Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: v1JY+MrpeSHA41o07iP37dyLexeYF19rXEQZqjgff9I=
Subject key identifier: 28:23:6C:FF:69:26:AF:7A:88:63:61:A7:CE:B0:AF:8F:6B:0B:91:FD
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019DA41CBDF5EF5D2DB193EB894438ADED40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 109C
Signing time: Sun 19 Apr 2026 05:00:40 +0000
Manifest this update: Sun 19 Apr 2026 05:00:40 +0000
Manifest next update: Mon 20 Apr 2026 05:00:40 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: 88+MiyOLmPhErx78dYG+jJ9gVrotTxYTvVPSSUHzmUw=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:bd:f5:ef:5d:2d:b1:93:eb:89:44:38:ad:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Apr 19 05:00:40 2026 GMT
Not After : Apr 20 05:00:40 2026 GMT
Subject: CN=28236cff6926af7a886361a7ceb0af8f6b0b91fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:60:3b:ec:33:70:a6:8a:06:22:69:ca:eb:
5c:dd:12:f2:a3:61:b0:f5:5b:65:f9:53:cb:ff:a9:
e6:66:ef:84:21:f7:65:fc:11:83:b6:31:12:55:37:
2e:d9:2c:4d:7e:9b:7f:7b:e8:b6:e8:38:03:9e:ea:
73:88:84:a8:dd:90:7d:46:e2:d9:80:3b:ff:6f:7c:
2b:fb:fa:4b:1c:7d:d7:c8:ce:5e:6f:1d:23:9b:c8:
73:1a:9a:fc:1c:38:2d:01:87:1e:97:25:6c:54:56:
f7:e5:bb:b8:74:95:d8:44:ee:52:c3:4e:35:57:52:
76:9f:48:9c:03:8f:a2:b9:01:ca:45:a9:19:12:14:
ff:a2:50:9c:a3:dd:31:d7:f4:d4:68:29:a9:e0:0f:
5c:85:49:17:5c:32:72:7e:32:9e:5c:1d:19:8b:9f:
79:e1:b2:be:96:32:2d:f8:a6:a1:63:7b:78:b2:1f:
03:e5:33:97:dd:8e:0f:22:14:a5:2e:a1:65:53:ef:
c3:24:ff:a4:c3:bf:ae:e5:10:70:7a:e7:9d:49:80:
f8:d2:cc:82:96:45:07:a8:34:ef:51:fb:ac:77:32:
88:9f:16:49:ac:44:76:8e:34:3f:cc:cc:15:d8:9b:
db:5f:2b:cd:2b:4c:ad:84:86:e8:1d:78:04:09:c9:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:23:6C:FF:69:26:AF:7A:88:63:61:A7:CE:B0:AF:8F:6B:0B:91:FD
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7e:4d:cf:b9:00:09:18:39:5f:1b:df:c5:1f:7e:22:a4:44:
ad:2f:58:7f:8b:6b:f3:4e:fe:c8:4c:e2:11:d7:ec:57:b7:f4:
67:d1:57:a6:a3:75:74:0d:43:b5:7a:7a:48:f9:ee:68:91:94:
57:c3:32:ec:10:b1:86:9d:25:a8:b3:c8:b9:fe:b1:77:1b:cf:
97:cb:89:2e:5b:a5:b3:93:02:d5:72:4a:c8:19:78:c8:69:32:
4f:9d:45:67:8f:aa:3d:6f:7e:ed:0f:27:c7:eb:75:c3:92:6c:
f9:cc:c3:5c:ea:cd:80:48:48:7b:f4:30:ae:d9:21:e9:cb:27:
9e:5e:22:c7:39:d4:2d:bc:79:e4:2e:00:2e:d5:c2:cb:9f:96:
6c:68:dc:aa:aa:b9:17:65:48:af:cd:90:84:09:f1:47:c3:d3:
b7:ea:31:bd:00:2c:1d:5d:95:35:3a:0c:c1:9d:4b:b9:2d:8f:
8b:02:7b:12:e9:96:46:40:0b:75:63:46:c1:d4:be:c3:33:c8:
ed:5f:52:e8:07:b8:35:7f:f5:a2:6c:51:f6:2f:87:68:3b:ad:
4c:29:2b:96:68:09:e9:7d:77:9c:10:48:0d:72:35:40:e8:6a:
ca:03:68:6a:a9:c5:45:28:54:08:41:e3:70:3f:81:df:ea:df:
05:f3:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:21 2026 by rpki-client