Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: amnIRh//dcsdyRg/jVYHJSxuC8tJqyuUFtVvEXyouFU=
Subject key identifier: ED:A8:49:E2:73:56:02:3A:6A:32:56:3D:65:CE:D7:22:A1:45:31:41
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 019D988687A43F7713197119076DB003C67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 23:00:46 +0000
Manifest this update: Thu 16 Apr 2026 23:00:46 +0000
Manifest next update: Fri 17 Apr 2026 23:00:46 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: uTESmpyD2wu169f8QHfsh/o6UH7XL/w9lg5rB2VcQ3A=)
2: dZLilwWHDcTBgw2vlgqQEo8wXmI.roa (hash: vNrKzB7jLGfmCB0/mX4ygPzITD3M9syDqPUvmlc8/PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:87:a4:3f:77:13:19:71:19:07:6d:b0:03:c6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Apr 16 23:00:46 2026 GMT
Not After : Apr 17 23:00:46 2026 GMT
Subject: CN=eda849e27356023a6a32563d65ced722a1453141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:a5:a0:8d:6e:6d:4f:2e:ca:da:23:f2:71:
60:2c:16:b7:fc:19:4f:16:1b:4a:33:0e:86:47:b1:
e4:21:fd:03:8e:fc:31:3d:05:c3:26:3a:cd:94:ec:
76:3e:d0:fe:e1:78:d2:44:e8:61:b1:05:10:ab:3f:
91:36:af:ff:d9:b1:67:4e:d1:3a:71:f7:48:d9:d2:
b2:de:c7:84:d8:ed:2d:ee:de:1b:d3:10:4d:0c:98:
14:a0:54:34:3f:37:c8:6a:65:9f:e9:ba:b6:5a:2d:
a4:78:f7:9a:1c:95:97:91:42:56:b7:23:24:d5:4d:
d9:63:d1:9f:92:24:22:d1:78:0c:da:6a:e6:12:b1:
eb:6f:28:96:6b:69:ae:18:e8:87:fc:df:e6:81:43:
f2:a6:30:99:b2:23:e9:91:37:3c:56:19:8b:c5:4b:
17:1e:77:b3:da:e4:61:ea:09:93:b4:25:4c:18:16:
bb:6a:91:3f:67:70:01:42:d5:9b:99:fe:53:27:88:
3a:ba:a6:b5:34:fa:ea:70:62:8e:02:5b:dd:15:8e:
07:c6:b8:e6:87:17:3e:a6:5f:c4:f0:4d:c4:90:f7:
60:7a:15:6a:db:2f:9f:e3:6b:27:a1:bc:4b:4e:58:
fa:dd:a8:d7:8d:ee:e6:99:11:8e:56:01:fa:fd:40:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:49:E2:73:56:02:3A:6A:32:56:3D:65:CE:D7:22:A1:45:31:41
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c7:b9:43:df:f5:ad:8d:53:99:f5:aa:ef:1e:6c:6d:47:cf:
19:e7:ed:7a:e5:75:40:01:b6:c7:34:aa:62:41:46:26:eb:a1:
b3:d0:5d:a1:67:d8:6b:55:54:da:79:f9:86:ef:7e:d2:44:3d:
e3:d9:f3:82:d8:01:8d:06:8b:2a:cb:3e:fd:e5:1e:4d:92:ab:
5a:2c:b8:d1:5a:f0:9f:3d:22:1c:59:15:13:9f:b3:49:46:f6:
c4:3b:79:0a:a3:32:23:04:1d:3c:b5:83:43:84:1c:28:40:e9:
0f:56:d5:3a:ce:fa:00:fd:72:80:e6:aa:df:8a:14:0f:dc:8a:
7e:96:75:67:83:6a:11:18:54:19:6c:b5:02:07:fa:90:07:78:
99:6c:d4:64:fb:52:cb:80:e6:61:02:7f:5f:78:af:05:a3:5b:
88:11:3a:d2:14:7d:6e:f4:cf:2b:43:06:d8:93:30:fb:47:94:
57:fc:58:ee:81:84:66:a0:ce:e4:1f:ff:9b:e7:ec:d6:bf:bf:
46:0c:a2:61:b6:3c:04:d9:40:8c:8c:de:d6:0c:44:b1:90:37:
2e:63:47:8e:48:c0:db:7d:4a:60:a9:23:89:eb:47:88:87:11:
f6:37:2f:a0:fd:10:78:c4:8c:0b:9e:14:6f:be:c2:2e:d1:c4:
fc:99:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:23 2026 by rpki-client