Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: S5eX70tFMzdp2bkvk0x7terEDy3EuyuqlgxBzfbUO9w=
Subject key identifier: 48:F1:3A:D0:4D:30:94:8B:57:6B:F8:B5:72:FD:3E:8C:59:1C:1C:92
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019D9B50E485431CE38F1CC0D48AE879269A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:01:03 +0000
Manifest this update: Fri 17 Apr 2026 12:01:03 +0000
Manifest next update: Sat 18 Apr 2026 12:01:03 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: L9nHe3FKw6D3/iLKHn4fB2bn8yC5qnkLrHUghR8x6nA=)
2: NE1cSr4PhSWQqxI3RwadUkiTzr4.roa (hash: gTOFfm6+4dqvFvqDPuHaiv7nUh/TeTbmvELpqBUfVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e4:85:43:1c:e3:8f:1c:c0:d4:8a:e8:79:26:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Apr 17 12:01:03 2026 GMT
Not After : Apr 18 12:01:03 2026 GMT
Subject: CN=48f13ad04d30948b576bf8b572fd3e8c591c1c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:ff:d0:81:35:6e:2c:66:e5:eb:8e:dd:29:
76:f8:ed:68:33:8d:c2:bf:c4:a5:91:d4:f8:b0:63:
d6:ff:5e:45:ab:bf:a8:6e:dd:4b:be:eb:4a:64:87:
08:28:bb:8b:3d:cc:bb:bd:d5:6e:44:ce:33:43:8c:
24:4d:f7:a2:a0:aa:1e:bf:43:6f:b6:41:06:3e:40:
17:93:4e:a9:8c:d3:08:94:7d:1b:30:36:64:aa:4f:
37:4e:f0:53:62:3a:12:6d:4e:16:47:f4:84:9f:26:
86:33:4b:e9:37:7a:67:54:3c:28:c2:be:b1:c4:14:
94:17:55:fd:70:1c:21:71:6c:52:1c:93:87:05:99:
32:0a:1e:8b:1e:e2:75:5b:ce:67:b4:86:6d:0e:40:
41:2d:f2:0d:af:f9:07:88:2a:74:8a:a4:a9:62:8f:
5f:6f:e1:eb:28:ad:2f:a7:da:3c:e4:28:9f:f7:80:
ce:9e:d8:19:ce:0e:54:59:06:73:a4:e8:0c:32:db:
38:32:78:67:c0:9f:51:97:5e:41:75:bf:ff:3e:c1:
6c:16:9f:99:c7:f4:d5:15:ed:b2:1b:bd:7f:82:f8:
83:8c:3c:62:2b:f9:ba:91:90:f7:7f:eb:3e:06:e4:
8d:94:ec:9d:e3:56:be:03:a3:e6:22:51:92:76:58:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F1:3A:D0:4D:30:94:8B:57:6B:F8:B5:72:FD:3E:8C:59:1C:1C:92
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:24:32:a1:ca:d2:54:08:ef:69:cf:dd:35:5a:b8:10:f8:50:
0e:f4:6e:5c:c1:ea:7c:bd:6c:e9:54:42:b1:c7:92:5b:06:d6:
9a:82:65:59:47:0b:f5:7a:21:8c:73:47:34:1d:ef:b8:85:92:
26:a2:51:5c:17:cf:74:e3:d9:9d:af:86:5e:e1:23:70:2b:63:
64:e1:2b:b8:cc:b6:44:f5:c4:2e:ef:9e:ca:d0:17:5c:36:b2:
44:5f:fa:37:f6:99:6d:46:67:70:0f:f7:3d:44:8a:91:c8:59:
87:f4:a8:5b:75:72:81:8e:5b:de:8e:a7:62:50:e7:51:63:1a:
5b:b3:e9:7b:78:59:a1:cf:49:c6:42:94:1a:68:d4:11:03:31:
81:2c:f4:0f:1c:b6:f6:4c:4e:65:0b:7a:6a:e1:b8:b8:be:f7:
9b:60:b9:db:d0:15:23:1f:f5:16:11:88:17:dd:63:dd:eb:9d:
28:5b:b5:fd:07:3f:ff:31:a3:1a:d0:2d:c6:26:a0:91:28:a0:
25:6c:42:b0:c6:60:df:c0:dd:0d:89:53:a3:94:75:57:21:de:
25:e4:28:d5:c2:b3:d9:a7:d2:4a:58:f1:4c:43:c3:cf:13:87:
1c:2a:ea:90:ec:c1:29:b3:1e:16:9a:93:00:3a:bc:90:57:31:
f1:24:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:55 2026 by rpki-client