30:25:63:8A:FD:B9:50:DB:40:B9:62:1A:90:62:64:DB:EE
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial: 019D98F43121C4C6ABD57801403B6085A87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number: 0C49
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: k+sZjIByRygxXZmo5gURUyUQK+OBIrg8Rn//bZh/F1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:31:21:c4:c6:ab:d5:78:01:40:3b:60:85:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=cae3da3025638afdb950db40b9621a906264dbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:a0:e8:e4:57:8a:89:85:35:46:11:3b:29:
e4:35:18:21:00:a1:8c:51:07:00:ca:ab:8a:dc:0b:
62:41:a8:c0:bd:1b:61:20:8e:80:47:94:55:cf:58:
09:33:1c:80:d6:a2:80:91:78:a5:4b:17:9e:24:19:
21:03:31:7f:f5:ce:dd:5f:f9:18:3e:d5:0b:0d:f7:
b0:3e:46:39:00:e5:cd:c3:ab:ba:3a:05:eb:5d:cd:
ed:6a:7e:b9:49:1e:c9:6e:f5:8e:81:35:83:0f:c0:
c3:98:8c:e6:3f:50:81:cb:d1:03:48:55:c9:03:d1:
51:58:87:65:e8:3a:bf:bd:57:76:24:75:7e:9b:ad:
9e:a4:55:22:e9:2a:0b:f3:8e:b1:c9:ba:48:07:04:
15:ff:43:36:93:d9:a0:86:cd:f3:d7:35:bb:6f:73:
aa:d0:45:e6:3f:39:d5:ab:c5:c5:23:3b:23:a5:38:
d3:bd:e6:7f:cc:69:77:e3:c8:01:70:d5:af:d3:f3:
b6:5c:15:9f:d8:4c:2a:2f:fc:ba:08:e5:df:c3:5a:
76:f4:88:dd:53:a3:aa:d0:82:c4:62:7c:43:2f:62:
34:75:b3:89:bd:58:0a:09:ca:c5:09:77:d8:a0:99:
6b:ca:7f:f8:38:08:ca:14:44:bf:d6:09:d8:ca:40:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:DA:30:25:63:8A:FD:B9:50:DB:40:B9:62:1A:90:62:64:DB:EE
X509v3 Authority Key Identifier:
keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:ce:f4:1d:ca:70:e9:9f:f6:02:52:4d:d8:9c:05:46:fa:
f8:37:b6:54:03:2b:34:ff:80:d4:52:63:33:e3:5b:86:d2:b6:
2c:4e:a5:29:af:d8:8e:08:22:63:f7:12:47:5d:e2:87:02:1b:
9c:05:48:45:3f:80:4e:c8:8d:71:66:96:2a:51:d8:4e:c9:5a:
d0:9e:e7:c6:85:63:f9:d7:73:17:47:54:4a:20:f4:4d:8f:68:
32:09:e1:f9:aa:45:54:8f:b4:f3:18:9f:d5:a4:4d:a1:95:22:
06:c9:03:29:10:a3:00:4c:d2:59:df:9e:a0:13:92:36:74:b7:
e3:45:78:28:02:3c:1f:8e:a1:87:05:50:2b:0f:1f:33:77:8e:
5a:d5:d7:78:48:f7:2f:65:82:5f:a9:24:a3:54:aa:e2:17:8f:
e4:df:a7:ba:ef:8b:13:8d:b4:3b:c9:a5:f0:84:82:c6:c0:77:
c9:52:17:74:40:ca:7e:ce:b5:08:be:d4:ee:74:ea:ef:07:a0:
f0:34:53:54:82:65:fa:bd:ca:65:80:15:ee:de:19:da:1e:90:
a3:d7:23:0f:d0:f0:0f:2a:fc:d8:a6:ad:46:71:ac:83:df:f1:
f4:f4:e9:4d:e7:a8:4c:70:e3:9f:14:c6:17:26:48:1b:cb:d4:
5a:1d:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:06 2026 by rpki-client