Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: 4IL7VwlCZ9EclG/fn6CmdLa20ub0fwkY/rVY58Q7pjY=
Subject key identifier: C5:0F:65:0C:E4:ED:46:73:3B:2F:49:31:99:B5:83:4F:AA:FB:2D:9E
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 019D2A72D32033616F01C6E9214D3FAED1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 0F70
Signing time: Thu 26 Mar 2026 14:01:01 +0000
Manifest this update: Thu 26 Mar 2026 14:01:01 +0000
Manifest next update: Fri 27 Mar 2026 14:01:01 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: 4/SzewEwalr74oxpa5FwCBXYZU9dXqmb7kSPY10ecKo=)
2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d3:20:33:61:6f:01:c6:e9:21:4d:3f:ae:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Mar 26 14:01:01 2026 GMT
Not After : Mar 27 14:01:01 2026 GMT
Subject: CN=c50f650ce4ed46733b2f493199b5834faafb2d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:41:3d:85:75:50:8d:8c:c7:5d:58:78:a9:
e2:a9:39:df:8a:2b:c7:bf:5c:27:0e:c6:32:c3:23:
4b:0b:c7:16:c2:89:2c:f6:03:94:70:e2:c6:57:e9:
2c:b2:95:ca:99:92:bd:09:22:92:02:6f:a1:7a:38:
fb:3f:c2:c7:8d:be:78:54:93:10:39:7e:f1:6b:7f:
69:53:62:27:cd:73:e2:54:7d:ff:d5:6a:fc:af:92:
e9:b5:f4:6b:c0:ec:f2:fc:8b:cc:24:b6:02:f8:8e:
1a:bd:2c:97:e1:3e:25:57:f7:ac:c5:99:f2:0c:b3:
00:71:f3:21:02:4a:78:ab:7d:dc:58:76:72:6c:6f:
3b:7d:48:af:50:63:b3:e0:6e:25:34:67:3e:30:9b:
3b:53:18:1a:73:ee:e8:d3:fc:ca:12:aa:43:27:66:
b1:52:e7:d9:95:82:16:b8:01:69:d6:1e:c1:14:7e:
09:a9:c4:17:63:85:09:3e:44:f1:30:40:eb:04:7b:
59:45:31:d2:fa:08:0c:b9:93:79:f7:45:7f:c4:2f:
8c:ab:5d:ae:a7:05:12:2a:8a:fd:60:24:71:8e:d0:
30:7e:d3:f6:5f:c6:54:9a:85:4c:d8:9c:e9:a4:f4:
76:91:e3:16:ae:9a:8b:ab:a8:76:13:bc:da:45:e2:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0F:65:0C:E4:ED:46:73:3B:2F:49:31:99:B5:83:4F:AA:FB:2D:9E
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f3:d2:c0:c8:3e:4e:d2:f5:5a:89:6b:56:ea:09:92:f7:7e:
ab:79:f0:e8:25:75:05:98:f5:32:3d:f9:79:78:19:e5:e3:96:
09:48:49:84:89:a6:e4:6d:6f:99:7a:02:7a:8c:68:7d:cb:5f:
de:b0:87:1f:bd:ed:cb:d2:a1:c5:6b:49:3f:d0:62:c5:46:15:
01:95:40:9c:46:2e:44:e3:3e:d3:c3:78:fe:58:73:8e:79:b9:
02:b3:21:08:4e:75:3d:b8:0f:fa:96:e0:8d:33:57:4b:93:bd:
bd:1e:11:45:00:30:9a:08:88:60:09:16:f8:82:ee:a9:65:a2:
bd:ce:8c:b1:0a:ff:f1:dd:f4:e1:ec:7a:8c:6e:94:29:58:a6:
84:b2:25:7d:9c:11:16:9b:f7:64:cd:4c:af:60:58:63:a0:ef:
a8:84:bd:2f:84:ab:07:2b:8c:ca:f3:a0:68:2d:f7:bf:07:99:
31:eb:a6:14:d6:ea:40:c6:fc:47:a7:12:5f:0f:08:28:21:51:
04:eb:ae:07:ac:2e:4d:a0:de:93:11:dd:c2:dc:6d:7d:34:b3:
9c:d1:42:f0:b2:70:40:82:df:96:6a:3d:93:27:19:45:2b:ff:
af:b6:11:d8:47:eb:0d:ed:28:da:18:3f:a0:2d:ca:1a:6f:05:
15:d9:16:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qctMgM2FvAcbpIU0/rtGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmY1YjUxOTk5NjM3YzgwYmY5M2M4YTkwM2QxNmMzYWVj
MjUzNDEwHhcNMjYwMzI2MTQwMTAxWhcNMjYwMzI3MTQwMTAxWjAzMTEwLwYDVQQD
EyhjNTBmNjUwY2U0ZWQ0NjczM2IyZjQ5MzE5OWI1ODM0ZmFhZmIyZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKBBPYV1UI2Mx11YeKniqTnfiivH
v1wnDsYywyNLC8cWwoks9gOUcOLGV+ksspXKmZK9CSKSAm+hejj7P8LHjb54VJMQ
OX7xa39pU2InzXPiVH3/1Wr8r5LptfRrwOzy/IvMJLYC+I4avSyX4T4lV/esxZny
DLMAcfMhAkp4q33cWHZybG87fUivUGOz4G4lNGc+MJs7Uxgac+7o0/zKEqpDJ2ax
UufZlYIWuAFp1h7BFH4JqcQXY4UJPkTxMEDrBHtZRTHS+ggMuZN590V/xC+Mq12u
pwUSKor9YCRxjtAwftP2X8ZUmoVM2JzppPR2keMWrpqLq6h2E7zaReJ1ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUPZQzk7UZzOy9JMZm1g0+q+y2eMB8GA1UdIwQY
MBaAFO6/W1GZljfIC/k8ipA9FsOuwlNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAt
NTQyNGRjNjNlMmFjLzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAtNTQyNGRjNjNlMmFj
LzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvPSwMg+
TtL1WolrVuoJkvd+q3nw6CV1BZj1Mj35eXgZ5eOWCUhJhImm5G1vmXoCeoxofctf
3rCHH73ty9KhxWtJP9BixUYVAZVAnEYuROM+08N4/lhzjnm5ArMhCE51PbgP+pbg
jTNXS5O9vR4RRQAwmgiIYAkW+ILuqWWivc6MsQr/8d304ex6jG6UKVimhLIlfZwR
Fpv3ZM1Mr2BYY6DvqIS9L4SrByuMyvOgaC33vweZMeumFNbqQMb8R6cSXw8IKCFR
BOuuB6wuTaDekxHdwtxtfTSznNFC8LJwQILflmo9kycZRSv/r7YR2EfrDe0o2hg/
oC3KGm8FFdkWhw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:32 2026 by rpki-client