Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier: tvSlpP3bwa3fye5gcqd4ZcI5FGLpSZsnp/8Z6X59mlI=
Subject key identifier: 32:36:A1:38:21:89:3F:96:E2:9B:D5:99:9F:AE:DF:C1:18:0C:D8:47
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 019DCDBDE55835794926F4078316A250CAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number: 18FE
Signing time: Mon 27 Apr 2026 07:01:07 +0000
Manifest this update: Mon 27 Apr 2026 07:01:07 +0000
Manifest next update: Tue 28 Apr 2026 07:01:07 +0000
Files and hashes: 1: 0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa (hash: e4QKXhdU4Y0/6TdXU9kKaC0Et/ZZz02AZrZMzhkrhqs=)
2: 2fDseKScrEQh0sSbvytiE06uK9I.roa (hash: CLozqrOGLvVC4xTilwXOTbi5gGsIQCgs35MI//GmCeE=)
3: 4dbfLFgTwDYrqXnFB2f4xHMplQw.roa (hash: qdee12QBSfwV430rgWvKnONQnxAQwUpDJUc9sSl89Tk=)
4: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: lrMY31G/zTFPY+1A2tnAtjYnIOhx0fl2zQiLameuN+I=)
5: K2LNv1z48hNFFlzRSYowSy0Ha38.roa (hash: rgP0qv2b0VyfQUIaOOjPzTbyBIqlmlW8gSl7h4qofNM=)
6: QAfMhvFz23E5j-VZNuNUHJaS27A.roa (hash: 1c6wEWGOfe30pbIdsgVXmuoN1jcDboRJaqg+bTctZUo=)
7: fScuGoqudu5TxiE70DprlLcKYsM.roa (hash: Qna0Roz67B/VzCkvRv3pYKjnRZOrhXbgEhbWUZJL9So=)
8: x_MESfhEqxOpfv7-RrmmKFZTQsM.roa (hash: CgnbbvmY6nJeIwGOkAE0qQBeAzVO6strLDPz3xd7ol8=)
9: ymuaW4C8o-lO-r5wBm-7A05dtLg.roa (hash: g3AL+YyG28zpjRvk8zWwYh7S+XChprFtrfTtHo1inzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:e5:58:35:79:49:26:f4:07:83:16:a2:50:ca:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Apr 27 07:01:07 2026 GMT
Not After : Apr 28 07:01:07 2026 GMT
Subject: CN=3236a13821893f96e29bd5999faedfc1180cd847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:aa:9a:1c:db:20:0d:b5:eb:02:cd:28:31:
7e:4f:f5:0a:61:50:4a:40:59:f1:0f:ee:b4:92:c5:
8a:14:fe:f7:28:62:3b:45:3a:b0:1b:21:c3:9f:f1:
5e:57:23:58:cf:c3:a8:be:0f:d7:b8:79:9a:ee:2a:
4c:0e:c1:91:b0:ff:26:b2:d9:02:09:f9:f0:4f:df:
28:f3:47:ab:23:12:40:1a:71:41:18:fa:92:98:ad:
6f:b6:a0:00:da:99:00:cb:c5:72:12:c9:05:d9:01:
7a:4b:a7:18:f2:dc:79:f0:df:d3:32:4c:1b:4c:8e:
7a:e7:48:dc:00:fe:2c:34:9e:0b:78:99:f1:e4:7c:
11:72:b4:f4:05:4f:73:34:e2:fa:d1:92:4a:90:2c:
41:63:ef:71:21:35:e7:85:fa:12:e8:5b:29:e0:91:
2c:22:04:06:2c:69:fb:5a:62:1e:28:27:9c:98:ce:
34:6a:96:fe:e1:cb:58:28:6c:44:ed:f4:44:37:1d:
78:49:ab:ea:dd:16:bd:f7:38:ec:74:8b:d3:cc:e6:
34:83:ce:8c:36:f6:f3:a4:91:7f:25:a1:0d:07:b8:
2f:1b:42:b2:80:9b:6f:78:4e:62:85:03:24:5e:f9:
19:18:2a:2f:61:34:8c:7a:8f:a7:b6:18:74:ba:70:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:36:A1:38:21:89:3F:96:E2:9B:D5:99:9F:AE:DF:C1:18:0C:D8:47
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:d2:ec:7d:74:be:8b:ae:34:cc:c8:51:38:d6:67:2c:07:
8f:c4:d4:db:93:92:c6:9f:d1:51:70:05:fb:12:3a:21:a6:1d:
04:d6:2f:e8:f3:48:1f:ec:1a:95:54:18:c1:00:f2:2c:dd:ab:
9f:b9:fe:37:52:8a:30:40:03:94:30:77:22:fb:b0:c1:ca:59:
62:30:bf:be:05:da:da:d3:e2:6a:64:81:25:84:7f:2b:07:e7:
ee:33:c0:10:e2:74:5c:67:b9:2a:02:cb:a8:96:b5:aa:36:cd:
58:63:e0:1f:09:1b:9f:81:a2:b7:5c:4e:66:5f:d6:9d:09:6b:
79:98:ee:dd:2d:77:b3:49:1c:70:9f:6f:71:a8:6b:df:de:e4:
c1:b8:03:0a:8d:83:73:d5:ea:ad:ba:3f:d0:78:90:cb:11:df:
8b:06:4a:6f:ed:6c:97:1b:51:fa:a3:f0:65:59:1a:64:c4:b9:
50:81:a7:3f:4a:46:5e:3e:d9:47:77:61:c0:1c:bd:76:09:6d:
19:e6:7d:c0:2e:59:76:c8:26:94:cb:71:f5:f4:1e:6e:d0:51:
d7:61:45:4e:47:78:74:73:da:9a:14:cd:e0:46:c8:59:26:8c:
b9:ca:a9:7b:e0:2c:5f:9f:95:77:e2:84:ec:5f:cc:49:24:ad:
16:89:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:53:33 2026 by rpki-client