Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: b9LguN/xn7b6PhanrRFQ4DJTxe/6bAMv0wQ0sXQj7KE=
Subject key identifier: C7:B4:E6:E6:A8:CE:70:D3:F9:B7:5A:FF:72:09:04:9D:15:A5:45:AE
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 019DB27E09653EBB9F092F1EE8F26569B89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 103D
Signing time: Wed 22 Apr 2026 00:01:37 +0000
Manifest this update: Wed 22 Apr 2026 00:01:37 +0000
Manifest next update: Thu 23 Apr 2026 00:01:37 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: RzC4nwFcIsCgLCB28cI5rXNerh0MovXfC/mJ7Nh4nhw=)
2: MF5bEoN5sg-nawNjAIcgKbPLo2w.roa (hash: Eoby9ocfXIo2ysG9Id22HAzaklocSsTXx7pabi0Mev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7e:09:65:3e:bb:9f:09:2f:1e:e8:f2:65:69:b8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Apr 22 00:01:37 2026 GMT
Not After : Apr 23 00:01:37 2026 GMT
Subject: CN=c7b4e6e6a8ce70d3f9b75aff7209049d15a545ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:e5:f8:64:23:be:58:c6:23:c3:a7:d4:8f:
28:05:eb:64:17:c7:eb:c2:c6:be:3a:90:6f:86:bd:
bc:13:07:e7:81:a0:75:09:b1:40:86:7d:59:91:b6:
6e:19:1e:d4:70:f9:df:2f:f0:96:73:02:3f:bf:4a:
4d:a4:ae:54:8b:76:fd:a8:5e:e7:c6:92:b7:93:e1:
a9:3f:84:59:21:4b:c8:82:bd:0c:75:24:13:2c:c7:
60:cf:d4:ef:0c:30:f8:3d:a1:f9:96:1b:45:f5:39:
90:91:71:f1:b7:e6:c0:d2:17:82:21:1d:78:35:64:
69:8d:eb:60:8d:ee:53:16:9f:0d:77:32:88:50:10:
7d:af:96:7d:b7:13:2c:06:27:e9:41:a9:85:ea:94:
b4:8e:2d:46:f5:37:d7:fe:21:1c:5f:c6:17:37:67:
f9:ea:83:bb:8b:c3:e2:2a:8e:8d:8b:3e:af:90:b2:
eb:76:7e:c6:16:ba:27:a7:fc:07:19:f7:b5:5b:f0:
92:ab:dc:d9:c0:c3:79:5b:7f:e7:a1:14:cc:8d:54:
b5:53:a3:6a:42:c6:63:8b:c4:70:25:92:73:b5:72:
c8:ca:f5:23:5b:5d:b0:ca:5b:98:39:80:0d:90:fa:
d6:6b:2d:b2:25:f2:68:b4:b4:5f:9e:e4:45:8d:b3:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:E6:E6:A8:CE:70:D3:F9:B7:5A:FF:72:09:04:9D:15:A5:45:AE
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:64:51:10:3a:1d:8b:ee:43:b4:cb:85:1c:57:6f:c3:8f:a9:
a1:dc:9f:28:66:f0:92:36:19:b1:a6:0e:a2:38:c1:d7:87:91:
67:24:c3:83:0a:bc:b0:3d:64:ac:b5:03:78:fe:e7:4c:cc:78:
5c:b3:07:fa:f5:50:b6:b6:0c:21:53:ff:7b:ef:9f:f1:b5:02:
14:4b:56:0c:e9:4a:a2:12:06:17:d9:a5:48:3e:13:b9:b3:93:
fe:4c:74:d4:ca:42:87:43:f4:e8:5b:27:55:79:6f:4c:25:ae:
fb:09:68:d4:51:fa:68:59:c6:69:c4:94:25:7d:82:ec:1b:c6:
e1:78:0f:43:34:2a:14:e4:83:80:1d:ea:13:41:96:64:51:f5:
f3:ae:52:71:65:4d:91:b1:01:27:18:9f:c6:be:9d:14:81:12:
ee:19:00:e4:9e:94:2a:17:ae:3e:03:73:26:be:7f:49:97:2a:
b9:47:b0:18:9d:a9:b2:f1:87:b1:ab:d2:d4:89:b2:99:10:64:
d6:4a:c5:76:97:e4:b2:00:c9:df:65:df:d5:24:02:9c:09:b7:
5a:57:4a:b5:ce:fa:f5:a7:8b:e9:b6:53:32:a8:ff:fe:55:06:
cf:ad:17:4a:89:e3:0b:a5:5e:3d:21:da:fb:a7:e5:84:d8:f1:
4a:8a:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:08:10 2026 by rpki-client