Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: mmtwabqARN0yttRHk4v/PLuKNSX/ndGtdW67HOAMi50=
Subject key identifier: DF:7C:4C:EF:22:BA:06:A8:86:8D:CA:70:13:50:1B:88:99:0E:07:AE
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019D9BBE248E24095233F3C7F8C13DBD0574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:00:22 +0000
Manifest this update: Fri 17 Apr 2026 14:00:22 +0000
Manifest next update: Sat 18 Apr 2026 14:00:22 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: wDu0rXKsUVqAEgnqlt7klhDrYIuhCLLONwn7doEC6PM=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:24:8e:24:09:52:33:f3:c7:f8:c1:3d:bd:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Apr 17 14:00:22 2026 GMT
Not After : Apr 18 14:00:22 2026 GMT
Subject: CN=df7c4cef22ba06a8868dca7013501b88990e07ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:7a:a7:b7:ad:fd:83:0c:4b:8b:cb:14:ab:
15:2c:d4:37:95:37:15:de:28:96:aa:27:57:9f:61:
55:83:ba:e5:6e:3e:94:31:b1:d8:b7:51:fe:17:fa:
94:76:76:87:c8:c2:a8:99:b1:fa:bf:1d:aa:76:9f:
08:47:c3:11:6a:b0:e1:83:36:32:c2:b3:a5:9a:de:
ce:27:f9:ef:de:fb:e7:15:9d:b5:a6:05:7f:f4:0d:
2f:bb:79:64:82:93:71:b6:6c:b5:c5:57:a2:fa:06:
24:4c:a9:fc:94:e2:90:e5:4d:a7:ab:6d:5e:38:d0:
6e:b4:74:de:dc:e5:10:27:e0:29:0d:ed:32:e3:72:
61:dc:c4:ef:52:0a:77:bc:48:d4:b5:45:0d:d4:1d:
70:97:48:91:08:2a:f5:9c:c4:57:60:cb:ed:bc:69:
a1:d0:f3:ad:23:05:de:fe:7c:5f:cc:9f:77:70:16:
a3:9d:65:0b:54:c2:7c:a9:88:62:cf:e7:aa:50:71:
ff:2b:24:f6:47:08:9b:4a:3d:a3:a8:85:a2:75:6c:
19:48:c6:15:31:63:0a:3e:ca:dd:00:a1:e9:a5:85:
5a:f5:8f:c4:e1:18:3f:79:38:8c:d3:b8:65:84:d0:
f4:51:34:1e:29:0f:00:42:8a:f9:59:cc:ab:e1:70:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7C:4C:EF:22:BA:06:A8:86:8D:CA:70:13:50:1B:88:99:0E:07:AE
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bc:86:4b:0f:33:ae:7d:5a:c0:4d:89:03:bc:fa:a1:3c:d7:
13:d1:47:cb:ba:5a:00:62:8b:8a:ab:7d:19:fc:3c:f5:88:9d:
5e:2b:0c:d6:14:46:e4:11:2f:0e:99:93:13:d1:17:62:3a:56:
93:a9:77:56:81:95:b2:fb:20:08:80:97:9c:bb:ad:fc:3d:07:
41:73:64:eb:8e:72:2a:7c:45:5e:a8:8b:e7:31:c6:d3:f2:04:
81:94:2a:8e:27:f7:d0:94:d8:74:e9:85:8a:58:1e:df:fb:11:
e4:fd:bc:83:14:85:12:b4:6f:fe:f0:be:92:23:38:7a:6a:d6:
88:98:9f:2d:3b:3c:1f:0a:c3:fe:27:e5:ba:5b:c4:3a:ad:1a:
9e:eb:8a:bc:bd:97:00:53:f7:c6:2d:15:6d:b0:a8:b8:41:9e:
61:b4:e9:c2:68:96:58:70:67:7b:63:95:db:62:c1:4d:a6:1e:
19:75:cf:ab:c5:91:c3:89:2b:0e:36:07:7b:88:da:88:73:c7:
38:95:fb:ce:39:3c:3b:c8:15:d5:da:d5:9c:e3:0d:bd:fd:ea:
15:69:2c:c8:e5:07:5d:8a:7f:8a:0c:60:be:d0:ff:1f:3e:ab:
f5:f1:54:9b:31:17:0e:3b:b4:0c:eb:f4:91:f0:de:c7:5c:20:
d2:7d:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:00 2026 by rpki-client