Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: 9gh7Qxo5O0brQ+qcjqrCPXnm2bfCNvV0mECgNI5evl4=
Subject key identifier: D6:B9:A7:14:F0:35:5D:82:BD:D4:0E:15:68:61:A0:8F:82:D1:D2:F1
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019E1ED9BA648B697CB642FD409DEC8A4644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 01:00:45 +0000
Manifest this update: Wed 13 May 2026 01:00:45 +0000
Manifest next update: Thu 14 May 2026 01:00:45 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: 6YNlUCM4Q/o6TF/YyBkXS0tnAuJt7IQxAXiTjHxqTGA=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ba:64:8b:69:7c:b6:42:fd:40:9d:ec:8a:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: May 13 01:00:45 2026 GMT
Not After : May 14 01:00:45 2026 GMT
Subject: CN=d6b9a714f0355d82bdd40e156861a08f82d1d2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:7b:f0:86:31:07:ee:e4:b8:39:9d:50:a0:
e2:75:4e:05:de:70:7b:bd:a4:39:e9:e5:3e:3e:b9:
ff:33:b0:a2:ee:ed:b1:ca:3a:3b:40:79:60:2f:f0:
ce:36:12:ce:0d:47:39:f1:e3:f9:d5:ab:08:7a:2e:
0b:75:2c:ae:14:86:a0:a8:df:48:a0:18:e5:47:ad:
ec:d7:ed:17:15:71:b2:4a:b3:e7:23:0c:b9:89:0b:
92:40:29:a2:e0:15:e7:72:60:7c:3f:2b:ad:9f:b1:
63:ec:bb:81:49:58:16:73:08:a7:99:f3:41:a0:79:
dc:1f:11:88:27:62:88:d6:7a:2c:a2:08:b3:9e:5f:
ff:95:88:3b:ed:3d:b9:38:02:ed:eb:7a:40:4e:92:
9c:1c:6a:45:37:49:14:93:7a:d9:29:02:52:29:fc:
9e:72:17:61:7e:fb:0b:c4:69:d0:3d:88:59:87:13:
3b:4a:2b:53:e3:d5:15:b4:56:69:d4:d1:31:77:85:
6e:c4:13:85:d3:81:c5:63:ec:90:15:a2:38:3b:c7:
41:ee:87:71:85:a5:c6:34:47:02:e7:f7:40:29:22:
93:a3:3a:0c:34:b4:9e:1e:df:4a:8b:7e:fd:2e:2e:
1c:12:3b:84:78:32:1c:6b:49:ea:d5:26:da:f3:c6:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:A7:14:F0:35:5D:82:BD:D4:0E:15:68:61:A0:8F:82:D1:D2:F1
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ca:18:28:24:70:ef:44:3b:93:57:cd:b6:cb:b1:00:51:8b:
16:94:9f:67:9c:6c:18:3a:be:02:57:e0:b3:fd:f4:13:98:49:
0c:24:96:d5:aa:be:38:4d:ab:90:d8:17:08:05:2d:26:2e:81:
54:2f:60:06:7a:bb:68:ec:9c:86:76:ba:41:e4:59:55:de:59:
c6:0d:2d:4b:c9:43:1a:e9:f9:de:6c:bb:52:fa:af:6c:9a:96:
cc:27:17:99:26:25:c3:17:ed:1b:f0:24:44:54:8c:4c:19:2c:
97:3a:79:32:1d:e1:6d:49:8c:6e:32:69:7b:7e:55:be:ad:8e:
16:d3:68:ce:82:44:b4:e4:f8:b4:9a:86:09:8c:0c:82:ff:df:
a2:1d:4b:c6:93:69:00:ce:3b:ad:80:17:52:c4:48:f8:a9:7a:
35:1c:5e:39:84:99:3b:e2:7a:63:6e:47:e5:03:e4:c4:9a:54:
b1:d8:18:9a:00:b1:ad:b2:e1:3b:25:e3:d7:49:b0:b5:e1:81:
9c:15:28:ed:97:5f:60:d5:9d:44:0f:1d:c0:4f:38:cc:ef:3b:
74:dd:f0:d4:52:18:aa:fd:0e:b6:9f:84:cd:ae:e9:2d:39:a6:
54:5a:cb:d4:b6:5c:05:e2:2d:d0:50:03:7b:01:c2:95:dd:3a:
27:66:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:56 2026 by rpki-client