Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
File: 7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json)
Hash identifier: KX9/aCWEhp3gldONl9p+6tLIvxrmH+mbq6iRN00sKg4=
Subject key identifier: 87:47:67:61:58:51:FA:F9:B8:56:4D:BA:73:CE:B8:CA:17:91:35:CD
Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
Certificate issuer: /CN=edafdca6eace4f1293223b02eebc278243869b7b
Certificate serial: 019DCD86F3CC9DE6839AE0C193DAB24752B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 06:01:06 +0000
Manifest this update: Mon 27 Apr 2026 06:01:06 +0000
Manifest next update: Tue 28 Apr 2026 06:01:06 +0000
Files and hashes: 1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: XZbAHwS/k/jge32pwL6jfU8VbgoE/OjyQ0zLGnm/t40=)
2: JEiGbQEv5uxJuy32ir_fQeAKys8.roa (hash: h5HQWsILbTzf8iWmMH9s843eJqaOXzdBwkJ2EOOO/q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:f3:cc:9d:e6:83:9a:e0:c1:93:da:b2:47:52:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b
Validity
Not Before: Apr 27 06:01:06 2026 GMT
Not After : Apr 28 06:01:06 2026 GMT
Subject: CN=874767615851faf9b8564dba73ceb8ca179135cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:b7:c9:fc:fe:6e:ee:b4:f1:b2:86:98:66:
e1:8d:a2:3e:4e:24:35:ce:7d:50:85:cf:79:ed:d8:
62:57:d6:17:54:76:6d:11:50:10:f5:4e:bb:5c:ea:
9b:d4:3d:e0:57:80:3f:a2:17:5d:48:1e:7e:76:1b:
74:06:e3:f8:6a:9d:5d:72:0a:41:3b:e6:4f:09:8c:
ec:b0:98:42:22:47:3e:e3:f3:86:82:7d:9e:37:27:
7e:31:2f:73:92:85:f1:0a:69:3f:7b:42:ba:a7:ab:
8f:0f:f4:5e:e2:c5:e8:1d:fc:8b:dd:34:fb:07:e1:
d6:79:fd:f3:f6:3a:83:45:69:7f:e3:f4:c7:6e:6e:
0e:ee:5d:44:94:d9:8e:c1:dc:dc:a9:c0:d1:c5:44:
8d:1a:62:a2:dd:da:25:d5:e7:c9:71:82:f9:8b:1a:
ff:fa:c5:8c:3f:a5:bd:2b:0c:69:7c:a9:f2:30:a7:
86:05:e2:5b:ae:71:20:ab:d8:bf:0d:77:c1:45:9b:
ab:9f:7e:cf:30:b2:e9:ca:21:7a:cc:9b:15:e2:e1:
d0:c0:9e:d0:98:25:40:a6:4f:8e:83:1e:28:81:21:
b2:ea:a9:ff:9c:73:d3:16:b2:3a:40:76:31:59:a6:
3a:4e:81:cb:8b:db:c3:dd:63:86:65:4a:d2:8b:e6:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:67:61:58:51:FA:F9:B8:56:4D:BA:73:CE:B8:CA:17:91:35:CD
X509v3 Authority Key Identifier:
keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0e:76:5c:db:d4:65:79:e3:88:4c:28:c4:85:90:74:75:64:
f9:af:c6:db:ad:5c:c8:b8:99:d0:8a:6f:eb:8a:ca:42:38:a7:
96:a8:29:e2:bb:61:7d:79:59:29:ba:f0:f0:9c:14:b4:b3:6d:
ce:86:c9:90:d3:3d:b7:fe:63:5d:36:77:94:4c:7f:68:60:85:
e2:d6:ee:d3:ea:6a:04:5c:44:e6:82:18:81:76:56:9b:94:49:
b1:e7:bd:bc:c3:b8:3b:12:f9:e9:71:8d:46:a1:c6:05:a7:f9:
73:3a:1e:8e:95:97:f0:85:73:84:06:89:ca:7f:a2:ec:f7:24:
f6:92:04:5b:ca:03:b3:60:6b:29:bb:8e:37:9c:26:e2:68:54:
d8:66:96:5f:22:30:07:b2:29:48:ef:e2:4b:f6:cc:02:ac:30:
0f:1a:a8:91:74:12:8f:ca:4c:9d:ee:f1:d6:ee:08:21:83:4b:
67:0e:ae:1b:06:5d:01:af:5d:77:20:85:6c:56:e4:d0:be:bc:
0b:78:7d:de:e6:8e:4b:a7:e5:53:37:49:71:77:70:47:ad:79:
86:b7:e7:38:b7:7c:d1:37:ac:78:3a:8f:37:ca:cb:12:24:bc:
a9:a1:8a:7e:e8:f3:a3:1d:00:79:25:48:70:b9:c9:5f:10:e2:
73:2e:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:11 2026 by rpki-client