Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: XwNXtUapgQJI7R4COLnmpcoIPxvSRtDUTX95Y+Rs2QU=
Subject key identifier: 58:A7:25:CD:0C:D0:BE:82:2B:A5:53:0F:13:6B:FD:F9:CF:F6:C3:8A
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019D26CD9C5AC2E3CEC2E20341A104F65502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0FF6
Signing time: Wed 25 Mar 2026 21:01:41 +0000
Manifest this update: Wed 25 Mar 2026 21:01:41 +0000
Manifest next update: Thu 26 Mar 2026 21:01:41 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: Wblk6F5iyUV84Xe204Usoy2wLrYu3nn1nxKIIpMy4pY=)
2: seylKk68qXKxhoBzXl7E0-tTkU0.roa (hash: 14ms6tysm87Rxm8W+2zvydPUm5MTtyrDqlszeDC47Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:9c:5a:c2:e3:ce:c2:e2:03:41:a1:04:f6:55:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Mar 25 21:01:41 2026 GMT
Not After : Mar 26 21:01:41 2026 GMT
Subject: CN=58a725cd0cd0be822ba5530f136bfdf9cff6c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:27:af:6c:09:23:07:f7:73:46:65:36:3c:
86:d7:6b:58:62:d9:fa:06:d0:36:31:74:2c:8e:69:
1e:cd:90:81:26:a4:2e:58:a4:1c:a7:3c:75:d8:88:
05:54:c9:22:91:65:d8:14:32:5e:3b:3a:c1:47:a5:
43:2d:1c:e0:15:b2:06:79:4a:d9:89:ff:d5:55:f1:
ea:77:be:b3:88:a5:38:80:05:77:73:a4:f1:53:28:
9a:c9:df:92:95:4e:60:42:c6:15:14:94:6d:ef:5f:
80:21:4a:31:f8:77:b1:71:38:62:7e:e1:93:24:60:
a7:4a:f2:84:d3:5d:67:d0:c4:6b:4a:30:14:04:4e:
d9:5b:31:19:22:8a:38:47:f1:31:58:cf:c9:d5:1d:
08:61:e5:98:2f:7b:d7:9e:89:c6:a6:e7:25:af:fd:
98:65:b8:19:bb:34:73:e1:60:e7:2b:e0:6c:57:13:
c4:0a:b7:46:94:b4:b4:46:a4:de:ec:53:da:18:ed:
56:6d:6d:28:7b:0c:dd:cd:28:b7:64:ac:0f:b3:35:
82:67:1b:e3:d8:82:4d:a1:8d:b8:37:68:ef:aa:b8:
2e:8e:ee:8b:73:9f:74:1e:d6:c7:4c:d3:d8:91:5e:
ca:0b:d2:4a:b3:81:c7:81:ee:83:a2:e6:09:6f:45:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A7:25:CD:0C:D0:BE:82:2B:A5:53:0F:13:6B:FD:F9:CF:F6:C3:8A
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f0:50:f7:a0:fd:b7:09:66:cf:ba:e5:45:af:8f:e4:a6:2b:
23:45:74:42:52:4f:c3:d3:ab:0e:0f:18:a4:e8:b4:bb:2d:67:
32:92:01:91:96:6f:05:29:ab:1c:b0:cb:a4:fb:83:6c:d5:fa:
8f:d5:53:0a:71:cf:52:f3:4c:a3:8f:d9:66:3c:77:3f:42:76:
29:fa:86:6e:9f:fe:c8:e4:06:2b:a7:3e:f9:a5:13:b3:aa:78:
5d:96:4a:6a:4d:6e:d0:dc:b1:c5:5b:c4:22:3e:54:0d:07:6c:
5a:c6:81:8d:d4:7f:51:23:f7:20:72:26:93:0d:2f:ec:7d:f2:
9f:a4:c0:5f:e7:c9:eb:96:9c:d8:14:16:e4:11:4b:38:c4:72:
d2:c9:d5:8a:d8:b4:0c:03:3d:19:4e:b7:a5:73:65:6f:e3:8a:
f3:f1:77:a8:b1:bc:b6:c6:14:f1:f9:a2:de:46:19:8d:d8:6b:
22:3e:33:21:3c:9a:a8:f2:e0:ec:39:8e:b0:86:48:74:b1:8d:
f0:0d:44:76:40:30:67:e9:3e:e8:74:56:a2:c9:23:2d:8b:d8:
29:bc:6b:fc:d1:04:e2:25:72:03:21:46:c0:2f:09:4f:83:62:
3e:96:0f:1c:ab:01:df:51:a0:39:28:69:68:0a:2f:e3:28:31:
bf:9e:6f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzZxawuPOwuIDQaEE9lUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzNkZjA0NmUxZTFkNWJmMDUyMmJiOTEzZjI5NTcyODdh
NDliNGIwHhcNMjYwMzI1MjEwMTQxWhcNMjYwMzI2MjEwMTQxWjAzMTEwLwYDVQQD
Eyg1OGE3MjVjZDBjZDBiZTgyMmJhNTUzMGYxMzZiZmRmOWNmZjZjMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04wnr2wJIwf3c0ZlNjyG12tYYtn6
BtA2MXQsjmkezZCBJqQuWKQcpzx12IgFVMkikWXYFDJeOzrBR6VDLRzgFbIGeUrZ
if/VVfHqd76ziKU4gAV3c6TxUyiayd+SlU5gQsYVFJRt71+AIUox+HexcThifuGT
JGCnSvKE011n0MRrSjAUBE7ZWzEZIoo4R/ExWM/J1R0IYeWYL3vXnonGpuclr/2Y
ZbgZuzRz4WDnK+BsVxPECrdGlLS0RqTe7FPaGO1WbW0oewzdzSi3ZKwPszWCZxvj
2IJNoY24N2jvqrguju6Lc590HtbHTNPYkV7KC9JKs4HHge6DouYJb0W6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFinJc0M0L6CK6VTDxNr/fnP9sOKMB8GA1UdIwQY
MBaAFO3D3wRuHh1b8FIruRPylXKHpJtLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQt
NTIzZTQ0NWY5MGRjLzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hZmQ2MTEtOWFjMC00MTRlLWJlNDQtNTIzZTQ0NWY5MGRj
LzEvN2NQZkJHNGVIVnZ3VWl1NUVfS1Zjb2VrbTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/BQ96D9
twlmz7rlRa+P5KYrI0V0QlJPw9OrDg8YpOi0uy1nMpIBkZZvBSmrHLDLpPuDbNX6
j9VTCnHPUvNMo4/ZZjx3P0J2KfqGbp/+yOQGK6c++aUTs6p4XZZKak1u0NyxxVvE
Ij5UDQdsWsaBjdR/USP3IHImkw0v7H3yn6TAX+fJ65ac2BQW5BFLOMRy0snViti0
DAM9GU63pXNlb+OK8/F3qLG8tsYU8fmi3kYZjdhrIj4zITyaqPLg7DmOsIZIdLGN
8A1EdkAwZ+k+6HRWoskjLYvYKbxr/NEE4iVyAyFGwC8JT4NiPpYPHKsB31GgOShp
aAov4ygxv55vlw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:55 2026 by rpki-client