Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: OyyRu2bBQLC1eTVL/Zbn6V/fyjvC4WdJBteKey7vYTI=
Subject key identifier: BB:E5:A2:CD:5B:51:16:1D:3A:D7:05:B5:77:4B:0C:C0:7A:2E:A7:D2
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 019D984FDA5FB7BBB0871378D0C6D2FC562E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 12B8
Signing time: Thu 16 Apr 2026 22:01:03 +0000
Manifest this update: Thu 16 Apr 2026 22:01:03 +0000
Manifest next update: Fri 17 Apr 2026 22:01:03 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: Evl+LFv20Oexb0/7BXsggYimXXkaeR9IsfiDhMVIcbI=)
2: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (hash: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:da:5f:b7:bb:b0:87:13:78:d0:c6:d2:fc:56:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Apr 16 22:01:03 2026 GMT
Not After : Apr 17 22:01:03 2026 GMT
Subject: CN=bbe5a2cd5b51161d3ad705b5774b0cc07a2ea7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:81:d1:c2:aa:a8:9a:7e:88:12:01:63:21:
8b:1f:ad:9e:30:47:a9:d7:62:2d:e7:70:8d:cf:24:
00:19:5e:c4:18:2f:22:0b:43:4e:71:34:a0:ac:3c:
2c:27:48:b9:b0:4d:c7:1b:25:f8:06:2c:ce:58:b8:
a1:4a:cc:d3:55:b1:d7:63:f9:11:a1:83:1a:a4:0f:
16:11:9e:90:8f:c0:2b:8c:d2:45:2a:80:a1:61:8d:
0a:1e:f8:43:e3:ca:ea:cc:ae:c8:d7:aa:08:0d:a8:
c5:a4:68:32:5a:9f:b1:50:ac:5c:60:88:e9:c3:e3:
53:5c:65:3d:ed:95:16:14:59:b5:f7:e2:06:39:53:
b7:3b:e5:ad:48:13:b9:e1:33:9f:e7:ad:0b:74:23:
7c:c6:a0:4b:06:f3:33:92:27:95:9d:14:13:1d:a1:
fa:d0:61:36:02:9d:4a:81:d7:e1:25:04:3d:29:d2:
c7:ab:27:e4:0f:05:a1:b8:89:50:bd:31:67:1e:89:
05:2d:71:a8:4a:bd:81:38:79:29:39:d4:33:30:a0:
7e:fd:15:5d:8b:eb:35:b0:bf:4d:ea:c1:4c:4d:e0:
ed:29:f7:12:18:15:72:13:69:e7:6b:95:c7:7a:7b:
25:76:1c:1b:b1:77:80:24:4b:04:41:83:af:52:d7:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:A2:CD:5B:51:16:1D:3A:D7:05:B5:77:4B:0C:C0:7A:2E:A7:D2
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fb:35:90:8e:77:a5:c2:13:7b:70:4f:1d:2d:d0:10:8a:b1:
25:9b:3f:7a:66:4d:83:1d:c5:89:bf:ad:51:73:ab:29:b2:af:
e3:14:4b:15:b3:b2:3d:aa:c7:f1:9a:46:95:08:42:4f:ea:2d:
62:89:3e:89:cf:1a:ed:7f:08:df:10:26:54:e7:f8:2d:f8:04:
9b:ac:b0:02:80:3d:6f:63:8f:9b:9f:48:8b:90:47:a1:5c:e7:
1d:2f:68:7c:81:86:3c:8b:20:b8:c6:3d:8b:6b:49:9f:cb:d6:
57:ca:02:6b:3d:90:18:46:8e:8f:2b:54:5f:7e:03:4e:c2:61:
6c:df:95:70:2c:11:b2:ea:f7:9c:7f:7e:47:4e:ec:5d:ef:fc:
29:5e:f7:cd:34:7a:25:62:df:8b:93:a9:b2:92:94:da:a2:e0:
85:a0:81:39:84:06:db:6e:a8:27:68:83:5a:63:6a:27:48:aa:
80:7e:e2:38:68:e3:e1:4e:3f:4f:5f:72:ec:9e:94:bd:9a:56:
52:8e:a7:75:78:83:10:ed:01:60:1f:f5:11:56:55:7d:68:8b:
10:6d:6a:20:d5:b7:76:9f:cd:12:b9:6f:b0:c2:18:7c:b7:7e:
27:33:3d:6d:b0:2f:bd:95:f8:9a:99:cc:93:bc:7d:c2:41:48:
fc:38:d3:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT9pft7uwhxN40MbS/FYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYzMxMzE5NzZhZWEyN2QxNzFjNmMyNjdhOThkM2YzODJh
NjFhMmEwHhcNMjYwNDE2MjIwMTAzWhcNMjYwNDE3MjIwMTAzWjAzMTEwLwYDVQQD
EyhiYmU1YTJjZDViNTExNjFkM2FkNzA1YjU3NzRiMGNjMDdhMmVhN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruWB0cKqqJp+iBIBYyGLH62eMEep
12It53CNzyQAGV7EGC8iC0NOcTSgrDwsJ0i5sE3HGyX4BizOWLihSszTVbHXY/kR
oYMapA8WEZ6Qj8ArjNJFKoChYY0KHvhD48rqzK7I16oIDajFpGgyWp+xUKxcYIjp
w+NTXGU97ZUWFFm19+IGOVO3O+WtSBO54TOf560LdCN8xqBLBvMzkieVnRQTHaH6
0GE2Ap1KgdfhJQQ9KdLHqyfkDwWhuIlQvTFnHokFLXGoSr2BOHkpOdQzMKB+/RVd
i+s1sL9N6sFMTeDtKfcSGBVyE2nna5XHensldhwbsXeAJEsEQYOvUteUQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvlos1bURYdOtcFtXdLDMB6LqfSMB8GA1UdIwQY
MBaAFO7DExl2rqJ9FxxsJnqY0/OCphoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEt
NGNkM2U3MzIxNmYxLzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTBlZmQtZTVkZS00ZGY1LWE1NTEtNGNkM2U3MzIxNmYx
LzEvN3NNVEdYYXVvbjBYSEd3bWVwalQ4NEttR2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPs1kI53
pcITe3BPHS3QEIqxJZs/emZNgx3Fib+tUXOrKbKv4xRLFbOyParH8ZpGlQhCT+ot
Yok+ic8a7X8I3xAmVOf4LfgEm6ywAoA9b2OPm59Ii5BHoVznHS9ofIGGPIsguMY9
i2tJn8vWV8oCaz2QGEaOjytUX34DTsJhbN+VcCwRsur3nH9+R07sXe/8KV73zTR6
JWLfi5OpspKU2qLghaCBOYQG226oJ2iDWmNqJ0iqgH7iOGjj4U4/T19y7J6UvZpW
Uo6ndXiDEO0BYB/1EVZVfWiLEG1qINW3dp/NErlvsMIYfLd+JzM9bbAvvZX4mpnM
k7x9wkFI/DjTmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:53 2026 by rpki-client