Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File: 7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier: 3MBqAd4oASsDiC3OhFyB16nVlhSX55me2ij8bTPOu1M=
Subject key identifier: 72:DD:F0:14:AA:C5:7B:F0:4E:E7:F9:46:DE:12:9D:C9:F4:E0:C8:DC
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer: /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial: 019D284E4AF7A9D48317A39E4CC578EF0FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number: 07E5
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: NuHH4rZDA8L/oGEWevFKvB5y4W4UB9iLZacpIobz8lM=)
2: ZKITQWeRmOOpWe3j9phAgbWo098.roa (hash: uQME1knZ+/RpjbN1SdA7vXHO6Nrx1GYvYRwaBz+mqFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4a:f7:a9:d4:83:17:a3:9e:4c:c5:78:ef:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=72ddf014aac57bf04ee7f946de129dc9f4e0c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:bc:de:c2:b8:8a:9a:98:76:ae:8d:5c:1b:
0b:4e:19:84:7c:60:66:98:f1:0f:09:3b:c9:b3:d5:
54:43:da:ee:40:54:49:98:38:03:7b:3f:31:8c:80:
28:70:af:6f:cb:7f:db:c5:df:64:98:be:92:0e:ba:
9c:a0:41:8e:47:f3:8f:6c:f9:b3:19:3b:7b:6b:ae:
cd:8d:06:71:91:b1:83:96:12:02:af:e8:73:d2:e0:
54:10:20:04:29:84:01:0f:1a:40:8f:08:55:6d:22:
8a:c7:f1:c6:b2:70:7a:ac:a8:5d:19:07:5c:ee:ec:
ed:7b:30:41:6e:c9:f0:44:24:4d:7e:94:e7:d4:35:
60:8a:16:3a:ec:d9:04:4b:3f:cd:85:71:a8:38:bf:
a2:bc:bc:06:2a:bd:43:08:ba:5c:45:bb:90:92:fc:
eb:fa:a0:53:b7:9a:67:65:57:f1:aa:20:da:e1:75:
85:ca:91:6a:c3:ed:79:88:d6:29:68:f1:46:47:78:
21:3d:0a:68:96:8c:74:b6:8c:61:57:19:31:ed:ae:
67:ad:f9:60:2f:e2:7d:5a:a9:5b:33:e7:6d:bd:0f:
d0:0f:85:a9:3c:ec:c7:ce:88:81:bd:07:c8:4b:dd:
2b:ff:b5:3a:62:64:fc:82:22:c6:9f:2d:14:07:53:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:F0:14:AA:C5:7B:F0:4E:E7:F9:46:DE:12:9D:C9:F4:E0:C8:DC
X509v3 Authority Key Identifier:
keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:e1:c5:c2:ef:e4:2f:66:82:8e:15:00:c9:57:4f:c5:bb:
67:c4:35:4c:b4:22:ce:87:11:e8:4a:41:a4:ef:3b:b9:48:bf:
eb:f9:d7:2f:86:11:27:13:a5:d9:2d:6b:5e:4f:08:e2:a5:62:
01:ae:06:3d:bf:82:e0:d9:34:6e:f2:28:7f:61:9d:18:9c:55:
df:0b:c1:2a:09:44:fd:08:d8:ca:4d:20:4f:f2:ab:20:24:cc:
0c:a9:3d:32:3e:0b:87:56:89:f7:a4:a0:47:1b:e1:9b:80:a1:
9b:8b:65:19:ea:ef:9a:7c:74:64:46:55:a5:4c:d6:9d:b9:ee:
22:28:4d:b0:2f:da:27:e6:b9:28:3e:2c:e9:1c:e1:55:6e:91:
80:96:0a:92:1c:75:9a:57:a0:e9:16:07:24:91:5d:4a:ad:b3:
11:a7:79:48:d4:d0:86:2c:09:94:e4:0e:66:8d:4c:e8:20:83:
48:be:ca:ca:c4:3f:cf:54:72:ed:20:31:7d:ff:98:31:d0:d5:
b1:5e:0a:4f:d1:17:ec:20:38:72:97:20:01:f0:2f:b7:ba:2e:
4b:4f:a0:47:3a:bb:85:30:e5:15:13:b8:65:0f:6e:54:b0:d5:
d4:0d:26:59:64:bc:27:0e:e0:f5:16:be:48:2a:eb:f5:7e:97:
ff:5d:b5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTkr3qdSDF6OeTMV47w+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDI5NDQ3OTQ1OTE4MjQ1OWMxNWQ4Y2EwMTBhOGE3ZjQ3
ZjgwYzgwHhcNMjYwMzI2MDQwMTUyWhcNMjYwMzI3MDQwMTUyWjAzMTEwLwYDVQQD
Eyg3MmRkZjAxNGFhYzU3YmYwNGVlN2Y5NDZkZTEyOWRjOWY0ZTBjOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLu83sK4ipqYdq6NXBsLThmEfGBm
mPEPCTvJs9VUQ9ruQFRJmDgDez8xjIAocK9vy3/bxd9kmL6SDrqcoEGOR/OPbPmz
GTt7a67NjQZxkbGDlhICr+hz0uBUECAEKYQBDxpAjwhVbSKKx/HGsnB6rKhdGQdc
7uztezBBbsnwRCRNfpTn1DVgihY67NkESz/NhXGoOL+ivLwGKr1DCLpcRbuQkvzr
+qBTt5pnZVfxqiDa4XWFypFqw+15iNYpaPFGR3ghPQpolox0toxhVxkx7a5nrflg
L+J9WqlbM+dtvQ/QD4WpPOzHzoiBvQfIS90r/7U6YmT8giLGny0UB1OaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLd8BSqxXvwTuf5Rt4Sncn04MjcMB8GA1UdIwQY
MBaAFO8ClEeUWRgkWcFdjKAQqKf0f4DIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAt
MDQ3YmEwZTYyZGU0LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAtMDQ3YmEwZTYyZGU0
LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0bhxcLv
5C9mgo4VAMlXT8W7Z8Q1TLQizocR6EpBpO87uUi/6/nXL4YRJxOl2S1rXk8I4qVi
Aa4GPb+C4Nk0bvIof2GdGJxV3wvBKglE/QjYyk0gT/KrICTMDKk9Mj4Lh1aJ96Sg
Rxvhm4Chm4tlGervmnx0ZEZVpUzWnbnuIihNsC/aJ+a5KD4s6RzhVW6RgJYKkhx1
mleg6RYHJJFdSq2zEad5SNTQhiwJlOQOZo1M6CCDSL7KysQ/z1Ry7SAxff+YMdDV
sV4KT9EX7CA4cpcgAfAvt7ouS0+gRzq7hTDlFRO4ZQ9uVLDV1A0mWWS8Jw7g9Ra+
SCrr9X6X/121Qw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:59 2026 by rpki-client