Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: ekO1Gv7IB+B5ivUVDZP6k2z0JDTE+eF2005k1kMHKeg=
Subject key identifier: F1:A4:6C:A7:A2:0C:95:F7:CF:B0:68:DC:44:01:EF:A1:C6:5C:26:E8
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019DA4540237EB1CCD72C7D655CB50D2D3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 06:01:02 +0000
Manifest this update: Sun 19 Apr 2026 06:01:02 +0000
Manifest next update: Mon 20 Apr 2026 06:01:02 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: tLt5tWMhqjlr1d1zfzpDWbzl/CjdKSg6h4DnzzulbO4=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:02:37:eb:1c:cd:72:c7:d6:55:cb:50:d2:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Apr 19 06:01:02 2026 GMT
Not After : Apr 20 06:01:02 2026 GMT
Subject: CN=f1a46ca7a20c95f7cfb068dc4401efa1c65c26e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:55:95:e1:a6:ec:47:f5:32:08:5c:89:26:
12:a8:c9:69:18:cd:5f:75:87:02:1e:62:7d:58:fd:
67:b6:1d:79:ea:d1:93:56:a9:10:48:66:63:db:07:
87:05:9c:13:dd:6c:36:e5:84:39:38:cd:96:96:dc:
7d:a9:4b:82:2a:5a:ef:17:96:b4:1e:37:3e:7e:75:
b4:04:d6:ba:41:26:01:46:7b:5e:62:27:57:6d:c4:
f3:74:13:2f:97:b5:3e:74:8f:a7:0c:93:93:18:46:
99:5e:4e:bf:58:79:2d:60:09:46:65:54:2c:b8:bb:
5d:ef:77:80:52:53:90:14:1e:d7:63:c6:71:96:2f:
4e:ef:b9:9b:0d:7e:9b:98:df:60:9b:7c:38:df:f0:
97:ea:63:78:59:a6:46:5a:56:7e:db:69:dc:5e:78:
c7:6a:c2:cc:0d:6a:d0:40:d1:84:4e:e2:53:dd:1b:
05:e8:7d:6d:be:66:3c:38:3c:30:62:e5:ad:ad:23:
d2:9a:d6:92:3b:73:83:e3:e5:c1:dc:da:cc:32:3a:
03:b6:54:c6:52:e2:85:90:69:54:9d:d3:b7:95:c9:
77:58:04:75:c5:72:16:b1:24:86:24:2c:a8:b1:2a:
79:98:45:41:71:e0:0e:f0:49:37:64:ce:37:7e:3c:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:6C:A7:A2:0C:95:F7:CF:B0:68:DC:44:01:EF:A1:C6:5C:26:E8
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8e:67:9b:25:91:fe:b3:51:c6:c7:0d:b5:60:db:c8:e9:cf:
42:a0:13:3b:f2:2d:f4:3d:20:75:a7:8f:ff:13:36:2f:8a:6c:
65:57:d5:2b:14:c2:2b:6a:e9:27:f6:ef:ff:ba:22:e1:29:9e:
70:fd:4c:a4:a4:5e:c7:92:ad:ad:34:79:05:fd:20:5b:78:86:
5d:d9:8b:65:26:df:9f:49:0c:d9:f3:76:92:5a:09:ac:02:02:
1d:4d:2d:df:01:e0:33:d5:8c:b8:21:a7:ad:7c:26:75:1a:c7:
dd:a8:0d:9f:f4:8e:bd:4a:dd:77:b1:e6:0b:89:c6:5b:e0:84:
7c:a7:18:d1:ee:42:b9:54:f2:27:9a:61:41:ec:11:02:69:61:
93:50:46:08:e4:31:20:41:ec:aa:81:0b:75:b5:84:52:92:91:
34:2a:3c:29:0d:48:53:d7:02:f7:7c:7f:dd:e0:96:9c:53:58:
d1:a2:2f:01:43:bc:b6:11:b0:03:4c:29:1a:7b:b4:a2:bb:28:
03:a8:aa:14:d8:0e:f4:44:26:d8:d4:f4:fa:27:82:4c:04:2f:
08:57:75:48:f0:2b:3b:0e:db:a9:44:9e:3f:2b:9a:8a:6b:34:
4d:ed:e0:96:3f:8e:11:06:6e:1b:32:45:9d:2e:a3:7e:36:2f:
97:0c:b7:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVAI36xzNcsfWVctQ0tPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTEzMTRlMDRlYzk2NzZmMmI2MDI0OGUxYjliZDAyZWYw
MGUxNjgwHhcNMjYwNDE5MDYwMTAyWhcNMjYwNDIwMDYwMTAyWjAzMTEwLwYDVQQD
EyhmMWE0NmNhN2EyMGM5NWY3Y2ZiMDY4ZGM0NDAxZWZhMWM2NWMyNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04dVleGm7Ef1MghciSYSqMlpGM1f
dYcCHmJ9WP1nth156tGTVqkQSGZj2weHBZwT3Ww25YQ5OM2Wltx9qUuCKlrvF5a0
Hjc+fnW0BNa6QSYBRnteYidXbcTzdBMvl7U+dI+nDJOTGEaZXk6/WHktYAlGZVQs
uLtd73eAUlOQFB7XY8Zxli9O77mbDX6bmN9gm3w43/CX6mN4WaZGWlZ+22ncXnjH
asLMDWrQQNGETuJT3RsF6H1tvmY8ODwwYuWtrSPSmtaSO3OD4+XB3NrMMjoDtlTG
UuKFkGlUndO3lcl3WAR1xXIWsSSGJCyosSp5mEVBceAO8Ek3ZM43fjzu8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGkbKeiDJX3z7Bo3EQB76HGXCboMB8GA1UdIwQY
MBaAFOxRMU4E7JZ28rYCSOG5vQLvAOFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2It
M2JiYmNhMzEwZDcxLzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2ItM2JiYmNhMzEwZDcx
LzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo5nmyWR
/rNRxscNtWDbyOnPQqATO/It9D0gdaeP/xM2L4psZVfVKxTCK2rpJ/bv/7oi4Sme
cP1MpKRex5KtrTR5Bf0gW3iGXdmLZSbfn0kM2fN2kloJrAICHU0t3wHgM9WMuCGn
rXwmdRrH3agNn/SOvUrdd7HmC4nGW+CEfKcY0e5CuVTyJ5phQewRAmlhk1BGCOQx
IEHsqoELdbWEUpKRNCo8KQ1IU9cC93x/3eCWnFNY0aIvAUO8thGwA0wpGnu0orso
A6iqFNgO9EQm2NT0+ieCTAQvCFd1SPArOw7bqUSePyuaims0Te3glj+OEQZuGzJF
nS6jfjYvlwy3Rw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:23 2026 by rpki-client