Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier: 4q3YQXJi0pO00r+HNEs9EJgjSYWAShUZunE/KaNZ1e4=
Subject key identifier: 0D:8E:F9:43:4B:59:1D:A9:40:14:5E:54:A3:D3:BD:FA:A7:10:F6:3B
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer: /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial: 019D27042A5DA70DA5FC405BF69512B6E21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number: 08E3
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: +utjbrwMeFAJMplNv9aKkMTuzb6w98ywnWykW1z87jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2a:5d:a7:0d:a5:fc:40:5b:f6:95:12:b6:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=0d8ef9434b591da940145e54a3d3bdfaa710f63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:1e:55:a5:29:ab:85:74:57:68:7e:a8:51:
9d:e5:4c:31:f1:a5:09:6d:66:6b:11:51:c6:95:a5:
f6:b4:aa:38:97:c5:1c:25:94:9a:f5:b8:77:5e:a6:
e3:29:aa:b2:58:39:ed:30:80:26:c9:20:36:05:ed:
85:54:32:de:2b:27:98:e3:b4:d1:82:35:7a:0b:0b:
f2:8c:9a:61:c2:f3:ce:ab:ab:9e:e1:79:26:04:ae:
9a:8f:d6:79:44:bd:8f:37:ee:74:b3:c5:16:22:8e:
33:10:4d:f4:0f:52:a9:be:d0:50:49:82:24:7b:72:
8e:e1:ec:8e:1c:7c:f8:69:f5:b8:f2:d2:ca:89:9e:
20:6a:bf:8f:e6:a2:34:a8:58:25:a0:bb:29:ae:c9:
94:62:e5:33:50:b2:3a:8c:6f:b3:95:b0:84:47:f4:
8e:b4:d5:31:9e:fd:ff:e5:0f:07:a1:b7:88:28:f7:
51:7d:86:4a:05:55:e0:45:79:a1:49:2a:40:b4:ac:
19:cc:ae:ef:52:ce:1b:bc:44:11:3a:7c:82:28:ad:
17:e8:73:2b:0b:2b:f5:0d:6b:28:4a:97:b9:c9:1c:
7e:1d:ed:1e:c0:b0:0f:36:cb:84:62:e1:a3:45:40:
9f:c5:0c:e7:b4:ea:cc:12:c3:46:bd:c1:62:13:d6:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:F9:43:4B:59:1D:A9:40:14:5E:54:A3:D3:BD:FA:A7:10:F6:3B
X509v3 Authority Key Identifier:
keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:87:57:69:10:5f:7d:01:ac:6f:0e:48:3e:08:c5:73:90:0e:
5c:07:42:1a:0c:ce:31:f8:67:da:6d:37:7d:e4:24:4d:74:af:
ba:9d:22:58:9f:72:aa:fa:60:5d:2e:86:42:33:14:00:f3:08:
01:59:53:a6:f7:b9:b6:c2:ad:8d:0a:4e:dd:27:d4:d7:d9:76:
ff:44:07:71:8e:98:07:e9:0a:d0:24:72:5e:9a:3b:70:6c:0a:
b3:ff:41:90:3e:80:48:1e:17:29:73:10:df:bd:dc:cf:60:91:
8d:73:bb:0e:15:8e:e0:bc:64:1c:f1:52:ac:b2:a9:58:03:f9:
cf:29:54:29:c0:a0:c0:11:ac:c4:86:de:73:d0:23:a8:7b:8e:
ff:4c:fa:1e:a3:f6:17:41:42:cf:77:25:d3:1d:48:69:27:79:
e5:ae:66:31:01:fe:c7:71:14:ea:49:63:1f:e5:6e:87:c7:fe:
a8:47:6e:41:52:1b:58:d7:dc:11:65:41:3f:2c:7e:b4:bc:76:
a1:36:68:b0:f4:ea:53:d3:40:78:db:7b:18:8d:f3:d7:8e:35:
22:53:72:b8:93:58:0f:1d:2e:98:46:b2:9a:c9:16:5b:c1:e4:
53:ff:e3:7c:d5:ca:21:33:3a:e3:4f:4c:14:d0:04:11:ef:36:
19:b0:30:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCpdpw2l/EBb9pUStuIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWZhOWMyOTUwNmI0ZmNmMTcyOTIxMWE0ZmE3N2MxZjIx
MTQ2OGQwHhcNMjYwMzI1MjIwMTE3WhcNMjYwMzI2MjIwMTE3WjAzMTEwLwYDVQQD
EygwZDhlZjk0MzRiNTkxZGE5NDAxNDVlNTRhM2QzYmRmYWE3MTBmNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqgeVaUpq4V0V2h+qFGd5Uwx8aUJ
bWZrEVHGlaX2tKo4l8UcJZSa9bh3XqbjKaqyWDntMIAmySA2Be2FVDLeKyeY47TR
gjV6CwvyjJphwvPOq6ue4XkmBK6aj9Z5RL2PN+50s8UWIo4zEE30D1KpvtBQSYIk
e3KO4eyOHHz4afW48tLKiZ4gar+P5qI0qFgloLsprsmUYuUzULI6jG+zlbCER/SO
tNUxnv3/5Q8HobeIKPdRfYZKBVXgRXmhSSpAtKwZzK7vUs4bvEQROnyCKK0X6HMr
Cyv1DWsoSpe5yRx+He0ewLAPNsuEYuGjRUCfxQzntOrMEsNGvcFiE9bc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2O+UNLWR2pQBReVKPTvfqnEPY7MB8GA1UdIwQY
MBaAFO7vqcKVBrT88XKSEaT6d8HyEUaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQt
Y2YzNjA3M2QyZGIwLzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQtY2YzNjA3M2QyZGIw
LzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYdXaRBf
fQGsbw5IPgjFc5AOXAdCGgzOMfhn2m03feQkTXSvup0iWJ9yqvpgXS6GQjMUAPMI
AVlTpve5tsKtjQpO3SfU19l2/0QHcY6YB+kK0CRyXpo7cGwKs/9BkD6ASB4XKXMQ
373cz2CRjXO7DhWO4LxkHPFSrLKpWAP5zylUKcCgwBGsxIbec9AjqHuO/0z6HqP2
F0FCz3cl0x1IaSd55a5mMQH+x3EU6kljH+Vuh8f+qEduQVIbWNfcEWVBPyx+tLx2
oTZosPTqU9NAeNt7GI3z1441IlNyuJNYDx0umEaymskWW8HkU//jfNXKITM6409M
FNAEEe82GbAw+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:51 2026 by rpki-client