
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: lfwSMZTa44/YlmU1oLLEz0p0ZoYMqj53xHUt5rsGgmA=
Subject key identifier: BF:75:1A:6B:2D:2A:4A:0A:9A:1E:C3:9E:F5:CD:E3:26:56:A9:C7:6E
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 019D99D04216D66FDFE461D0C957E258B642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: Kl3xBeVFJLYN7cfzavQgQxtgjdXVPjiCVY7U2lWZ9CE=)
2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:42:16:d6:6f:df:e4:61:d0:c9:57:e2:58:b6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=bf751a6b2d2a4a0a9a1ec39ef5cde32656a9c76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:fd:19:7a:5a:a5:fd:83:37:b9:f2:c3:c1:
34:cc:83:f0:0f:94:7b:c1:7d:74:e1:7b:27:65:d5:
87:ba:fe:79:87:58:bf:f2:6b:27:5c:0c:c1:b7:8e:
42:93:7f:13:f6:9d:02:eb:f1:88:13:e0:61:f9:a1:
26:70:9e:cd:91:37:78:99:3b:5e:ff:c8:12:77:92:
af:9c:d5:14:b2:84:64:ff:7b:66:88:4e:f9:54:c1:
f6:2b:87:b8:81:86:ec:7b:a3:8f:cd:c2:9c:2f:b5:
a7:2d:de:1b:c7:37:02:82:d8:3c:d0:19:d9:59:8e:
44:ab:8a:9a:70:3f:c3:88:1c:ad:0f:46:f4:2e:83:
ea:84:f7:1a:28:eb:e0:93:03:96:13:5c:32:47:20:
5a:9a:26:fd:7b:dd:ad:e0:dc:ac:21:18:db:e7:53:
38:fb:28:59:af:de:0b:dc:b6:ab:d1:55:b5:91:75:
a3:b1:ae:a4:15:50:bb:e2:72:8e:1e:83:43:5f:18:
7d:d4:bc:a1:26:d5:de:01:d7:5b:bd:2b:2a:0e:b3:
73:82:b1:72:08:f9:48:38:fb:f7:9f:fb:fe:77:49:
6d:99:86:45:72:ad:22:74:41:ce:57:49:0c:54:53:
f4:25:49:fb:94:28:12:8c:6e:28:d6:40:5e:bf:da:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:1A:6B:2D:2A:4A:0A:9A:1E:C3:9E:F5:CD:E3:26:56:A9:C7:6E
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e3:79:5f:f1:4e:89:ea:65:45:59:50:e0:59:81:2d:7e:b9:
b2:d5:7a:18:9e:31:1b:fa:90:52:7b:1b:f0:c5:e1:f7:51:e7:
38:cc:fe:3b:7d:7b:8d:16:59:f8:04:75:2d:59:ca:44:93:e9:
39:a6:bc:5c:0e:a5:d8:57:18:dc:a3:4d:26:32:ee:c0:7f:4c:
29:a5:d8:e0:e7:fd:d9:95:a7:45:39:f3:90:26:e8:fc:36:ff:
fc:26:b5:cd:36:f2:fa:14:c5:b4:19:76:12:75:da:a4:94:f8:
17:73:62:5e:5f:73:a8:c3:59:b7:4a:3f:c6:42:0d:7a:73:d4:
3e:c2:f2:e7:0b:df:66:b1:6e:3f:07:63:f3:1a:08:46:f9:30:
51:f4:f5:6d:e0:ce:52:dd:49:7b:c2:e7:14:69:26:48:95:53:
ec:d6:42:e5:fe:62:48:f5:4f:2a:9e:8f:e3:48:b8:15:ce:d0:
29:12:85:7c:d0:83:8a:6a:dc:46:c2:6b:0a:bf:5c:fc:16:f9:
db:29:5b:bd:1e:cc:10:41:54:5a:0a:34:da:6d:ee:ed:db:22:
16:8e:77:9a:2b:2f:e2:42:14:92:83:f4:5e:ca:43:8d:e8:f8:
72:78:28:6f:f3:50:1b:3b:98:b5:de:15:6c:28:f6:86:1e:88:
1c:db:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:56 2026 by rpki-client