Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: uP6GXNeNNs4x6OV8knhiDtsszN2b5t8AkMXi4OTn+NY=
Subject key identifier: 6E:CF:B4:1C:00:DE:88:65:C4:8C:71:16:65:E5:C4:8B:1C:F1:40:02
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019DA3AED84DAEF999B0840859F7161B5FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 03:00:37 +0000
Manifest this update: Sun 19 Apr 2026 03:00:37 +0000
Manifest next update: Mon 20 Apr 2026 03:00:37 +0000
Files and hashes: 1: 8-89J-VDYbXo5QJ6KxQpyalUIfY.roa (hash: 6ikDySot4sJSAZPqWZ7X36wEO/TGRKEez0qZEAZB7js=)
2: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: uVFdLLJDzcFzN5B5aRKW6dpKliXBys030QVdpEsW2g0=)
3: L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa (hash: o6V+qlxfeOpUo6BdN79h+Rr8zer3sNJyIWZIjdcrgXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:d8:4d:ae:f9:99:b0:84:08:59:f7:16:1b:5f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Apr 19 03:00:37 2026 GMT
Not After : Apr 20 03:00:37 2026 GMT
Subject: CN=6ecfb41c00de8865c48c711665e5c48b1cf14002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:4e:ff:e8:00:0a:86:c2:7a:db:92:6d:99:
68:68:e6:31:96:db:51:ac:40:ac:42:b4:00:57:13:
a3:d2:cd:8b:0b:c6:70:36:83:1c:11:7e:80:2e:36:
76:40:69:6b:30:2c:92:fe:79:48:4c:a8:8e:a2:19:
bd:79:e4:17:dc:dc:35:32:59:10:07:a7:39:ba:35:
b5:53:de:e0:ba:45:59:a9:eb:63:3f:e9:93:70:4e:
60:14:a3:f5:0f:8a:fe:c8:7f:13:19:13:b8:cd:d8:
1a:dc:11:47:e0:b9:3d:e5:05:33:ad:42:ac:80:29:
9e:4f:ef:98:fb:c0:58:92:c8:76:44:68:e8:e4:da:
26:91:5f:78:06:37:41:b4:df:ee:d3:5d:2b:ba:13:
f8:55:14:18:21:f8:e7:9a:06:17:ec:6e:68:25:7b:
e9:a4:39:72:5e:60:63:4a:2f:9b:13:66:6d:e6:8f:
f9:4f:12:c3:0d:82:7a:0d:d6:bd:47:f2:86:f2:86:
71:a0:1a:d3:7c:08:c7:ae:99:7e:86:1f:7b:80:e3:
2e:6e:b8:70:cb:16:b8:c6:92:30:02:c0:a3:5d:29:
66:2d:5e:8e:16:a7:e9:c0:13:9d:ab:35:ed:88:5d:
f9:b6:eb:7a:a9:e3:8f:fe:44:45:34:5a:23:e6:a9:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:B4:1C:00:DE:88:65:C4:8C:71:16:65:E5:C4:8B:1C:F1:40:02
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:04:f0:2d:b3:fb:1b:79:b5:ec:5f:73:c0:a9:34:6c:ef:
66:5f:67:49:04:e1:88:2b:bf:75:4c:2b:8b:80:23:71:9e:00:
0a:38:8f:34:f5:8e:94:79:b0:19:bc:0f:97:9d:d5:51:90:2a:
b0:11:8f:fa:9a:bb:eb:45:77:0d:b4:8c:85:54:ec:0f:ea:5e:
a3:77:4c:bd:e9:3c:d3:2d:dd:e2:39:17:5d:f7:a2:fb:77:44:
15:8f:74:1d:f3:e4:be:2a:7e:a4:86:6e:8d:c4:1e:64:0e:f7:
b8:29:5e:70:05:f9:2e:32:d6:c9:70:00:9d:45:e2:32:55:4f:
d6:de:92:da:79:43:8a:13:cf:88:32:21:96:c0:1f:22:a2:b4:
9d:fb:c7:8d:b2:d6:5d:01:70:d8:5f:60:30:2b:c8:5b:b7:2f:
4d:ab:ec:b2:cd:1e:05:d4:e6:8f:43:36:5c:fa:2d:8e:05:a2:
e9:a2:b2:d7:ad:c0:33:fd:9b:a7:52:3b:86:10:19:db:99:c5:
48:2d:55:a5:d5:29:97:12:95:78:64:a1:5e:27:c6:58:2e:ec:
0b:22:55:96:d6:e9:43:7a:f1:13:92:fb:7d:1d:05:61:a6:d1:
57:e7:73:28:14:4b:ea:0d:87:cd:02:4d:f4:fb:a1:bb:67:9b:
52:67:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:21 2026 by rpki-client