Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: N/5fFphF+g6L400kon6ODotPj+5vyT4xMb/akh8LdbE=
Subject key identifier: FF:72:A6:93:98:2C:CA:B4:8A:DF:E8:5C:55:EB:5F:90:CF:A2:16:95
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 019D9D083B63A50F01C6231CC974D6F00B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0556
Signing time: Fri 17 Apr 2026 20:00:55 +0000
Manifest this update: Fri 17 Apr 2026 20:00:55 +0000
Manifest next update: Sat 18 Apr 2026 20:00:55 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: a1BsRglt3qhkvBNVczGJLadGucmPrWEGBohEQPiMXR4=)
2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:3b:63:a5:0f:01:c6:23:1c:c9:74:d6:f0:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Apr 17 20:00:55 2026 GMT
Not After : Apr 18 20:00:55 2026 GMT
Subject: CN=ff72a693982ccab48adfe85c55eb5f90cfa21695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:60:d1:41:10:f3:2d:77:85:41:c1:cb:0d:
54:04:9f:7f:b5:2c:4f:4f:1f:65:07:2a:90:85:68:
54:3e:c6:f3:97:4c:56:ef:4a:a5:27:da:4b:91:da:
35:81:6a:d4:1e:1a:81:ab:5d:e4:2c:f8:bd:0f:8e:
06:11:a7:f5:1b:bf:ef:66:f6:c3:68:bd:06:dd:91:
6b:dc:1f:26:96:6c:1f:76:1a:c0:ba:79:fd:21:ac:
6f:1e:fc:8c:a8:b9:70:8d:89:9e:40:87:ef:7c:d5:
71:14:e1:cd:1b:46:ac:bf:a1:0b:30:d4:4b:11:3e:
69:99:b1:df:f7:e7:eb:f6:38:4e:c7:40:bd:b3:88:
9f:26:de:7b:d9:d0:51:c2:30:7c:8e:a8:be:a1:d7:
10:79:2e:61:f2:f1:10:3e:e6:46:51:77:45:30:70:
8d:30:b5:5e:f6:cf:01:7c:f9:23:29:fa:68:1b:18:
67:8c:48:8b:d4:af:6b:73:24:7e:60:34:68:ad:bf:
e5:f2:90:e4:06:53:b8:35:65:c3:69:d0:97:93:06:
45:50:54:90:c9:a6:7f:98:21:28:05:eb:26:4f:26:
a7:01:27:c3:39:6d:9e:45:d7:dd:66:51:49:08:c9:
81:45:50:4e:db:76:b3:02:be:f9:3b:34:70:fa:8f:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:72:A6:93:98:2C:CA:B4:8A:DF:E8:5C:55:EB:5F:90:CF:A2:16:95
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b3:5a:55:b9:8f:51:c3:37:5b:59:76:33:57:34:0c:ee:24:
bc:1a:90:e8:43:c3:4f:9a:55:65:fc:48:c1:51:57:57:67:ce:
61:d0:ba:ad:b7:d3:e4:a0:7d:33:7d:83:f1:b7:38:1c:67:a1:
1a:f4:c3:b7:34:5a:79:7e:0f:53:d4:e8:48:46:c5:dd:7e:d8:
e6:cb:cc:c8:a6:ee:2a:a6:8c:3f:c1:98:b1:e0:c2:74:94:7d:
3b:6b:76:fe:a3:47:5c:f4:8a:f4:1f:d4:dd:3f:52:cb:df:5a:
04:ed:93:6e:53:d3:7d:03:98:06:38:21:7e:55:2f:8a:1e:f3:
54:53:5b:32:d4:dc:77:25:c2:d9:46:5d:ff:6e:06:35:7a:0d:
e7:92:7d:44:b6:d3:d9:51:0d:c3:7c:64:80:08:90:14:ce:ab:
cf:8b:68:b6:ca:fc:e9:55:0c:c8:7b:dd:b6:69:60:76:2e:85:
34:7e:78:89:5c:b1:cb:62:5e:9f:8a:91:52:5c:17:02:ae:1d:
84:4a:4d:38:4d:4e:58:a6:26:87:28:bc:e9:d5:ad:de:d0:a5:
22:84:80:e2:69:1e:fc:4a:b3:07:82:3f:f4:17:6e:fa:49:c9:
f1:86:74:20:97:78:a4:24:05:74:75:a0:58:1e:36:9f:2b:bb:
eb:22:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:56 2026 by rpki-client