Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: DR7NJbI4juR5i/xHBjAQYMhAZXqJT2ecC742RTnuCms=
Subject key identifier: 0B:3D:BB:EC:5E:47:FE:03:C1:BC:12:2A:92:3E:F2:D4:60:C4:9D:F6
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019DCDF531E3F2E4F685BEA5902883775E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 08:01:31 +0000
Manifest this update: Mon 27 Apr 2026 08:01:31 +0000
Manifest next update: Tue 28 Apr 2026 08:01:31 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: eNG1oLWukyw9LEPHiGyDTwAofWKbLGFs1mQMKNVmhKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:31:e3:f2:e4:f6:85:be:a5:90:28:83:77:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Apr 27 08:01:31 2026 GMT
Not After : Apr 28 08:01:31 2026 GMT
Subject: CN=0b3dbbec5e47fe03c1bc122a923ef2d460c49df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:d8:fa:e1:2c:e8:63:9d:da:a3:9a:f9:98:
3c:41:b0:fd:66:04:6f:a5:6d:3e:51:e3:05:c5:0e:
75:48:95:18:fa:e5:6c:a2:7b:d2:c6:16:b5:ef:6a:
b3:2a:2f:9c:8a:0a:bd:0c:07:1d:42:16:f0:e4:aa:
18:d9:c9:e4:4a:d5:e4:c7:b5:f4:09:e2:eb:96:bf:
ec:e5:fd:86:b4:5e:5f:74:53:38:f3:da:d7:0a:d5:
65:ae:e6:33:e4:4f:00:ff:03:11:1a:92:6c:8a:72:
e0:f8:20:fb:88:42:de:f1:69:40:f5:48:06:0f:ed:
e6:d8:39:6d:99:b0:e8:40:a7:ee:a1:15:b2:e4:47:
bf:5a:86:32:52:75:f7:c5:62:56:d4:0f:cf:7b:c6:
5a:ff:8b:0a:a4:be:47:b0:8f:c4:81:fc:b2:e1:58:
6c:d4:01:c9:6e:70:c7:e6:3a:d4:88:83:bd:4c:a6:
c6:2b:99:db:51:dc:04:1e:e0:c5:c4:b3:fc:a8:da:
95:50:bd:69:27:37:b6:1b:b1:bc:7e:30:65:f2:76:
82:e0:10:37:76:ea:ae:34:50:38:fd:2c:d8:91:2a:
84:b5:85:83:e3:7c:ea:e0:48:01:0c:a5:3f:4f:d4:
8a:13:59:ce:19:1c:2d:c6:d4:c1:d4:3c:b5:a6:7a:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3D:BB:EC:5E:47:FE:03:C1:BC:12:2A:92:3E:F2:D4:60:C4:9D:F6
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:0f:ea:b2:83:c0:77:b2:fd:b0:90:50:e7:07:4d:e3:03:
1b:aa:35:9a:78:11:cd:24:a9:a2:a6:88:1d:ea:e5:6f:e6:d3:
bf:9a:4d:9c:fe:f0:9d:b3:c5:1b:c9:bf:0d:32:5e:b2:e4:46:
de:06:66:ef:1f:8b:9d:a2:78:54:b7:90:2e:b3:74:1f:3e:ff:
09:50:bd:71:66:22:5c:e1:e3:3a:88:78:d8:e8:f4:42:bb:b2:
5a:e3:57:8f:f8:59:b3:e3:fc:09:a4:29:fe:53:83:e4:89:d5:
cd:08:b3:45:38:2b:43:b1:81:b9:0b:3b:2d:f3:ed:86:7d:3f:
4c:52:61:0f:30:5a:76:ac:a5:d2:66:70:df:38:55:20:fe:30:
95:27:ba:4b:5d:04:41:ae:e6:cc:99:10:33:e0:21:be:93:2a:
34:8a:a9:a7:6a:dc:16:ee:96:74:86:c0:85:34:79:48:c8:c1:
aa:a3:2f:c2:3b:b8:02:81:fe:97:ac:0d:28:65:58:99:d6:6e:
d1:2a:bb:ba:8a:24:2d:f9:b6:25:b0:b0:25:3b:5c:0a:0d:8b:
81:54:61:75:ff:a7:63:49:0a:9a:fc:54:7d:63:e7:f5:4a:e9:
dd:6a:e5:11:7f:12:8e:21:b6:ef:50:69:6f:c4:24:6a:27:29:
39:f8:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:36 2026 by rpki-client