Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: Xsu7ds09VQ0DKew51YucM14+pW5gy3EFLl0NKKvKTBw=
Subject key identifier: 7E:00:23:D6:F9:2F:CF:D3:79:0A:7C:4E:57:10:D7:CA:23:A4:A9:92
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019D27A925148DE40F7A8DB0E952F47B10A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0AF9
Signing time: Thu 26 Mar 2026 01:01:29 +0000
Manifest this update: Thu 26 Mar 2026 01:01:29 +0000
Manifest next update: Fri 27 Mar 2026 01:01:29 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: 1z/1jK6tvaXZYUhwkWtTWXLl4DXm+0gSF2P+XdkoAGQ=)
2: aO8SV7r8aRmaMsrCVn54MAITseY.roa (hash: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:25:14:8d:e4:0f:7a:8d:b0:e9:52:f4:7b:10:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Mar 26 01:01:29 2026 GMT
Not After : Mar 27 01:01:29 2026 GMT
Subject: CN=7e0023d6f92fcfd3790a7c4e5710d7ca23a4a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:77:fd:51:7d:7b:a8:b9:86:65:7e:70:6d:
20:e8:35:fc:b2:b6:cb:75:5e:34:3c:03:a0:41:dc:
38:39:e0:96:44:34:6f:d6:c8:4a:4f:a6:2e:50:78:
8f:37:e0:ec:53:78:77:09:fb:6e:22:59:30:e0:49:
2c:06:f9:6e:b3:66:1d:67:9c:8b:78:5a:0f:b4:e7:
a7:b0:fe:70:a2:69:56:06:cf:c4:0f:10:4e:d0:79:
47:3f:a0:c9:70:a9:3b:8d:6d:9d:86:08:58:f6:26:
84:57:b7:4c:34:ff:3c:95:3e:e9:2b:3d:29:1d:33:
fc:90:27:58:d5:3f:8a:03:58:f1:94:6d:90:9b:f6:
43:9d:4e:b1:da:ea:3a:f2:d4:0a:96:1a:78:d0:6e:
34:5c:fe:eb:f0:ae:41:91:81:f4:c0:6b:b0:61:72:
de:60:76:69:a5:85:93:c2:75:dc:fa:af:2e:a1:44:
11:7d:28:50:19:7e:23:fe:63:cc:d8:45:0a:a2:8c:
e5:30:e8:29:db:c0:c7:d2:9f:f1:37:08:34:08:d0:
fa:96:22:ab:f7:ec:e8:15:1c:96:4a:a1:9c:f4:49:
38:04:95:d6:e6:78:62:8f:13:c8:21:fb:18:31:93:
ec:28:94:7f:ca:82:05:e0:db:3d:0e:1d:b6:45:8d:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:23:D6:F9:2F:CF:D3:79:0A:7C:4E:57:10:D7:CA:23:A4:A9:92
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:02:39:0c:17:8c:20:12:7b:6f:ef:6f:6a:e7:1b:fa:7b:
26:88:e4:9c:49:b8:fb:6e:41:c2:cf:60:14:ad:52:31:d0:4b:
db:d5:c1:66:58:ab:13:8a:fe:34:6b:84:a4:e7:9f:7e:da:bc:
d6:79:b2:8f:5c:2b:cc:cc:0e:24:25:61:a8:94:b2:77:44:25:
2f:39:b0:e6:8c:aa:9b:0b:3a:c7:da:87:6d:0e:ac:67:e6:31:
df:e9:a8:02:ae:85:83:e4:e6:cd:82:8f:97:42:94:fe:63:79:
3a:5a:19:4c:3b:94:b9:1f:f2:62:e4:f9:a3:3d:de:ab:3f:56:
8b:8f:a6:db:8f:6b:1c:2b:69:9c:65:8e:bb:13:cf:ec:8e:f2:
a0:4e:ba:05:48:bc:32:d4:37:58:e3:d3:d5:74:9e:a9:20:42:
4d:48:59:0c:b6:c9:56:c3:b2:b5:17:c2:5b:9f:56:3a:8c:b2:
41:f9:71:1e:bb:e0:23:dd:fe:ca:d9:23:2b:1c:51:d4:34:b6:
06:3c:0e:88:9f:d9:29:32:18:2d:fd:fc:4c:8e:d4:d3:7b:b8:
cd:96:bd:3e:63:63:03:f1:d8:d8:5d:9a:b3:da:75:23:1c:1c:
fd:9a:21:c8:49:eb:fb:94:bd:8c:bb:67:8e:dd:67:68:f6:be:
4a:f8:b2:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSUUjeQPeo2w6VL0exCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4
ZTNjYTgwHhcNMjYwMzI2MDEwMTI5WhcNMjYwMzI3MDEwMTI5WjAzMTEwLwYDVQQD
Eyg3ZTAwMjNkNmY5MmZjZmQzNzkwYTdjNGU1NzEwZDdjYTIzYTRhOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq853/VF9e6i5hmV+cG0g6DX8srbL
dV40PAOgQdw4OeCWRDRv1shKT6YuUHiPN+DsU3h3CftuIlkw4EksBvlus2YdZ5yL
eFoPtOensP5womlWBs/EDxBO0HlHP6DJcKk7jW2dhghY9iaEV7dMNP88lT7pKz0p
HTP8kCdY1T+KA1jxlG2Qm/ZDnU6x2uo68tQKlhp40G40XP7r8K5BkYH0wGuwYXLe
YHZppYWTwnXc+q8uoUQRfShQGX4j/mPM2EUKoozlMOgp28DH0p/xNwg0CND6liKr
9+zoFRyWSqGc9Ek4BJXW5nhijxPIIfsYMZPsKJR/yoIF4Ns9Dh22RY3MhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4AI9b5L8/TeQp8TlcQ18ojpKmSMB8GA1UdIwQY
MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt
NTNjZjI2YjBhNzI0LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0
LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCECOQwX
jCASe2/vb2rnG/p7JojknEm4+25Bws9gFK1SMdBL29XBZlirE4r+NGuEpOefftq8
1nmyj1wrzMwOJCVhqJSyd0QlLzmw5oyqmws6x9qHbQ6sZ+Yx3+moAq6Fg+TmzYKP
l0KU/mN5OloZTDuUuR/yYuT5oz3eqz9Wi4+m249rHCtpnGWOuxPP7I7yoE66BUi8
MtQ3WOPT1XSeqSBCTUhZDLbJVsOytRfCW59WOoyyQflxHrvgI93+ytkjKxxR1DS2
BjwOiJ/ZKTIYLf38TI7U03u4zZa9PmNjA/HY2F2as9p1Ixwc/ZohyEnr+5S9jLtn
jt1naPa+Sviy3w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:49 2026 by rpki-client