Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: rOQS00P9g+zTSxyaXaNL+kIO/g7XSzY72kyrGqf0CWA=
Subject key identifier: 22:D1:3C:9D:9F:48:21:AF:74:50:C3:3E:C3:D1:51:5B:36:B3:8C:43
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019E2C9631B82743494CC853DBB00CE21F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 174F
Signing time: Fri 15 May 2026 17:01:41 +0000
Manifest this update: Fri 15 May 2026 17:01:41 +0000
Manifest next update: Sat 16 May 2026 17:01:41 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: srowYAabYJAUDhd6+p3fVzvwmtJyVK8xpBJAkKZhzuU=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 15:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:96:31:b8:27:43:49:4c:c8:53:db:b0:0c:e2:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: May 15 17:01:41 2026 GMT
Not After : May 16 17:01:41 2026 GMT
Subject: CN=22d13c9d9f4821af7450c33ec3d1515b36b38c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:56:d2:fd:bc:0d:f9:3c:c5:92:fc:57:3f:
cf:ab:2a:39:10:32:f2:65:e8:38:1e:b9:62:17:19:
9c:e1:9b:e0:2c:97:69:11:49:82:de:6c:2a:7a:dd:
62:b4:3c:54:b8:d0:31:be:a1:36:df:a3:e5:79:6d:
62:51:39:d8:9c:0d:eb:2f:72:cd:b4:07:06:a4:04:
fa:4f:91:f8:52:d3:ad:6a:64:be:94:94:66:16:a4:
d1:9b:b9:15:e6:4a:8e:ce:ec:1e:39:86:2b:c1:64:
cc:9b:70:4f:ff:81:da:a8:6a:7a:65:94:32:3f:2d:
86:f0:a8:ca:cd:78:0e:49:21:01:48:fc:2f:27:6f:
3e:96:4a:03:6a:31:a7:be:d5:27:18:2b:6f:41:54:
ce:2f:61:6e:d1:8e:7a:7f:88:1a:24:23:c2:06:67:
9d:2c:bb:ec:28:5b:8d:63:6c:02:97:12:6c:c4:8e:
50:16:da:3a:5b:fd:04:4d:67:d1:93:63:cc:e6:6b:
47:44:ee:15:8a:83:2d:91:49:e2:dc:41:5d:b0:b7:
a2:be:f9:db:05:ea:96:37:3f:16:5f:1b:ab:b5:e6:
a1:f4:ed:8e:55:3c:09:77:d1:b8:ec:5b:7d:ad:89:
eb:38:76:c4:4c:d4:9f:94:d9:d4:ea:6d:c4:55:99:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:3C:9D:9F:48:21:AF:74:50:C3:3E:C3:D1:51:5B:36:B3:8C:43
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ba:98:a0:b8:28:17:bf:5f:52:80:8f:a5:54:3e:67:02:65:
de:f6:cd:23:4a:53:0d:0e:48:80:f4:a3:f3:27:3e:08:07:31:
85:83:0e:eb:26:02:47:01:fe:61:91:9e:69:15:9c:fe:be:1d:
f4:13:bd:d4:cd:b3:b9:d2:a3:8f:bf:8f:c9:f0:b1:5a:e1:55:
29:9d:61:49:25:e5:e8:2e:a2:04:32:26:b6:61:b5:a1:58:0a:
6b:a8:ea:96:96:1d:db:e8:2d:04:6f:c0:3b:e0:b0:38:7c:36:
83:75:6d:41:cc:e4:d2:ea:39:cf:76:50:74:4b:ca:66:13:7b:
66:d4:9c:43:0d:77:ce:29:d2:da:5f:7b:41:c1:77:66:77:bf:
fd:7e:4b:2e:25:fc:8a:31:3b:02:ab:e8:05:f4:87:6b:12:21:
c0:4d:cc:58:19:c7:c8:84:27:09:46:5b:f5:2c:f6:e4:1a:4e:
3f:a0:db:72:6c:5e:c1:8c:9f:51:e1:64:e9:65:50:5c:5b:ed:
2d:94:eb:fc:52:9b:5d:49:74:98:a6:00:80:70:8b:65:96:f5:
31:d7:77:0a:23:eb:ab:6a:c4:63:3a:ad:e0:04:03:11:78:88:
2d:86:09:4c:9f:c4:be:94:92:a6:3c:c9:b9:42:2e:7c:09:16:
c5:1b:a3:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4sljG4J0NJTMhT27AM4h9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmJmMmJhNWIzMmU0MmU4YjZjMDNiODM2ZDc2NGY5NzVi
NTg5OGYwHhcNMjYwNTE1MTcwMTQxWhcNMjYwNTE2MTcwMTQxWjAzMTEwLwYDVQQD
EygyMmQxM2M5ZDlmNDgyMWFmNzQ1MGMzM2VjM2QxNTE1YjM2YjM4YzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9tW0v28Dfk8xZL8Vz/Pqyo5EDLy
Zeg4HrliFxmc4ZvgLJdpEUmC3mwqet1itDxUuNAxvqE236PleW1iUTnYnA3rL3LN
tAcGpAT6T5H4UtOtamS+lJRmFqTRm7kV5kqOzuweOYYrwWTMm3BP/4HaqGp6ZZQy
Py2G8KjKzXgOSSEBSPwvJ28+lkoDajGnvtUnGCtvQVTOL2Fu0Y56f4gaJCPCBmed
LLvsKFuNY2wClxJsxI5QFto6W/0ETWfRk2PM5mtHRO4VioMtkUni3EFdsLeivvnb
BeqWNz8WXxurteah9O2OVTwJd9G47Ft9rYnrOHbETNSflNnU6m3EVZn+sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLRPJ2fSCGvdFDDPsPRUVs2s4xDMB8GA1UdIwQY
MBaAFOy78rpbMuQui2wDuDbXZPl1tYmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAt
ODNmZmM4MDA3M2IyLzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAtODNmZmM4MDA3M2Iy
LzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrqYoLgo
F79fUoCPpVQ+ZwJl3vbNI0pTDQ5IgPSj8yc+CAcxhYMO6yYCRwH+YZGeaRWc/r4d
9BO91M2zudKjj7+PyfCxWuFVKZ1hSSXl6C6iBDImtmG1oVgKa6jqlpYd2+gtBG/A
O+CwOHw2g3VtQczk0uo5z3ZQdEvKZhN7ZtScQw13zinS2l97QcF3Zne//X5LLiX8
ijE7AqvoBfSHaxIhwE3MWBnHyIQnCUZb9Sz25BpOP6DbcmxewYyfUeFk6WVQXFvt
LZTr/FKbXUl0mKYAgHCLZZb1Mdd3CiPrq2rEYzqt4AQDEXiILYYJTJ/EvpSSpjzJ
uUIufAkWxRujrw==
-----END CERTIFICATE-----
Generated at Sat May 16 01:06:54 2026 by rpki-client