Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: yu26R9DW2R7bVG0LeH/sFQFJWaGNS5tZY7iqudfkBSg=
Subject key identifier: 1E:48:B7:DA:8F:C7:23:D6:66:63:F5:5D:CA:BF:63:BC:9D:52:1C:95
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019DCDBD6AAFDDD95F0ED3CC832AE55E80D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 07:00:35 +0000
Manifest this update: Mon 27 Apr 2026 07:00:35 +0000
Manifest next update: Tue 28 Apr 2026 07:00:35 +0000
Files and hashes: 1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: ElloBgHROTcv6CnyB7NqZDfmURpA1H5LiGFS1VEMyD4=)
3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:6a:af:dd:d9:5f:0e:d3:cc:83:2a:e5:5e:80:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Apr 27 07:00:35 2026 GMT
Not After : Apr 28 07:00:35 2026 GMT
Subject: CN=1e48b7da8fc723d66663f55dcabf63bc9d521c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:68:2d:5c:11:8b:17:9a:04:2b:82:97:6a:
d3:3b:e1:d2:35:4b:61:ac:6b:f9:11:85:7c:ce:5f:
fd:f2:b7:11:ce:53:75:a1:ef:ad:34:17:c3:11:21:
1d:aa:2f:89:90:ef:48:fa:8e:bd:d3:b1:60:0d:69:
9d:ad:cd:74:2a:10:ea:f3:ef:ff:da:ec:7d:7f:bf:
ae:50:a7:a4:75:29:85:d4:59:12:d6:82:a3:ab:1f:
8d:3a:03:7d:66:72:32:67:f8:e7:e7:4f:e2:0f:40:
82:08:93:e1:16:66:b1:dc:e0:7e:1e:8d:a6:e0:91:
21:64:3e:2f:f4:17:d1:5e:85:af:ab:3d:6d:d5:fd:
4b:af:55:12:f7:7c:a7:30:5e:59:95:82:0f:57:1c:
00:0e:68:7d:25:7d:b4:b7:cf:fc:f6:b3:05:86:27:
b4:f1:5f:87:87:88:d2:93:2f:d3:b2:e3:84:36:5d:
83:1f:44:b9:40:b0:a4:58:3c:9c:33:c8:ca:e5:27:
7a:d4:20:91:6a:d0:65:93:a7:ba:62:de:cf:15:9e:
f3:0b:ad:0b:46:98:97:82:4a:fb:11:60:70:bc:ac:
9e:a7:0f:8f:b6:a6:94:cc:09:72:4c:b8:41:e2:1f:
c8:56:21:82:e8:ee:be:7b:51:2e:c7:d3:aa:93:47:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:B7:DA:8F:C7:23:D6:66:63:F5:5D:CA:BF:63:BC:9D:52:1C:95
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e9:3f:d9:cb:22:eb:e2:41:6d:03:2d:70:70:5c:93:9e:ba:
ee:2c:ec:75:f2:d6:01:5e:cc:d2:ca:f1:4b:d2:58:61:ca:26:
c3:d8:3c:73:7a:cd:f6:b3:f8:e9:89:7b:22:e2:5c:6b:53:dd:
9f:b3:15:64:de:5c:41:69:5b:3b:28:9f:76:4b:c6:b2:6e:46:
7a:68:21:17:e1:58:42:6f:69:e6:86:40:e3:7c:3f:c7:e5:ba:
e6:e2:af:a5:92:7a:22:a5:8f:e2:b6:1f:14:cf:fb:a0:60:9b:
c1:ba:e2:95:3f:87:bc:29:6f:d6:6d:1c:bf:35:7f:52:71:a6:
74:a7:51:fe:03:4c:59:a7:a6:aa:70:c2:c2:d3:86:22:f6:24:
1c:91:20:83:10:e9:85:b9:f5:77:ed:b0:cc:31:a0:9d:3b:8e:
5a:d1:16:8b:23:ae:db:95:41:e8:1a:cc:02:76:07:dd:75:60:
08:46:cf:17:f5:60:46:67:fd:82:38:da:bf:74:e1:ac:2d:9a:
c7:47:c2:75:4b:62:96:4c:b8:65:4a:62:41:d3:39:d3:bb:93:
ff:22:11:02:e3:7e:a1:e7:b6:61:91:78:1f:cf:0b:5b:ce:3a:
3a:23:28:26:c3:39:6b:8f:b4:7f:63:7f:fc:25:84:f8:cb:89:
c0:ad:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:30 2026 by rpki-client