Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
File: 7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json)
Hash identifier: lAX4AnYlu6ydHlKdkNvYus1c6c1s2d+/nQ8BMZGWIf4=
Subject key identifier: EF:47:8B:C1:16:39:D0:1C:C0:57:DF:64:ED:54:06:86:78:27:9D:E3
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Certificate issuer: /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial: 019D28BB3CC07338CD606E37EC830080BCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
Manifest number: 0167
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: 0ZqH99V57Xuf54z1hwypjXXPfTk.roa (hash: a/D66uiFnK78JnobNYVCxo0xT6Yj6YVtDbbQ8ijoyQo=)
2: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: iWPXxOm80pbJhZo7CpakHg6u40zlDRAcXHTTiwe1MOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3c:c0:73:38:cd:60:6e:37:ec:83:00:80:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=ef478bc11639d01cc057df64ed54068678279de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:41:4f:e3:67:9a:c8:74:67:55:de:1e:b9:
3c:93:a2:67:44:03:ae:75:fc:ea:02:47:49:70:bf:
0a:a5:76:b5:67:b9:39:d2:a1:11:20:49:d4:44:af:
0d:4c:38:74:48:e5:bd:64:96:ff:6d:b2:ff:e0:f1:
f8:c5:3b:fb:6b:54:58:9b:b5:36:b4:c8:fb:ca:7c:
55:94:55:c7:e8:76:45:8d:64:cc:3d:fc:2f:3a:2d:
0e:a0:5c:d5:b2:dc:07:ba:3f:31:2e:3f:fc:ff:0b:
e7:5a:d9:1d:94:40:42:a7:cf:3a:6f:57:b4:f0:31:
d9:20:00:bf:30:82:55:34:b4:1c:36:2b:10:27:31:
b3:46:61:91:59:26:df:92:9e:a0:4c:7c:dc:c9:5c:
55:43:38:82:f5:68:aa:a6:66:35:e7:ff:32:8c:12:
a6:cf:28:f2:5f:94:e7:b0:e2:02:a2:05:f6:5a:0d:
06:2a:a9:3f:5d:25:d7:6a:cf:43:7e:ef:95:57:41:
ef:cd:80:62:e7:57:9b:df:0b:3a:26:2c:e4:aa:bc:
22:1f:4f:f3:c8:9c:a4:e6:1d:3d:f6:e8:93:61:34:
98:a8:5e:c0:a7:cd:93:c1:98:b5:44:5a:3b:91:bc:
04:3a:8c:a9:c1:d9:ef:4e:09:7f:62:1d:31:8b:7c:
31:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:8B:C1:16:39:D0:1C:C0:57:DF:64:ED:54:06:86:78:27:9D:E3
X509v3 Authority Key Identifier:
keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b3:33:56:28:03:74:50:31:ed:27:f1:89:c1:81:77:7c:c8:
d6:1c:4e:26:ea:5e:25:1b:3e:07:e3:8c:70:03:2f:ad:35:aa:
87:4a:7b:dd:fa:1f:b4:0c:e6:a8:0a:7b:fa:08:be:29:4b:c0:
8c:7e:20:31:58:28:c8:8b:02:00:b0:6e:c6:f2:ca:59:d4:d6:
0f:4e:c4:e5:4d:cb:a5:00:ec:3b:b8:91:dc:e9:30:5a:4d:e1:
bd:be:95:f5:f5:7f:e7:90:50:58:f0:89:65:81:03:48:9a:c1:
05:ec:69:02:72:29:59:5f:50:07:a0:f3:74:0a:00:72:43:3f:
76:80:4e:c4:0d:0d:cd:73:0a:74:a5:25:e7:40:1e:bb:5d:bc:
fe:29:8d:72:b0:5a:55:d5:13:5e:09:8b:7c:33:bb:cf:27:18:
28:a4:b1:1c:24:cd:e6:95:8b:92:df:06:7e:74:db:e1:6b:60:
ab:67:c1:b6:23:e9:9e:e1:09:f4:8b:c2:04:c2:a9:be:c9:69:
cb:bf:4e:07:6e:87:bb:2d:94:20:f3:78:8a:f9:d6:36:cc:85:
f6:76:66:39:91:f7:63:31:f9:c2:fb:41:ae:95:e0:d3:0a:17:
b7:0a:1f:a3:84:cc:23:de:c6:57:30:d6:33:00:7e:38:d2:30:
65:41:f0:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouzzAczjNYG437IMAgLyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZmZmNDBkOGJiNGEyNDg3MmUwMWJhN2Y0MmUzYWU2M2Vl
MDg1ZjUwHhcNMjYwMzI2MDYwMDUyWhcNMjYwMzI3MDYwMDUyWjAzMTEwLwYDVQQD
EyhlZjQ3OGJjMTE2MzlkMDFjYzA1N2RmNjRlZDU0MDY4Njc4Mjc5ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3hBT+Nnmsh0Z1XeHrk8k6JnRAOu
dfzqAkdJcL8KpXa1Z7k50qERIEnURK8NTDh0SOW9ZJb/bbL/4PH4xTv7a1RYm7U2
tMj7ynxVlFXH6HZFjWTMPfwvOi0OoFzVstwHuj8xLj/8/wvnWtkdlEBCp886b1e0
8DHZIAC/MIJVNLQcNisQJzGzRmGRWSbfkp6gTHzcyVxVQziC9WiqpmY15/8yjBKm
zyjyX5TnsOICogX2Wg0GKqk/XSXXas9Dfu+VV0HvzYBi51eb3ws6JizkqrwiH0/z
yJyk5h099uiTYTSYqF7Ap82TwZi1RFo7kbwEOoypwdnvTgl/Yh0xi3wxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9Hi8EWOdAcwFffZO1UBoZ4J53jMB8GA1UdIwQY
MBaAFO7/9A2LtKJIcuAbp/QuOuY+4IX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQt
MTQxZDMzYzc0M2RmLzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQtMTQxZDMzYzc0M2Rm
LzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrMzVigD
dFAx7SfxicGBd3zI1hxOJupeJRs+B+OMcAMvrTWqh0p73foftAzmqAp7+gi+KUvA
jH4gMVgoyIsCALBuxvLKWdTWD07E5U3LpQDsO7iR3OkwWk3hvb6V9fV/55BQWPCJ
ZYEDSJrBBexpAnIpWV9QB6DzdAoAckM/doBOxA0NzXMKdKUl50Aeu128/imNcrBa
VdUTXgmLfDO7zycYKKSxHCTN5pWLkt8GfnTb4Wtgq2fBtiPpnuEJ9IvCBMKpvslp
y79OB26Huy2UIPN4ivnWNsyF9nZmOZH3YzH5wvtBrpXg0woXtwofo4TMI97GVzDW
MwB+ONIwZUHwqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:23 2026 by rpki-client