Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File: 7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier: /bKXIbqTBCbeQyuKuK/cpN21oRJuG3eRj6QX48nW52s=
Subject key identifier: 15:5E:D3:7F:39:BC:9C:D9:72:52:90:64:7F:8A:62:7F:AE:89:10:DB
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer: /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial: 019DCE9973048394500963B14830A01AD711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 11:00:56 +0000
Manifest this update: Mon 27 Apr 2026 11:00:56 +0000
Manifest next update: Tue 28 Apr 2026 11:00:56 +0000
Files and hashes: 1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: 2yYPG+yvtYOvq/t7tazDc0BApjnzN1Vb7AQPRkgy1Ao=)
2: aolEbo2qB2S6A6P1jzACXp478EQ.roa (hash: oA7ghnRZDo0Fz0lfj+1EUdXsdtQn6tS/8aJp7ap6T0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:73:04:83:94:50:09:63:b1:48:30:a0:1a:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Validity
Not Before: Apr 27 11:00:56 2026 GMT
Not After : Apr 28 11:00:56 2026 GMT
Subject: CN=155ed37f39bc9cd9725290647f8a627fae8910db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:f4:e0:5a:f8:2e:ce:cc:fc:71:ab:e2:dc:
83:01:d3:8d:26:d8:21:7a:b2:58:f7:f1:c5:76:9a:
be:bd:2c:a2:85:e9:67:98:14:6b:e8:dc:c2:95:49:
32:f2:f5:08:2f:86:ad:b0:de:b8:bc:47:6b:2b:e0:
d3:f1:a6:60:c4:0e:12:cf:8d:22:3b:ba:9d:cb:72:
f8:55:30:8f:c9:29:59:f4:25:0f:6c:05:85:e1:7c:
22:32:ab:30:c5:aa:4d:50:b0:c8:73:ed:e4:cb:7f:
2f:8f:19:38:d2:4b:df:ea:73:66:b6:ed:99:de:46:
69:a5:7e:14:da:92:e3:fa:66:cc:54:58:25:ed:9a:
5b:b8:82:d3:2c:e1:37:80:de:c4:7b:28:3c:02:15:
78:6a:46:fb:20:33:81:03:3f:e8:53:a7:97:7a:49:
2b:c0:fc:25:b2:1d:57:f2:82:9c:11:fe:de:1c:76:
d8:52:d7:d2:ed:1b:17:80:5e:81:5d:cf:7e:fc:93:
f0:91:91:01:33:da:13:6a:f2:53:1b:f6:96:56:2a:
42:2e:8a:d5:f7:d7:55:08:d3:b0:09:06:d6:6d:4e:
e0:d4:96:af:4d:47:0d:0b:4e:cc:b4:30:76:a1:a7:
7a:e0:09:59:06:87:6c:38:d9:81:3e:c7:06:2b:28:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:D3:7F:39:BC:9C:D9:72:52:90:64:7F:8A:62:7F:AE:89:10:DB
X509v3 Authority Key Identifier:
keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:59:1a:bc:04:3b:22:e9:44:5b:d2:a4:38:40:c5:4b:17:
bf:d7:bf:37:4a:2a:36:51:85:74:ff:b7:5e:64:27:78:ba:11:
d5:d9:33:94:1b:e0:de:08:0e:a6:5c:e3:eb:37:b4:bd:3c:83:
8c:6d:df:1c:3e:07:cb:f6:61:46:01:e5:a1:1b:aa:8e:45:c9:
f9:41:fc:d8:44:2c:8f:e9:88:41:d2:42:37:b2:0d:f1:81:c8:
2b:8c:6e:8b:5a:b5:c3:ce:f4:ce:11:76:f2:4d:cb:79:45:8f:
00:c3:e8:b0:68:d1:0c:fc:37:5d:f5:29:2b:97:be:bc:d1:2a:
c4:ab:46:8f:31:bf:94:96:ae:09:e0:be:8a:8c:89:21:12:f0:
8a:02:e2:93:27:3c:30:ff:b5:55:05:dd:51:a3:d0:11:58:80:
06:b1:cd:a6:de:ae:26:80:b5:28:c1:c0:a7:d0:bb:65:68:10:
df:18:39:c1:c4:1f:8b:d0:e0:fc:0f:2e:4d:3f:ec:4d:36:fd:
70:9d:3b:ed:78:7b:4a:dc:84:fb:1b:6e:91:5d:73:b7:5b:bc:
a4:7a:ad:73:45:28:dd:05:09:4a:e2:8e:70:3f:3a:cf:6e:cb:
de:21:50:35:c8:a1:04:b0:aa:a5:a3:69:eb:b2:3c:40:08:ae:
87:4f:23:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmXMEg5RQCWOxSDCgGtcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODUwNDgzY2NlMTMzN2IxYzZjMmZkZGVhOWM1ZGJiNGE3
ZTE5MWEwHhcNMjYwNDI3MTEwMDU2WhcNMjYwNDI4MTEwMDU2WjAzMTEwLwYDVQQD
EygxNTVlZDM3ZjM5YmM5Y2Q5NzI1MjkwNjQ3ZjhhNjI3ZmFlODkxMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivP04Fr4Ls7M/HGr4tyDAdONJtgh
erJY9/HFdpq+vSyihelnmBRr6NzClUky8vUIL4atsN64vEdrK+DT8aZgxA4Sz40i
O7qdy3L4VTCPySlZ9CUPbAWF4XwiMqswxapNULDIc+3ky38vjxk40kvf6nNmtu2Z
3kZppX4U2pLj+mbMVFgl7ZpbuILTLOE3gN7Eeyg8AhV4akb7IDOBAz/oU6eXekkr
wPwlsh1X8oKcEf7eHHbYUtfS7RsXgF6BXc9+/JPwkZEBM9oTavJTG/aWVipCLorV
99dVCNOwCQbWbU7g1JavTUcNC07MtDB2oad64AlZBodsONmBPscGKygrmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVe0385vJzZclKQZH+KYn+uiRDbMB8GA1UdIwQY
MBaAFO2FBIPM4TN7HGwv3eqcXbtKfhkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUt
YjkxNTNiMzMyMGMxLzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUtYjkxNTNiMzMyMGMx
LzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAxZGrwE
OyLpRFvSpDhAxUsXv9e/N0oqNlGFdP+3XmQneLoR1dkzlBvg3ggOplzj6ze0vTyD
jG3fHD4Hy/ZhRgHloRuqjkXJ+UH82EQsj+mIQdJCN7IN8YHIK4xui1q1w870zhF2
8k3LeUWPAMPosGjRDPw3XfUpK5e+vNEqxKtGjzG/lJauCeC+ioyJIRLwigLikyc8
MP+1VQXdUaPQEViABrHNpt6uJoC1KMHAp9C7ZWgQ3xg5wcQfi9Dg/A8uTT/sTTb9
cJ077Xh7StyE+xtukV1zt1u8pHqtc0Uo3QUJSuKOcD86z27L3iFQNcihBLCqpaNp
67I8QAiuh08jLQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:43:15 2026 by rpki-client