Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: AlFSRF2rHThrgrQ6GAQcZlUHT69Mu7+Bjz04fLQcY1k=
Subject key identifier: 34:F7:62:EC:0B:19:A6:29:CA:E1:F5:36:5D:A5:DA:E6:65:5D:6F:B4
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 019D2960ABF49DD2DB100E11CE666157F48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 17E9
Signing time: Thu 26 Mar 2026 09:01:34 +0000
Manifest this update: Thu 26 Mar 2026 09:01:34 +0000
Manifest next update: Fri 27 Mar 2026 09:01:34 +0000
Files and hashes: 1: Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa (hash: PLBVzKzfY6V8bQMUJREfJf+D4bMzTqr7tyLzjpGHOPk=)
2: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: a0kkjMEBrZqKGBLrsvn9q45UKWRz/LCGHq/QI+Vmc9U=)
3: dj2slW3vOttM2lqgWk6ocAGgDC0.roa (hash: +gmMzsdCL+TQ11aBaKus+EwBw7GGlK23QYqU5eoC/TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ab:f4:9d:d2:db:10:0e:11:ce:66:61:57:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Mar 26 09:01:34 2026 GMT
Not After : Mar 27 09:01:34 2026 GMT
Subject: CN=34f762ec0b19a629cae1f5365da5dae6655d6fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:b7:3d:1b:65:1a:7c:2f:59:b5:06:ac:af:
89:4e:65:20:43:77:3b:16:cf:bd:41:00:7b:c5:4f:
c2:73:f0:65:af:f9:64:2d:e8:35:f2:9e:d6:df:4e:
66:54:db:ed:a8:a2:72:25:a8:ab:76:b9:26:12:cc:
7c:c4:55:c2:c0:56:28:fc:ae:14:b6:15:ae:b9:9e:
ee:1a:d7:d7:d8:38:16:9f:ef:5f:e8:7e:04:2a:6d:
d8:41:93:44:8a:f5:ce:38:2d:6f:83:22:60:68:b3:
ea:5d:36:fc:f9:8c:fa:e5:d0:64:a7:1b:b6:b1:b5:
78:cc:e8:10:3a:2f:4f:f1:27:36:0f:5a:d4:07:b9:
34:4c:8a:12:16:9b:e2:06:87:bc:ec:f8:16:c3:13:
c1:87:b3:7c:28:94:4a:9f:d4:9d:58:19:8d:41:b2:
c5:e2:77:d9:48:8b:c7:5f:ff:9e:70:31:2f:51:90:
7f:f2:11:e0:a5:6c:73:48:c6:a4:80:7d:e2:4c:d9:
0e:c2:25:02:39:42:b3:02:db:e1:84:7e:0a:be:7e:
80:a6:d6:be:d2:7f:85:96:2d:76:da:54:3f:dd:3d:
02:2b:73:18:21:43:ba:71:4a:5d:8c:54:56:23:d2:
54:4e:54:e1:0b:fa:7b:b5:08:0c:0a:29:59:82:27:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:62:EC:0B:19:A6:29:CA:E1:F5:36:5D:A5:DA:E6:65:5D:6F:B4
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:5e:67:b1:e2:aa:3c:27:50:4b:36:10:f9:4a:c6:2d:d5:
99:7b:37:98:b1:fe:dc:c5:cb:dc:1f:15:95:37:0b:aa:c1:5d:
7d:1a:ea:66:11:96:8c:17:0c:7d:48:27:ca:2d:eb:a5:57:8b:
ae:48:1c:2a:f2:9a:24:2a:94:b0:08:f2:d1:75:2d:70:6c:97:
3c:dc:85:1c:de:0f:4b:f3:f2:25:57:be:ec:6e:f6:ab:69:26:
40:ba:a3:1e:f1:eb:04:ca:29:9f:04:c5:c8:81:81:a4:b4:66:
0d:15:55:7c:2a:7a:25:22:c5:19:0e:7c:79:6e:1f:aa:79:60:
dd:79:15:8c:a2:e1:c1:e0:b2:0e:d2:8a:76:37:fa:4a:ca:f3:
cc:55:03:50:73:e1:a2:65:6a:1d:93:0d:dd:ae:da:31:5f:92:
1d:d8:e5:8c:1d:9a:65:34:90:9a:9b:21:c1:b8:cd:a8:51:88:
05:d6:37:bd:9f:94:da:a7:5a:cf:a4:4f:bc:de:c3:0a:0d:2b:
fc:1e:01:87:ec:44:7b:f8:51:34:0d:79:34:d7:1b:1d:d8:a6:
da:36:40:92:54:f0:4b:71:88:09:a0:9e:57:0f:48:78:8c:47:
09:3f:7a:10:d8:68:0d:7f:21:43:3c:dc:a5:c2:0c:d4:a6:d1:
71:75:81:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYKv0ndLbEA4RzmZhV/SNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYmNhZTJiMjkwYzgwMWQ1N2QwOWQwMjVhOTM0OGUxNjcw
NmYxODIwHhcNMjYwMzI2MDkwMTM0WhcNMjYwMzI3MDkwMTM0WjAzMTEwLwYDVQQD
EygzNGY3NjJlYzBiMTlhNjI5Y2FlMWY1MzY1ZGE1ZGFlNjY1NWQ2ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry63PRtlGnwvWbUGrK+JTmUgQ3c7
Fs+9QQB7xU/Cc/Blr/lkLeg18p7W305mVNvtqKJyJairdrkmEsx8xFXCwFYo/K4U
thWuuZ7uGtfX2DgWn+9f6H4EKm3YQZNEivXOOC1vgyJgaLPqXTb8+Yz65dBkpxu2
sbV4zOgQOi9P8Sc2D1rUB7k0TIoSFpviBoe87PgWwxPBh7N8KJRKn9SdWBmNQbLF
4nfZSIvHX/+ecDEvUZB/8hHgpWxzSMakgH3iTNkOwiUCOUKzAtvhhH4Kvn6Apta+
0n+Fli122lQ/3T0CK3MYIUO6cUpdjFRWI9JUTlThC/p7tQgMCilZgie08QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT3YuwLGaYpyuH1Nl2l2uZlXW+0MB8GA1UdIwQY
MBaAFP+8rispDIAdV9CdAlqTSOFnBvGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAt
MDk2YWY0NzhmMDRiLzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAtMDk2YWY0NzhmMDRi
LzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4heZ7Hi
qjwnUEs2EPlKxi3VmXs3mLH+3MXL3B8VlTcLqsFdfRrqZhGWjBcMfUgnyi3rpVeL
rkgcKvKaJCqUsAjy0XUtcGyXPNyFHN4PS/PyJVe+7G72q2kmQLqjHvHrBMopnwTF
yIGBpLRmDRVVfCp6JSLFGQ58eW4fqnlg3XkVjKLhweCyDtKKdjf6SsrzzFUDUHPh
omVqHZMN3a7aMV+SHdjljB2aZTSQmpshwbjNqFGIBdY3vZ+U2qdaz6RPvN7DCg0r
/B4Bh+xEe/hRNA15NNcbHdim2jZAklTwS3GICaCeVw9IeIxHCT96ENhoDX8hQzzc
pcIM1KbRcXWBrg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:13 2026 by rpki-client