Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: DvY7ZHkxDJ/X2qJ6f1Q9qAsatfhN9kBfnh2Yxfx95mo=
Subject key identifier: C2:06:EC:97:4C:8A:E8:F8:2E:C1:F5:E6:FF:56:32:6C:E2:78:5E:53
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019D27A928D07C48AFD1252AFB11B5E0D752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 09C5
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: dJTpLu2gef8LK9joJ+4xGISoWIp77V8N6gSrQgataRs=)
2: UlZluMg72w3OGQ7yVXSws-uTL0A.roa (hash: ZbBL16EPSfeFJDsY/7W353hLaYPwOpiK4otGlBdRF9Q=)
3: r6bLmGYRXJA6GUfCZnH4ebCbXYU.roa (hash: Q+Z0jJyseu+MqQA03xeTfakfDGrq+7+0HE8bf99rEXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:28:d0:7c:48:af:d1:25:2a:fb:11:b5:e0:d7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=c206ec974c8ae8f82ec1f5e6ff56326ce2785e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:bd:cc:96:f5:dc:51:82:f6:e0:d9:1f:32:
a2:bc:34:43:8d:63:80:81:64:a9:de:28:3b:0f:77:
e9:36:91:ce:c8:9d:dc:ac:d2:88:66:41:75:1b:15:
9e:9d:fe:d5:b5:62:f6:b2:fd:8a:05:01:7d:75:1b:
61:8b:17:1e:f9:e8:a0:96:3d:ca:ee:16:26:a9:6e:
11:1f:f1:2d:3c:03:62:b4:d0:dd:68:b9:48:12:21:
df:27:15:79:fd:e8:63:47:f9:ad:33:3b:97:e6:60:
b4:bc:b0:d9:70:71:b0:bd:b0:3c:61:63:b3:89:1b:
32:72:2c:cc:2d:de:c0:44:db:f8:4e:62:61:71:3a:
2e:95:0d:83:bf:d1:33:d5:5d:ea:00:e5:b0:9e:88:
04:6d:82:a9:fc:a0:ae:0c:3c:d5:c6:3f:3c:f0:24:
57:0a:59:6f:9c:b6:13:48:9d:6c:b9:7d:bf:c5:f7:
ee:e1:61:c4:c5:8e:17:3a:84:1c:39:cc:9e:0a:9e:
9e:0e:70:8e:19:2e:a2:e9:f7:62:8b:f6:83:35:45:
5c:53:21:65:ed:7a:18:51:94:83:9c:50:a8:55:14:
fe:de:6a:ed:96:48:6d:5c:49:ff:ac:13:45:f9:55:
58:03:dd:f8:79:6a:2a:5a:56:95:5a:31:89:1a:41:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:EC:97:4C:8A:E8:F8:2E:C1:F5:E6:FF:56:32:6C:E2:78:5E:53
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:97:68:60:29:b2:43:50:cb:86:63:cd:7d:4f:bf:6e:79:00:
f7:08:c9:1c:08:27:79:a5:26:19:b6:31:1f:95:0e:b8:79:6e:
ff:06:11:23:a3:4a:5c:14:2a:03:d3:35:7d:f8:9b:3d:3a:c1:
7a:0a:d2:41:06:97:5e:f5:07:b1:4d:28:5f:c1:25:31:ad:39:
d8:dd:3f:53:d1:d5:da:a1:ef:e5:7e:1e:b6:09:13:78:b6:e4:
0f:0f:da:c6:67:4d:1f:fd:36:ba:98:91:f3:55:e2:81:04:4b:
8f:84:4c:f5:3a:f3:12:74:0d:bf:3d:cc:d4:de:5c:58:53:96:
d3:0e:03:77:b8:12:5b:1b:76:ba:04:d8:06:b1:75:42:66:9f:
a8:f4:5b:ff:8f:31:b7:1b:46:82:05:6b:12:3d:85:4e:f6:0f:
f1:32:b9:78:3d:f3:3e:76:4c:36:d4:95:06:32:2e:63:c2:2c:
7a:88:a7:63:08:0b:2a:96:91:93:c6:a6:a3:e3:cc:c7:8c:7c:
7e:cc:ef:3c:12:90:e3:1c:e8:4b:1a:96:6d:c2:4c:d2:c6:26:
f2:80:ba:46:2e:08:08:f2:4d:05:34:43:50:22:b0:c4:74:a9:
f5:b6:7c:dd:70:58:bd:4b:25:17:cd:f4:18:3c:23:9c:16:f7:
12:69:3b:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSjQfEiv0SUq+xG14NdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMjhmNTc3NDZhMDA1YWU3NWE4ZjVmOWU5MmY3ZDIyZDYx
YzhkMzQwHhcNMjYwMzI2MDEwMTMwWhcNMjYwMzI3MDEwMTMwWjAzMTEwLwYDVQQD
EyhjMjA2ZWM5NzRjOGFlOGY4MmVjMWY1ZTZmZjU2MzI2Y2UyNzg1ZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D29zJb13FGC9uDZHzKivDRDjWOA
gWSp3ig7D3fpNpHOyJ3crNKIZkF1GxWenf7VtWL2sv2KBQF9dRthixce+eiglj3K
7hYmqW4RH/EtPANitNDdaLlIEiHfJxV5/ehjR/mtMzuX5mC0vLDZcHGwvbA8YWOz
iRsycizMLd7ARNv4TmJhcToulQ2Dv9Ez1V3qAOWwnogEbYKp/KCuDDzVxj888CRX
CllvnLYTSJ1suX2/xffu4WHExY4XOoQcOcyeCp6eDnCOGS6i6fdii/aDNUVcUyFl
7XoYUZSDnFCoVRT+3mrtlkhtXEn/rBNF+VVYA934eWoqWlaVWjGJGkEmcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIG7JdMiuj4LsH15v9WMmzieF5TMB8GA1UdIwQY
MBaAFO0o9XdGoAWudaj1+ekvfSLWHI00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQt
YTdlYjM4ZDQ4Yzc4LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83NTMyMDgtYTVhNC00YjcxLThlNzQtYTdlYjM4ZDQ4Yzc4
LzEvN1NqMWQwYWdCYTUxcVBYNTZTOTlJdFljalRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpdoYCmy
Q1DLhmPNfU+/bnkA9wjJHAgneaUmGbYxH5UOuHlu/wYRI6NKXBQqA9M1ffibPTrB
egrSQQaXXvUHsU0oX8ElMa052N0/U9HV2qHv5X4etgkTeLbkDw/axmdNH/02upiR
81XigQRLj4RM9TrzEnQNvz3M1N5cWFOW0w4Dd7gSWxt2ugTYBrF1QmafqPRb/48x
txtGggVrEj2FTvYP8TK5eD3zPnZMNtSVBjIuY8IseoinYwgLKpaRk8amo+PMx4x8
fszvPBKQ4xzoSxqWbcJM0sYm8oC6Ri4ICPJNBTRDUCKwxHSp9bZ83XBYvUslF830
GDwjnBb3Emk7aQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:31 2026 by rpki-client