Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: wlla2YcUpjOBg54hNX+i6HVoCRb5B/Fy9J+HJns0nyo=
Subject key identifier: 47:66:60:C9:B2:33:F4:ED:00:EF:AB:3B:4A:4E:C4:9A:C8:CF:B3:0E
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 019D99D088377927050A4F7C3C9A38266552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0E0E
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: Yish90WJfslH7p95G1Xa+pHs/w92cTxPXU4WnX++/cQ=)
2: pk7GnCKoxkqkPmBMLQvy0zcaqM8.roa (hash: 3tcXLqvph/hx58R2cNUaqQx5GKRZxyDjikkRZceH7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:88:37:79:27:05:0a:4f:7c:3c:9a:38:26:65:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=476660c9b233f4ed00efab3b4a4ec49ac8cfb30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:67:47:e5:4c:69:43:04:ed:d1:1f:ba:f0:
87:1e:60:45:74:b4:a9:61:a2:75:dc:6b:32:34:68:
95:af:5d:ef:66:2b:d0:ea:f5:95:d3:6a:ca:86:15:
53:db:bc:a5:f8:7e:b7:19:5f:38:bb:d7:3e:ad:d4:
43:e3:95:d6:ce:07:58:88:b2:d1:23:65:18:da:53:
08:93:aa:49:2e:0c:70:ef:b7:9d:32:a9:da:7e:42:
48:65:e3:77:44:84:53:73:3f:58:ff:9a:54:87:00:
50:3b:4d:06:17:1a:fb:35:9a:f8:d0:6e:9a:0c:95:
65:1f:69:e3:be:da:d4:d5:14:24:de:d5:dd:9d:d2:
07:07:8a:14:4f:38:13:57:4a:d3:a4:b8:2e:5b:9c:
9c:d7:a8:be:2e:65:5c:9d:27:1a:13:d9:56:87:e4:
b4:5e:0d:76:0f:38:d3:8e:b6:7d:44:b5:d0:62:ac:
f5:ec:6d:a6:80:1c:c6:95:4d:3f:e0:4c:7c:11:4e:
cc:4b:69:02:b3:9b:6f:8e:d4:30:de:32:12:6c:66:
55:bc:b8:9e:f2:99:22:a9:42:66:c1:9f:25:a9:8c:
bb:fd:3b:c5:71:ff:41:88:ff:35:b7:9c:c6:01:a1:
f7:30:4d:e6:a7:90:2e:45:4d:22:be:72:37:3c:85:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:60:C9:B2:33:F4:ED:00:EF:AB:3B:4A:4E:C4:9A:C8:CF:B3:0E
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:dc:49:5d:58:b2:95:39:5a:75:6d:92:0d:17:64:c0:35:
f8:74:59:2b:06:9a:70:f6:af:94:a1:ea:43:59:18:4a:70:c9:
b4:b4:62:99:bf:a0:b0:41:1f:9c:b5:c9:ad:50:43:4d:4b:dc:
da:5d:19:0f:33:e5:2c:c5:a7:87:2b:e4:58:ab:7d:89:98:32:
5c:0c:b2:3e:04:86:59:80:02:c5:a2:55:53:72:ff:a5:2b:c0:
c4:22:70:1d:3f:23:02:4f:0c:7e:72:ca:b9:cf:b1:c6:03:a3:
f2:c6:79:39:d6:65:c8:14:ca:8b:55:45:a6:59:38:02:15:52:
aa:10:5d:83:11:0d:a5:96:0d:0b:d4:a8:9b:94:20:fa:7a:66:
0e:e5:54:7e:04:6c:fb:fb:5d:40:09:0d:2d:8d:f3:e6:f5:e0:
b0:17:37:5d:f3:d3:5a:e2:98:d3:f4:41:96:4c:61:f9:1a:7b:
53:14:80:7b:85:4b:6a:ad:81:33:43:cd:bc:5d:cb:f7:15:07:
b1:10:ca:3c:61:22:e7:f2:f6:e8:eb:03:f7:47:93:24:b2:7d:
51:ee:e9:f8:e0:5c:a7:e3:d2:5d:aa:c0:82:ce:35:46:d4:78:
d7:c1:e7:0b:82:4f:b5:10:a6:29:71:26:9f:82:8d:9b:d7:10:
55:43:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:48 2026 by rpki-client