Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: rsk/q9AYecPNrrNZAM9NY7ac/RuMykkLcInUBHJrI20=
Subject key identifier: EE:56:A2:DA:8E:EA:0A:28:BA:55:6C:85:BC:AE:39:82:E5:D9:F0:BE
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 019D25F0EB81887963FC04D78846CAB0F4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 0F65
Signing time: Wed 25 Mar 2026 17:00:38 +0000
Manifest this update: Wed 25 Mar 2026 17:00:38 +0000
Manifest next update: Thu 26 Mar 2026 17:00:38 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: 7QOkBsB9LSVp4N/hgaEj9zX9L/9I0Tlw96yxY1mgkCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:eb:81:88:79:63:fc:04:d7:88:46:ca:b0:f4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Mar 25 17:00:38 2026 GMT
Not After : Mar 26 17:00:38 2026 GMT
Subject: CN=ee56a2da8eea0a28ba556c85bcae3982e5d9f0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:64:11:e1:c8:7c:e2:b9:35:84:26:45:5e:
02:fc:ce:1c:61:1c:1f:51:cd:e7:a9:24:46:f8:5c:
6d:cd:ef:c2:bc:75:3e:73:a6:00:46:d6:14:74:9e:
46:92:b8:51:b0:38:2c:6d:96:23:df:a2:55:a5:1a:
d4:66:d6:da:6f:23:5e:c4:e1:da:8c:45:ac:57:77:
7f:ec:a4:cd:d2:15:22:4d:96:60:68:6f:de:90:a5:
62:2c:37:43:15:70:f4:66:cb:18:f7:68:25:76:9e:
13:30:2c:8b:ca:3c:5b:44:13:37:e3:11:f0:69:53:
63:0a:09:0b:a6:f8:82:6f:70:8a:b3:6d:b2:7f:1e:
04:5e:2d:7f:7e:92:0b:57:9d:df:8c:92:fe:3e:61:
10:82:91:3e:91:c9:51:2d:59:ba:55:88:62:96:f7:
18:86:6d:93:ab:6b:2b:92:b3:bc:2f:0b:09:8a:af:
bb:f3:c7:81:84:20:a0:d6:87:28:a2:75:80:4c:bf:
60:a4:e0:92:8e:8f:30:9f:16:8a:df:0a:a5:3e:1a:
ad:79:39:7d:f9:9d:39:9e:75:24:aa:d3:6c:96:1b:
e7:6a:51:37:38:a4:bc:07:c1:73:94:29:43:38:9e:
b5:86:5f:98:f9:80:68:6f:7e:03:8a:91:06:1c:60:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:56:A2:DA:8E:EA:0A:28:BA:55:6C:85:BC:AE:39:82:E5:D9:F0:BE
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cd:7b:3c:13:4b:cd:d3:84:08:1b:7d:63:e7:b5:cc:73:8a:
b9:ba:6c:b1:20:6f:4a:e9:24:c9:94:6e:c9:f0:6e:52:45:1d:
30:7c:ab:12:04:c7:48:31:70:b2:83:35:89:12:03:cc:26:6b:
13:80:08:68:4a:4c:c2:6b:c0:b7:36:5d:78:f4:d8:d5:2b:6c:
55:c8:50:79:a7:76:e5:58:da:58:58:1a:a1:f3:e4:1b:63:0a:
7c:4f:2f:96:d8:23:e0:02:67:16:1f:50:de:ff:12:7e:7e:25:
72:82:d4:32:18:f1:57:20:87:18:43:bc:64:5b:72:df:e3:b6:
f2:c5:a5:36:af:2b:18:e4:59:a2:ca:27:8b:36:f7:74:0e:51:
ed:14:d0:22:b0:c7:a5:22:39:fe:5e:e8:70:b6:78:23:40:b6:
84:88:63:9e:11:f2:f4:61:fa:16:95:1c:be:36:54:cb:5f:15:
5e:18:48:20:32:ba:dc:c0:af:05:87:29:da:0b:93:2e:ae:49:
80:b5:6b:05:41:ba:8e:6f:af:fd:15:c5:8c:7c:2d:0d:68:c8:
bd:7e:6b:2f:a6:f7:c3:d0:c2:b0:0f:61:52:31:3e:2e:4b:2b:
c7:c1:d9:67:d9:72:b9:cb:12:0c:2b:b6:e3:6c:95:0a:e9:c1:
71:85:8f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8OuBiHlj/ATXiEbKsPT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDNkZjgyOWFmZDZhMWYyNTkwZTQyNDQ1MjJlMWIzNmMw
ODZhOTQwHhcNMjYwMzI1MTcwMDM4WhcNMjYwMzI2MTcwMDM4WjAzMTEwLwYDVQQD
EyhlZTU2YTJkYThlZWEwYTI4YmE1NTZjODViY2FlMzk4MmU1ZDlmMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAZkEeHIfOK5NYQmRV4C/M4cYRwf
Uc3nqSRG+Fxtze/CvHU+c6YARtYUdJ5GkrhRsDgsbZYj36JVpRrUZtbabyNexOHa
jEWsV3d/7KTN0hUiTZZgaG/ekKViLDdDFXD0ZssY92gldp4TMCyLyjxbRBM34xHw
aVNjCgkLpviCb3CKs22yfx4EXi1/fpILV53fjJL+PmEQgpE+kclRLVm6VYhilvcY
hm2Tq2srkrO8LwsJiq+788eBhCCg1ocoonWATL9gpOCSjo8wnxaK3wqlPhqteTl9
+Z05nnUkqtNslhvnalE3OKS8B8FzlClDOJ61hl+Y+YBob34DipEGHGBeowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5WotqO6gooulVshbyuOYLl2fC+MB8GA1UdIwQY
MBaAFO4D34Ka/WofJZDkJEUi4bNsCGqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjIt
YTFhNDZhODBjMWRhLzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjItYTFhNDZhODBjMWRh
LzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa817PBNL
zdOECBt9Y+e1zHOKubpssSBvSukkyZRuyfBuUkUdMHyrEgTHSDFwsoM1iRIDzCZr
E4AIaEpMwmvAtzZdePTY1StsVchQead25VjaWFgaofPkG2MKfE8vltgj4AJnFh9Q
3v8Sfn4lcoLUMhjxVyCHGEO8ZFty3+O28sWlNq8rGORZosonizb3dA5R7RTQIrDH
pSI5/l7ocLZ4I0C2hIhjnhHy9GH6FpUcvjZUy18VXhhIIDK63MCvBYcp2guTLq5J
gLVrBUG6jm+v/RXFjHwtDWjIvX5rL6b3w9DCsA9hUjE+Lksrx8HZZ9lyucsSDCu2
42yVCunBcYWPIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:18 2026 by rpki-client