Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: adSBZwwnXYIYNnxUDG4FULeyGReLkcgscDrpHeKTboE=
Subject key identifier: A7:87:D0:14:63:8F:92:A7:EC:C6:6F:F6:C6:FF:66:72:DB:80:8F:87
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019D9B5115B0FC8D8D90547BF7BFA5F23C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 160D
Signing time: Fri 17 Apr 2026 12:01:15 +0000
Manifest this update: Fri 17 Apr 2026 12:01:15 +0000
Manifest next update: Sat 18 Apr 2026 12:01:15 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: 3vtNRqYGzt2EVnQL4fMe89QtYPNsnEE7PD6goQoSQt0=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:15:b0:fc:8d:8d:90:54:7b:f7:bf:a5:f2:3c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Apr 17 12:01:15 2026 GMT
Not After : Apr 18 12:01:15 2026 GMT
Subject: CN=a787d014638f92a7ecc66ff6c6ff6672db808f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:00:83:ba:49:6a:d7:3a:d3:b3:fa:dd:a8:
1f:b2:b9:a1:72:f3:b5:09:1e:3a:30:02:9d:21:49:
7c:0f:9e:7a:b7:b3:9e:2b:72:e9:ed:64:08:18:7f:
86:98:b2:53:cd:60:29:f0:a3:22:29:a4:13:7e:ad:
12:b2:57:98:43:af:71:58:50:4d:d1:b7:7d:76:39:
e8:d6:b5:8f:09:72:0c:5e:bc:a1:26:c1:8a:ef:fc:
4e:f8:eb:00:65:08:eb:e7:b7:fb:40:b0:c1:e1:02:
79:cc:e4:6e:fe:31:97:e8:4c:8e:67:0f:70:cf:eb:
43:c0:ae:e6:27:50:7e:7c:ed:17:a5:b3:59:0c:1a:
d4:90:6d:76:41:b7:27:1f:c0:f5:8c:dc:32:8e:18:
34:9d:9e:ed:c0:bd:2f:a7:0f:45:bc:af:ce:9c:3d:
11:3a:de:17:80:99:84:ce:bc:09:2f:35:2b:30:0d:
52:39:b6:1d:0f:7a:4d:a0:d9:cb:00:10:69:49:45:
f8:cf:98:b0:4b:c0:b5:d8:2d:0d:39:18:75:c3:b2:
91:ac:27:dd:89:0a:5a:5a:f0:68:88:d2:6f:da:a9:
ea:c4:84:b8:c1:7b:83:1a:9d:ec:4b:61:c3:de:9f:
73:ad:23:46:25:30:d8:b1:ee:2c:61:fd:66:6c:4f:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:D0:14:63:8F:92:A7:EC:C6:6F:F6:C6:FF:66:72:DB:80:8F:87
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:0a:48:e9:26:36:e1:fe:bb:36:65:be:17:10:0f:7c:3f:
89:22:ef:56:a6:4b:4d:e3:43:01:5c:6c:8a:d1:4e:72:45:e6:
f8:f7:5a:00:7d:e1:01:25:c2:87:0b:65:4f:5e:00:99:60:02:
32:dc:64:fa:ae:4d:47:20:84:d9:43:91:18:b9:e4:6b:d3:89:
3b:48:39:31:9d:c4:e4:1a:c4:f3:f8:38:5c:08:48:ae:c3:c9:
dd:0e:03:d5:dd:f6:86:8c:e7:dc:d6:cd:52:bb:dd:e4:08:cc:
b8:c3:5a:82:a6:36:6c:36:7e:5f:6b:e0:06:95:72:ae:20:ca:
be:1f:92:1b:9a:92:f2:41:89:38:de:56:e5:38:ae:00:35:47:
80:5b:74:56:64:be:27:27:8f:0c:6c:ee:90:48:76:f5:36:49:
f1:94:e4:4c:73:14:20:1b:e4:5b:a8:6f:f4:ac:2d:4c:6d:da:
16:a6:dc:7d:55:85:a2:36:f9:b5:f7:61:25:3a:10:9f:67:0d:
ec:bc:16:c5:20:f8:73:bd:e8:fa:de:f8:45:d0:8b:d3:7f:f4:
52:13:63:5c:97:7e:a2:1b:9a:bd:63:5d:d9:ea:5c:e0:ee:15:
e4:bc:af:2f:89:ba:f3:bf:eb:48:e3:2f:95:6b:75:0d:7d:dd:
12:a6:43:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bURWw/I2NkFR797+l8jw7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1
ODlkYjkwHhcNMjYwNDE3MTIwMTE1WhcNMjYwNDE4MTIwMTE1WjAzMTEwLwYDVQQD
EyhhNzg3ZDAxNDYzOGY5MmE3ZWNjNjZmZjZjNmZmNjY3MmRiODA4Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cUAg7pJatc607P63agfsrmhcvO1
CR46MAKdIUl8D556t7OeK3Lp7WQIGH+GmLJTzWAp8KMiKaQTfq0SsleYQ69xWFBN
0bd9djno1rWPCXIMXryhJsGK7/xO+OsAZQjr57f7QLDB4QJ5zORu/jGX6EyOZw9w
z+tDwK7mJ1B+fO0XpbNZDBrUkG12QbcnH8D1jNwyjhg0nZ7twL0vpw9FvK/OnD0R
Ot4XgJmEzrwJLzUrMA1SObYdD3pNoNnLABBpSUX4z5iwS8C12C0NORh1w7KRrCfd
iQpaWvBoiNJv2qnqxIS4wXuDGp3sS2HD3p9zrSNGJTDYse4sYf1mbE84jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeH0BRjj5Kn7MZv9sb/ZnLbgI+HMB8GA1UdIwQY
MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt
ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3
LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaQKSOkm
NuH+uzZlvhcQD3w/iSLvVqZLTeNDAVxsitFOckXm+PdaAH3hASXChwtlT14AmWAC
Mtxk+q5NRyCE2UORGLnka9OJO0g5MZ3E5BrE8/g4XAhIrsPJ3Q4D1d32hozn3NbN
Urvd5AjMuMNagqY2bDZ+X2vgBpVyriDKvh+SG5qS8kGJON5W5TiuADVHgFt0VmS+
JyePDGzukEh29TZJ8ZTkTHMUIBvkW6hv9KwtTG3aFqbcfVWFojb5tfdhJToQn2cN
7LwWxSD4c73o+t74RdCL03/0UhNjXJd+ohuavWNd2epc4O4V5LyvL4m687/rSOMv
lWt1DX3dEqZD1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:08 2026 by rpki-client