Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: QyYnqpQBmFsqSlje9quINP7qJ/NIiR+v+95aqF8Lj/A=
Subject key identifier: 35:0B:9A:A0:2A:5D:C1:E5:E8:E6:C4:F9:77:CA:69:00:29:DB:32:C3
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019D27722F5B399AB7D521077ADE1BD70087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: 9bOHGTxs0slp4ukKmnMUSq7TlePpHANrdXNbuf3asKA=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2f:5b:39:9a:b7:d5:21:07:7a:de:1b:d7:00:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=350b9aa02a5dc1e5e8e6c4f977ca690029db32c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:d1:36:c9:ee:54:cb:8a:b9:c1:f6:85:63:
4c:a7:91:50:f9:4a:45:3b:4a:d5:be:8a:5c:99:fa:
a5:d7:24:73:57:b9:c4:cf:9d:45:50:e5:56:4d:18:
82:74:1d:23:d5:1d:e5:d2:69:9d:2f:45:5d:9d:bc:
4d:a6:73:28:d3:92:f8:6f:f3:65:2a:df:81:aa:a5:
ae:5e:b8:46:12:17:b6:03:8d:6c:8c:4c:12:ef:1a:
81:71:ea:8b:f7:a3:52:66:17:f6:51:97:65:94:a3:
52:59:b8:60:26:30:c8:64:07:b2:f5:84:09:ae:54:
84:4c:45:88:11:db:ec:48:83:ea:a0:ef:2a:e7:af:
57:1e:d2:0d:89:9f:9b:b6:7f:e9:37:7c:85:35:4e:
a5:31:2c:23:62:92:53:86:b9:fc:b0:00:9f:78:3a:
33:ec:ca:f6:fc:02:96:15:f2:d7:c0:0e:c1:3f:78:
29:4b:c5:6c:16:80:d6:68:93:f3:fd:09:9c:be:98:
28:54:22:58:37:7d:37:c5:f6:a0:c4:d7:10:ac:0c:
62:26:6c:e4:1b:8c:59:3f:ae:3b:70:0f:cf:97:15:
20:2d:b9:85:73:50:12:bd:63:9b:ae:98:b2:9d:41:
4d:43:ee:b6:e1:29:50:aa:26:6e:a8:34:b1:f8:a4:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:9A:A0:2A:5D:C1:E5:E8:E6:C4:F9:77:CA:69:00:29:DB:32:C3
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a8:a3:52:98:25:4d:a3:88:f7:fd:8f:38:5f:1f:3d:9d:12:
85:90:ab:18:cd:8d:34:e3:24:21:bf:fc:d2:a5:97:38:d0:a6:
fe:76:ff:4c:ba:09:8f:d0:3b:ce:2c:57:ea:36:4a:b8:9a:1b:
15:ac:17:99:d7:35:4c:cd:1c:93:b3:95:fc:d2:90:56:08:64:
72:93:b7:4d:ca:a1:eb:e4:80:1d:44:bd:b5:9d:b7:3b:4f:70:
b9:88:44:c6:d2:6d:b1:b0:97:87:39:7b:53:25:43:94:29:8b:
a0:9b:92:ad:c1:06:37:7c:71:5c:88:12:51:83:ca:df:9d:23:
5f:4e:8a:9e:55:e2:b4:fe:f5:ca:e3:fd:b2:e5:f0:fe:71:71:
c8:01:e9:e3:4a:a2:fc:72:69:ae:10:b0:b5:21:7a:5c:f6:e7:
c9:60:5f:8f:fe:01:9f:40:23:4e:6c:3a:0d:b0:c6:0f:83:b2:
d1:9a:c8:61:75:d0:53:b1:a7:4a:80:ee:e3:47:52:c8:6b:6f:
ee:0f:71:a5:a9:d1:e5:4c:bc:59:53:77:31:a2:2a:94:a1:a1:
5e:93:83:02:4a:c7:0b:5e:66:90:b7:12:62:af:91:67:95:ee:
90:e1:da:9a:54:4a:15:8b:43:8b:4e:70:4d:1f:8c:7c:b6:35:
b9:b7:fe:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nci9bOZq31SEHet4b1wCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi
Yzk5MWIwHhcNMjYwMzI2MDAwMTI3WhcNMjYwMzI3MDAwMTI3WjAzMTEwLwYDVQQD
EygzNTBiOWFhMDJhNWRjMWU1ZThlNmM0Zjk3N2NhNjkwMDI5ZGIzMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss/RNsnuVMuKucH2hWNMp5FQ+UpF
O0rVvopcmfql1yRzV7nEz51FUOVWTRiCdB0j1R3l0mmdL0VdnbxNpnMo05L4b/Nl
Kt+BqqWuXrhGEhe2A41sjEwS7xqBceqL96NSZhf2UZdllKNSWbhgJjDIZAey9YQJ
rlSETEWIEdvsSIPqoO8q569XHtINiZ+btn/pN3yFNU6lMSwjYpJThrn8sACfeDoz
7Mr2/AKWFfLXwA7BP3gpS8VsFoDWaJPz/QmcvpgoVCJYN303xfagxNcQrAxiJmzk
G4xZP647cA/PlxUgLbmFc1ASvWObrpiynUFNQ+624SlQqiZuqDSx+KTwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDULmqAqXcHl6ObE+XfKaQAp2zLDMB8GA1UdIwQY
MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt
MzZlMzlmZWQ3YmVkLzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk
LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKijUpgl
TaOI9/2POF8fPZ0ShZCrGM2NNOMkIb/80qWXONCm/nb/TLoJj9A7zixX6jZKuJob
FawXmdc1TM0ck7OV/NKQVghkcpO3Tcqh6+SAHUS9tZ23O09wuYhExtJtsbCXhzl7
UyVDlCmLoJuSrcEGN3xxXIgSUYPK350jX06KnlXitP71yuP9suXw/nFxyAHp40qi
/HJprhCwtSF6XPbnyWBfj/4Bn0AjTmw6DbDGD4Oy0ZrIYXXQU7GnSoDu40dSyGtv
7g9xpanR5Uy8WVN3MaIqlKGhXpODAkrHC15mkLcSYq+RZ5XukOHamlRKFYtDi05w
TR+MfLY1ubf+IA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:59 2026 by rpki-client