Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: HRp0VvRvMGhL/lwax2PxShUTbk9BS4GtD3gEzVeYnwA=
Subject key identifier: F6:CD:5A:BF:28:5C:85:E9:45:09:3E:4F:86:15:F1:46:A9:5F:FE:5B
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 019D270485AC0FA09816A7864573BECE6E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0DE1
Signing time: Wed 25 Mar 2026 22:01:40 +0000
Manifest this update: Wed 25 Mar 2026 22:01:40 +0000
Manifest next update: Thu 26 Mar 2026 22:01:40 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: gdY2iaP7r3v/daICTXEdovrN8PyZWuGdzH7+G3NF2SI=)
2: _bZKuF7AFVv9FOPtEDmaIyaLkgc.roa (hash: /OjfGerjj4MNTsCbNROwrp1Es3nNekhRr//F8a0HSXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:85:ac:0f:a0:98:16:a7:86:45:73:be:ce:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Mar 25 22:01:40 2026 GMT
Not After : Mar 26 22:01:40 2026 GMT
Subject: CN=f6cd5abf285c85e945093e4f8615f146a95ffe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:52:dc:69:c9:9b:90:32:3c:91:b5:f6:fb:
e0:2d:7a:6f:9b:28:4a:c6:c9:a7:be:48:49:4c:47:
bd:b6:9b:7f:43:a7:ba:49:a8:eb:c6:00:52:b6:8d:
5e:66:0b:d0:f3:91:10:4a:97:f2:8b:7f:22:9c:e0:
45:b7:9e:ea:4a:2e:de:83:49:00:54:00:a0:b5:75:
ae:3f:21:76:73:20:a3:68:fd:be:ea:e1:69:db:7d:
b0:5e:46:6d:00:fa:89:7c:c0:44:15:e5:3c:ed:1b:
93:c9:94:f9:c2:13:ce:d4:89:6a:c5:d2:0b:ef:cf:
be:a2:39:d6:01:84:0f:49:82:bc:73:de:0e:42:5f:
7e:ae:46:f4:5b:31:f8:fd:b5:e2:28:85:c1:37:fd:
40:d6:9b:95:e1:08:76:1f:f3:9a:ef:02:5a:c0:49:
12:59:0e:4d:ae:62:22:a8:09:73:9b:d4:c6:04:1e:
68:41:c3:36:eb:f9:00:2e:66:8c:ce:7d:b7:99:03:
32:1a:66:5a:ad:67:06:c9:ec:92:b1:16:a4:c5:a2:
13:b1:83:52:57:3d:6a:94:dc:36:2a:db:8c:ad:4a:
8f:bf:9b:b7:57:c3:7c:cc:4a:25:cd:5d:f2:31:89:
da:27:4e:79:7b:18:0c:fb:43:81:1a:76:40:86:c6:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:5A:BF:28:5C:85:E9:45:09:3E:4F:86:15:F1:46:A9:5F:FE:5B
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:18:bf:8b:91:ec:a2:0b:9d:0a:ef:03:ca:17:b3:f5:7d:0c:
66:db:e8:fc:9b:9a:8b:7c:28:06:07:d6:80:f9:62:8d:c0:8e:
8c:23:d6:8c:9e:ff:d0:84:a4:7c:55:e9:43:c1:d0:82:8a:cb:
43:94:3d:a3:37:67:18:d7:8f:75:cf:fb:1a:f5:ae:7f:19:ed:
1c:ed:b4:d3:00:51:b9:fd:20:82:c1:16:5b:4a:fc:03:25:54:
bf:d1:d8:23:18:63:1d:2c:0d:21:ea:be:4c:7f:9d:25:53:2e:
61:3a:67:50:1f:1d:21:cb:4e:48:fa:e0:48:93:32:2a:5c:6e:
1e:e7:2a:eb:8c:9c:75:91:26:05:c8:61:5a:3e:db:a3:4a:27:
21:ec:fd:8d:0d:19:7d:25:92:67:db:6e:64:20:e3:cb:a0:7b:
cc:ef:3b:5a:65:b2:aa:b8:8b:5e:9f:ed:22:fa:8d:62:46:61:
18:ce:4d:5a:bb:d5:fe:61:d2:14:0e:8d:ce:53:6d:07:ee:05:
b7:96:6f:c9:8f:01:c2:8b:f4:48:2a:87:0a:02:43:2a:0b:6b:
32:7d:aa:d6:4b:80:1b:d7:98:5b:61:ea:2b:bb:73:3e:f8:af:
08:5f:b5:ad:8f:16:8e:2a:c8:04:79:29:3e:ec:75:3f:5b:d2:
3a:8c:f1:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBIWsD6CYFqeGRXO+zm5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWUzZDZmNjlmYTJiNDI1MTc5MTFlYWU1Njk1NzMwMzA3
OTkxNTYwHhcNMjYwMzI1MjIwMTQwWhcNMjYwMzI2MjIwMTQwWjAzMTEwLwYDVQQD
EyhmNmNkNWFiZjI4NWM4NWU5NDUwOTNlNGY4NjE1ZjE0NmE5NWZmZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymRS3GnJm5AyPJG19vvgLXpvmyhK
xsmnvkhJTEe9tpt/Q6e6SajrxgBSto1eZgvQ85EQSpfyi38inOBFt57qSi7eg0kA
VACgtXWuPyF2cyCjaP2+6uFp232wXkZtAPqJfMBEFeU87RuTyZT5whPO1IlqxdIL
78++ojnWAYQPSYK8c94OQl9+rkb0WzH4/bXiKIXBN/1A1puV4Qh2H/Oa7wJawEkS
WQ5NrmIiqAlzm9TGBB5oQcM26/kALmaMzn23mQMyGmZarWcGyeySsRakxaITsYNS
Vz1qlNw2KtuMrUqPv5u3V8N8zEolzV3yMYnaJ055exgM+0OBGnZAhsbKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbNWr8oXIXpRQk+T4YV8UapX/5bMB8GA1UdIwQY
MBaAFO9ePW9p+itCUXkR6uVpVzAweZFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQt
ZmNmZjllODQ3Y2EyLzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yNzJkNTAtN2JiMy00NGIwLTgyNTQtZmNmZjllODQ3Y2Ey
LzEvNzE0OWIybjZLMEpSZVJIcTVXbFhNREI1a1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERi/i5Hs
ogudCu8Dyhez9X0MZtvo/Juai3woBgfWgPlijcCOjCPWjJ7/0ISkfFXpQ8HQgorL
Q5Q9ozdnGNePdc/7GvWufxntHO200wBRuf0ggsEWW0r8AyVUv9HYIxhjHSwNIeq+
TH+dJVMuYTpnUB8dIctOSPrgSJMyKlxuHucq64ycdZEmBchhWj7bo0onIez9jQ0Z
fSWSZ9tuZCDjy6B7zO87WmWyqriLXp/tIvqNYkZhGM5NWrvV/mHSFA6NzlNtB+4F
t5ZvyY8Bwov0SCqHCgJDKgtrMn2q1kuAG9eYW2HqK7tzPvivCF+1rY8WjirIBHkp
Pux1P1vSOozxnQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:02 2026 by rpki-client