Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
File: x7996xihKSBrrXc8-CId5UTj_YE.mft (raw, json)
Hash identifier: EeOnJjqB/p8DvYsK7+FN0AV2qnOXylB2D/d7+3yPDBU=
Subject key identifier: 7D:C1:CC:03:5B:91:3F:01:54:0C:12:96:8D:EA:8A:F0:38:7A:49:B6
Authority key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Certificate issuer: /CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Certificate serial: 019D996222CEA3E9B0D0E3C7B8D0A9B86F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
Manifest number: 0B8F
Signing time: Fri 17 Apr 2026 03:00:38 +0000
Manifest this update: Fri 17 Apr 2026 03:00:38 +0000
Manifest next update: Sat 18 Apr 2026 03:00:38 +0000
Files and hashes: 1: x7996xihKSBrrXc8-CId5UTj_YE.crl (hash: Jb/pfltT1nb7/6pejfYaNd6YrNAiVjF6qeVp+f7G/kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:22:ce:a3:e9:b0:d0:e3:c7:b8:d0:a9:b8:6f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Validity
Not Before: Apr 17 03:00:38 2026 GMT
Not After : Apr 18 03:00:38 2026 GMT
Subject: CN=7dc1cc035b913f01540c12968dea8af0387a49b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:e4:15:64:76:b7:d4:af:58:90:73:a2:ad:
6f:05:83:ff:00:f0:73:0e:33:66:dd:37:b0:c0:2a:
9f:40:82:c6:b2:1b:25:67:50:b4:ae:53:ae:a9:6d:
d1:f9:22:6e:7c:59:c9:3d:11:48:8f:a0:92:84:b5:
2a:68:2b:0e:1b:58:f5:68:21:6c:94:44:13:7a:5c:
90:02:0a:0a:68:ed:99:4b:7e:a2:02:96:a9:88:70:
9b:39:75:ef:c9:31:2f:a4:a3:69:84:65:b3:87:08:
d7:b5:72:ec:c0:bf:eb:62:df:2c:a8:af:da:be:15:
12:4c:a6:f3:a8:d1:f8:c5:d8:87:db:1a:bc:fe:b3:
22:d1:f1:b2:8a:b7:c8:2a:3c:d8:97:2a:f9:90:52:
52:ab:69:8a:e9:17:62:0d:d9:e3:ea:01:e8:aa:8b:
8b:a6:37:d7:24:5c:bd:ce:f9:e5:f5:53:b9:99:44:
03:89:17:71:88:7c:e0:95:19:86:bc:29:9e:8b:6a:
cb:db:73:0f:d1:04:ac:98:50:a8:c5:4b:ec:5e:8e:
2f:8b:86:84:32:c7:5a:1b:d5:83:05:2f:5b:d8:27:
05:b3:fd:23:84:7e:bf:e6:ce:57:fe:20:fe:d9:64:
b4:b5:97:d3:5c:a9:6a:b2:2c:e4:a3:46:ed:e7:9a:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:CC:03:5B:91:3F:01:54:0C:12:96:8D:EA:8A:F0:38:7A:49:B6
X509v3 Authority Key Identifier:
keyid:C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:60:e9:69:90:3e:fd:a4:c7:b7:a1:69:b8:d2:5f:89:2d:60:
30:70:7a:15:74:c2:bf:7a:63:52:dd:1b:1c:54:15:ab:f9:ef:
4f:fb:39:3d:97:be:52:84:1b:ad:83:ea:66:7d:bf:ae:76:12:
40:a5:94:7a:a8:9b:36:1e:b3:3d:d0:cd:e0:57:a2:a9:e1:ed:
c7:16:16:6b:2c:9b:0f:b5:bd:c9:f8:6e:fa:e9:13:17:8a:07:
87:c1:b9:e0:6a:36:8a:13:70:9b:24:a4:44:c9:20:19:9f:80:
8f:4e:9e:8e:6f:f6:0d:73:19:70:51:f9:69:e3:0f:fd:95:14:
67:df:95:32:01:76:d2:32:28:89:e0:ad:d8:d0:5b:98:a4:1e:
81:69:04:b9:d2:ff:11:ee:b7:13:f9:be:f2:1f:95:b8:f7:24:
8b:10:df:f1:7f:3f:d6:d4:02:2d:d0:d5:6f:ff:49:c7:bf:f1:
12:7d:23:5b:1e:a7:a4:0f:45:44:6f:0c:cf:b0:f6:2e:36:4c:
b1:28:c3:db:5c:68:6c:d0:29:9d:5b:11:60:83:32:11:77:fa:
be:66:e4:e5:ec:d6:e2:f6:f0:55:8f:6c:ba:d8:2f:d7:ea:bc:
e4:77:62:64:87:a8:bd:79:b9:0f:05:c3:2e:a0:42:21:d9:0c:
ad:a0:ac:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiLOo+mw0OPHuNCpuG+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YmY3ZGViMThhMTI5MjA2YmFkNzczY2Y4MjIxZGU1NDRl
M2ZkODEwHhcNMjYwNDE3MDMwMDM4WhcNMjYwNDE4MDMwMDM4WjAzMTEwLwYDVQQD
Eyg3ZGMxY2MwMzViOTEzZjAxNTQwYzEyOTY4ZGVhOGFmMDM4N2E0OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUvkFWR2t9SvWJBzoq1vBYP/APBz
DjNm3TewwCqfQILGshslZ1C0rlOuqW3R+SJufFnJPRFIj6CShLUqaCsOG1j1aCFs
lEQTelyQAgoKaO2ZS36iApapiHCbOXXvyTEvpKNphGWzhwjXtXLswL/rYt8sqK/a
vhUSTKbzqNH4xdiH2xq8/rMi0fGyirfIKjzYlyr5kFJSq2mK6RdiDdnj6gHoqouL
pjfXJFy9zvnl9VO5mUQDiRdxiHzglRmGvCmei2rL23MP0QSsmFCoxUvsXo4vi4aE
MsdaG9WDBS9b2CcFs/0jhH6/5s5X/iD+2WS0tZfTXKlqsizko0bt55o70QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3BzANbkT8BVAwSlo3qivA4ekm2MB8GA1UdIwQY
MBaAFMe/fesYoSkga613PPgiHeVE4/2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYt
MDE4ZmM5YzAyOGIwLzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83NTBlYWYtYjAzYy00NmQyLWJmYzYtMDE4ZmM5YzAyOGIw
LzEveDc5OTZ4aWhLU0JyclhjOC1DSWQ1VVRqX1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmDpaZA+
/aTHt6FpuNJfiS1gMHB6FXTCv3pjUt0bHFQVq/nvT/s5PZe+UoQbrYPqZn2/rnYS
QKWUeqibNh6zPdDN4FeiqeHtxxYWayybD7W9yfhu+ukTF4oHh8G54Go2ihNwmySk
RMkgGZ+Aj06ejm/2DXMZcFH5aeMP/ZUUZ9+VMgF20jIoieCt2NBbmKQegWkEudL/
Ee63E/m+8h+VuPckixDf8X8/1tQCLdDVb/9Jx7/xEn0jWx6npA9FRG8Mz7D2LjZM
sSjD21xobNApnVsRYIMyEXf6vmbk5ezW4vbwVY9sutgv1+q85HdiZIeovXm5DwXD
LqBCIdkMraCsoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:46 2026 by rpki-client