Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier: t2LmGY2grhITtiBWDdrFu5oTp8Q7RG5JVAl4Y5gk5HI=
Subject key identifier: 0C:E6:45:A8:71:1B:04:2C:F9:26:BA:E3:45:89:CC:1E:49:85:41:3C
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer: /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial: 019D9BF559BBBD5BF83495209C379B77E16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number: 0145
Signing time: Fri 17 Apr 2026 15:00:40 +0000
Manifest this update: Fri 17 Apr 2026 15:00:40 +0000
Manifest next update: Sat 18 Apr 2026 15:00:40 +0000
Files and hashes: 1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: A/oiH+QIdn19S4egXDYsBDdIbHWl1g9CSxsmaYcnwLg=)
2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:59:bb:bd:5b:f8:34:95:20:9c:37:9b:77:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
Validity
Not Before: Apr 17 15:00:40 2026 GMT
Not After : Apr 18 15:00:40 2026 GMT
Subject: CN=0ce645a8711b042cf926bae34589cc1e4985413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b9:dc:07:70:00:78:27:c8:92:c6:39:40:14:
b9:c4:e4:56:4a:bd:f3:9b:1c:52:08:38:07:3d:10:
e5:c0:4f:fa:ad:58:e9:e4:f8:2b:ca:f2:0a:7c:9b:
c1:62:a9:83:18:b0:3e:5f:ba:b5:64:4c:f3:66:6c:
fd:7e:dd:c8:c4:cf:45:0b:58:d0:89:24:d0:74:f0:
88:ec:6d:a1:f7:52:1b:76:b4:f7:75:98:be:96:65:
f2:bd:3a:97:d2:48:d4:88:6b:35:34:f0:ca:85:ee:
36:5d:6e:63:fc:8e:4b:2b:48:69:5b:c4:60:84:c0:
38:ca:1a:ed:6a:eb:96:00:21:dd:fe:9d:f3:7c:f2:
50:9f:68:d0:c6:fe:65:5c:74:b2:5d:f4:63:57:cb:
6d:8c:00:53:de:f3:66:a4:68:49:58:b9:25:cc:db:
96:c1:58:9d:9c:92:72:6f:4b:a6:37:74:44:58:38:
80:98:7f:ec:c5:f8:90:f5:cf:70:f8:5e:25:9f:12:
5d:7b:61:91:06:2f:e2:c9:d1:30:b3:c8:6e:4f:30:
41:6d:ec:e8:d6:df:f8:5d:71:26:fc:6e:81:21:c8:
53:ae:58:be:19:6b:b0:8e:d2:8c:7a:1d:62:82:51:
b5:c8:0a:10:38:db:9f:f6:c2:4d:3d:5f:e7:26:8c:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:45:A8:71:1B:04:2C:F9:26:BA:E3:45:89:CC:1E:49:85:41:3C
X509v3 Authority Key Identifier:
keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d2:42:96:c7:ab:de:a8:82:28:9d:59:f0:d7:88:7b:c2:dc:
12:22:a4:e4:d3:3b:9d:60:5c:01:ea:7e:22:b6:bf:09:70:58:
30:54:ab:2f:c5:34:63:e7:2c:b4:9a:d5:a5:b7:14:f8:a1:57:
8a:3d:32:55:81:7a:8f:b8:5c:e5:cf:17:68:d3:7e:66:62:97:
07:5f:e7:c6:38:0a:35:1a:2e:2f:69:b9:ba:4a:29:7f:37:ee:
3a:69:62:26:07:06:83:cc:1b:84:69:51:0b:35:28:f3:69:ec:
b0:18:52:19:80:fc:1e:1b:09:bb:5e:42:19:3f:84:36:dd:44:
d4:ef:56:55:7a:f8:fd:33:46:25:fc:cb:19:88:e9:9a:85:7c:
b2:e8:4f:71:f6:86:83:c8:6c:d3:fc:75:a9:74:53:98:34:82:
42:90:7b:05:b1:63:ac:6b:07:f1:82:29:9d:1f:03:82:9c:26:
a4:da:9a:8c:a7:14:48:41:cb:2f:ad:62:65:3a:d8:3d:ae:7d:
6e:33:90:db:86:1b:58:3f:5e:fd:c9:8a:e7:62:4f:77:30:51:
b7:b4:48:ab:72:3a:09:57:ca:c7:e4:ee:5f:ed:31:22:5c:25:
e2:53:d8:d2:c4:a0:e7:e6:67:65:87:50:6f:f8:f3:3e:0c:e1:
23:5f:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:20 2026 by rpki-client