Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File: 7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier: Jn5wBf2G17maAU3H54Cd9oknnn3VqqPfuV+4Mlpo+KI=
Subject key identifier: E3:EC:D9:FA:CD:3E:79:08:A7:CC:24:38:41:B2:EF:61:A6:F4:3E:32
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 019E30A961D8E00BE5D432FEB23D8212EB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number: 18A7
Signing time: Sat 16 May 2026 12:01:07 +0000
Manifest this update: Sat 16 May 2026 12:01:07 +0000
Manifest next update: Sun 17 May 2026 12:01:07 +0000
Files and hashes: 1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: jK2WtPP9P4Ew5wdcFoPS5SApJ1stynWTz9ZitITBB94=)
2: VUUp1uAX40MPKyDcAzJjGno-5LY.roa (hash: yAb3XZUvdevqGqaQ9+mhuyzglvHMO4AtEqM2+RGZpR0=)
3: vP7vlHll0pUsAYDnA7HZBa8Dv_A.roa (hash: u4s3et3xRD7wegNnSUcKT73wjZJAhCGvvUbznbj46B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:61:d8:e0:0b:e5:d4:32:fe:b2:3d:82:12:eb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: May 16 12:01:07 2026 GMT
Not After : May 17 12:01:07 2026 GMT
Subject: CN=e3ecd9facd3e7908a7cc243841b2ef61a6f43e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:7b:be:23:7e:c8:5c:fa:e8:57:12:63:f0:
17:57:f5:45:c7:c0:a8:b2:28:90:3f:78:bb:c9:67:
d0:91:0c:d7:b3:f4:75:30:6b:53:c1:0c:0e:0c:11:
e5:a1:e6:88:46:70:4c:81:d5:61:71:5e:75:90:66:
67:a4:6c:0c:92:e7:b6:34:7f:63:e4:69:15:ee:34:
dc:27:c8:f1:da:52:fc:8e:cd:9f:80:f4:27:a7:b6:
41:d1:18:16:18:0e:62:3c:04:53:cf:85:bd:8a:2b:
ea:ef:e6:bb:bb:bb:2a:80:51:82:35:40:a9:99:2c:
a3:c3:97:8e:f6:3c:65:c5:e2:36:63:c2:c2:0f:76:
cb:9a:e1:cd:40:93:5b:03:58:e8:c2:31:c6:da:b5:
23:54:91:73:c1:c8:4e:fa:5d:17:d5:ce:ff:9c:37:
00:98:0c:ab:13:f6:5d:17:1f:d7:dc:38:a4:5f:72:
ba:95:bf:7a:41:ee:95:1b:c2:01:7c:ca:ba:2e:63:
b6:99:19:d0:68:93:a0:e9:7f:19:1a:7d:7d:cf:b9:
8e:26:62:78:1d:2b:59:84:e4:b6:82:6a:16:28:eb:
b0:70:3f:13:4a:de:45:c9:81:ef:29:64:70:36:bb:
09:69:bd:4a:7d:af:5d:7e:35:7f:fd:fd:27:bf:d7:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:D9:FA:CD:3E:79:08:A7:CC:24:38:41:B2:EF:61:A6:F4:3E:32
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:21:3c:08:ad:fa:98:4d:25:e0:a1:de:05:93:3d:38:4e:20:
2f:e4:8e:04:51:93:8b:28:09:43:61:91:e4:b9:ea:96:6c:bd:
d1:eb:30:e5:72:07:f4:74:b4:c5:63:3f:8b:10:14:f1:d4:49:
9c:1a:10:34:46:4d:9d:d8:a5:cf:f8:37:55:f6:c1:4c:00:95:
c8:71:a6:09:1a:42:b4:3d:05:ca:9a:c7:d1:83:c3:33:d4:14:
9e:41:0e:81:1d:2a:eb:98:69:25:5e:e9:7f:c1:e9:86:63:6e:
96:7e:77:04:16:43:14:d8:47:e6:41:f5:09:1a:95:e7:4b:4f:
f0:2a:bd:3b:5b:a5:d6:17:34:ac:48:40:d7:db:85:5c:f1:36:
b1:d9:2c:d6:74:47:02:74:c5:e2:dd:47:88:78:c8:d6:ca:81:
c0:4a:fd:98:54:44:e3:40:b5:04:f9:9c:2d:e7:f1:36:16:b3:
19:4c:1e:bd:4b:b3:b7:0f:17:35:f3:40:6b:f6:89:f9:cc:da:
ae:ef:09:86:e2:a8:d6:9d:8f:d2:c5:36:fb:62:54:00:27:e7:
16:b6:79:2f:9b:8f:77:98:ec:4c:8b:54:3a:f3:cd:29:64:6f:
d9:86:76:48:e9:24:ac:2d:03:4b:61:03:5f:ff:58:64:19:07:
8c:8f:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:16 2026 by rpki-client