
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: zmBWhS7wPeI7lxGO8oadbQYUlCYUfpJ2gH5a3SwNm4U=
Subject key identifier: 73:27:E9:D5:E7:E0:97:FA:9D:1F:EC:07:3B:DA:1F:16:95:AB:23:E9
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019DF49555C78285E8D7CF210AF4985B9A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 18F1
Signing time: Mon 04 May 2026 20:02:00 +0000
Manifest this update: Mon 04 May 2026 20:02:00 +0000
Manifest next update: Tue 05 May 2026 20:02:00 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: wtrvzYjQ9LNv/tz94OI8jPWk8Z5gXIbqsEa0Z4iW8OA=)
2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 14:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:95:55:c7:82:85:e8:d7:cf:21:0a:f4:98:5b:9a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: May 4 20:02:00 2026 GMT
Not After : May 5 20:02:00 2026 GMT
Subject: CN=7327e9d5e7e097fa9d1fec073bda1f1695ab23e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:9b:a2:12:0e:ca:4d:83:d0:c9:fd:87:8e:
ee:9c:24:81:fd:dd:f8:49:2b:d1:fb:22:b2:0a:93:
12:fc:9c:8a:37:85:fc:df:b7:2f:09:94:d2:8e:a6:
0b:13:d2:68:92:a6:15:02:e1:09:83:e8:6f:ac:d1:
d3:18:fb:f9:cb:dd:59:9c:6c:73:43:4a:4a:b3:e9:
4d:3a:c9:14:32:8c:f5:76:08:54:d2:db:76:29:94:
9f:5d:53:ec:62:9d:3a:86:58:78:cc:8d:a2:6a:f5:
c6:d1:dc:bb:93:1b:ab:66:da:ee:24:17:c1:14:24:
f5:a5:b7:4a:10:08:e1:5a:fe:4a:f6:d8:29:14:f5:
0a:95:d3:ac:05:7d:63:ed:1a:53:09:d7:9a:bf:45:
66:30:bf:39:cf:2a:54:6b:82:9b:ed:0c:2f:88:a3:
b4:25:26:09:27:05:ce:05:cc:88:b1:6f:2f:56:20:
50:1c:55:82:ac:10:87:7e:eb:75:ca:43:44:d5:e4:
32:c2:fe:12:63:c8:cf:d2:7d:f0:24:4b:b9:d4:38:
23:2c:02:26:25:98:fe:ce:13:e9:bc:a5:39:ad:cb:
f6:58:7f:d8:a3:f6:d5:a2:5f:23:35:25:8a:8f:5e:
c3:f9:11:dd:24:7f:c1:8a:f3:61:89:47:cd:6e:01:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:E9:D5:E7:E0:97:FA:9D:1F:EC:07:3B:DA:1F:16:95:AB:23:E9
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6f:02:80:b0:0d:fc:51:bc:bc:4e:ce:3a:0d:48:04:77:03:
f7:90:90:c2:05:f2:2b:05:62:fd:64:88:94:5f:be:ee:ad:9a:
e1:fa:3b:44:53:b0:b6:d4:df:ac:e5:ce:c4:6c:6a:ce:60:20:
16:57:91:b8:eb:a1:7c:10:03:5f:6b:b9:b1:74:e0:0b:ea:e4:
dc:51:16:0c:21:1a:2b:b6:8d:e7:c2:39:66:24:fd:c3:ad:13:
6a:5d:19:9c:3f:cc:0c:f9:18:c9:f5:4f:bc:6a:de:14:46:ea:
15:3b:41:c2:a9:a4:ac:c3:13:d8:50:85:dd:2b:46:14:a4:c2:
25:3d:99:ed:42:e6:da:74:7e:ab:ca:5a:93:91:3f:96:8f:19:
17:d4:4a:cb:2c:33:d8:90:5a:9d:01:38:17:be:c1:ae:3b:92:
0c:f2:24:35:8d:02:04:45:f9:f7:ba:92:e9:c3:be:c8:be:31:
2d:2c:36:0c:a6:54:b4:b6:c9:47:67:21:c2:c3:10:97:3c:86:
53:1b:dc:f1:06:05:61:fa:7f:3f:5f:2f:6a:3f:3d:5c:ed:ff:
90:ff:35:68:e7:13:27:a3:1e:1d:16:74:71:24:f4:be:a6:73:
2b:4e:41:26:42:db:e5:56:44:22:2e:08:0c:13:76:d1:02:8b:
5e:48:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 23:02:10 2026 by rpki-client