Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: +RaLvEu7VGIEbJaZGU7jaWs9XXuQ3B9J5E7eIBCCs9o=
Subject key identifier: 91:89:3D:75:C9:90:2D:CF:59:6A:69:5A:80:38:06:0B:3B:62:D6:6A
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 019DA3782259A4CDFEFC2184844ED447DDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0AEC
Signing time: Sun 19 Apr 2026 02:00:52 +0000
Manifest this update: Sun 19 Apr 2026 02:00:52 +0000
Manifest next update: Mon 20 Apr 2026 02:00:52 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: ZFfjDawPCGt2nG9wh2c5zSoM//QZd8orBegXGjGSv+g=)
2: prj-gjU2FJGtEVAkFqN1UEoiuck.roa (hash: MBD1FKmACbSwTw7FTssOYwGdssDUFI7ku4bKYJP3LtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:22:59:a4:cd:fe:fc:21:84:84:4e:d4:47:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Apr 19 02:00:52 2026 GMT
Not After : Apr 20 02:00:52 2026 GMT
Subject: CN=91893d75c9902dcf596a695a8038060b3b62d66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:93:36:c7:58:73:57:00:3b:57:b3:00:36:
99:c7:4f:57:3a:f6:b7:6e:32:f1:ff:20:6a:83:f4:
ca:43:b5:97:35:e1:69:c3:c2:62:cb:50:22:5a:54:
2c:95:49:18:0c:ae:59:d9:64:9a:f5:92:83:42:a8:
01:ed:0a:6f:6a:4d:bd:19:cc:7e:f1:b8:05:ad:ce:
48:7d:96:32:e4:ed:cb:c2:5c:25:9b:08:4c:cc:3c:
b8:e9:15:1d:65:e2:7a:fa:f0:e0:37:95:55:5a:08:
62:95:df:32:76:21:cc:7e:a7:8c:da:a9:fc:e9:f2:
b6:dc:01:01:55:3e:20:44:10:8d:50:4f:25:fe:59:
78:67:9e:b8:ee:8c:a9:10:ed:61:f4:38:a8:53:80:
02:c8:86:41:ad:2e:96:60:af:fc:41:d4:4e:9f:73:
fb:3c:08:50:11:12:a2:d8:58:19:a9:fe:39:c6:91:
2d:03:b0:3e:0b:e5:b1:d0:d2:d7:75:d7:36:69:07:
a1:59:7b:1b:54:4a:9a:7f:0e:c2:7b:50:32:9e:76:
15:aa:c8:01:86:83:04:49:5b:df:fe:ca:bc:98:01:
19:94:ab:44:c5:72:c5:81:b4:ad:df:de:75:a3:0c:
eb:1e:e2:09:79:e1:a1:e0:3f:4a:b9:a3:3b:a1:e0:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:3D:75:C9:90:2D:CF:59:6A:69:5A:80:38:06:0B:3B:62:D6:6A
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:fb:b7:b2:9f:da:b0:06:5e:ea:98:30:f0:7c:b6:30:e2:
ad:6a:4b:d0:49:97:74:37:b9:ed:2d:6e:d0:21:0d:5e:a8:d7:
8f:8f:d6:50:02:d2:28:51:00:98:14:59:ae:1a:8f:2f:f8:6b:
21:db:fe:a0:08:b1:f4:09:3e:6a:69:31:cf:c8:d6:83:df:74:
19:5a:58:14:8c:43:35:77:f1:ea:d0:3d:41:8c:59:6a:2c:e6:
0f:ff:9a:cb:12:71:9c:48:61:29:8b:91:60:1b:46:98:b0:1a:
df:13:43:e6:60:ef:ff:6d:85:85:17:29:ba:9e:cc:3d:ff:ac:
8b:7f:b0:08:a3:a4:7b:bb:74:24:09:0d:34:6e:ab:67:7f:ce:
9d:d3:08:fd:cc:45:83:43:9b:ed:d5:22:68:f9:31:73:2a:30:
68:f0:1f:e5:42:50:34:cb:c5:a4:81:b9:75:a6:7a:27:29:01:
e2:68:c6:d8:76:4d:e3:e0:7e:98:ce:09:6f:64:46:3d:ac:8b:
ef:e3:2b:b5:90:5b:27:15:32:c7:1b:79:ad:49:14:cb:49:6e:
0a:a7:e5:65:75:fa:a9:0a:83:99:21:3c:bd:22:d1:95:f3:45:
7f:f0:64:b4:23:dd:95:0c:e1:9f:b2:e0:4a:0d:42:1e:dd:99:
1f:c1:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:50 2026 by rpki-client