Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
File: 7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json)
Hash identifier: /Ti8oIuOsQ/zqrTUiO6KCYndvIfdva9OmcvvDZjVvz8=
Subject key identifier: 31:14:3C:5A:58:61:A2:D6:5A:96:1E:20:C5:2C:8D:3B:69:28:F3:A3
Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
Certificate issuer: /CN=edafdca6eace4f1293223b02eebc278243869b7b
Certificate serial: 019D2960F1CDD72D5C0C35993F93E55F2E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:01:52 +0000
Manifest this update: Thu 26 Mar 2026 09:01:52 +0000
Manifest next update: Fri 27 Mar 2026 09:01:52 +0000
Files and hashes: 1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: kGQ+n35kuD62DhbeKZDAVMK8xrlaQSu2w29eiDrH130=)
2: JEiGbQEv5uxJuy32ir_fQeAKys8.roa (hash: h5HQWsILbTzf8iWmMH9s843eJqaOXzdBwkJ2EOOO/q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f1:cd:d7:2d:5c:0c:35:99:3f:93:e5:5f:2e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b
Validity
Not Before: Mar 26 09:01:52 2026 GMT
Not After : Mar 27 09:01:52 2026 GMT
Subject: CN=31143c5a5861a2d65a961e20c52c8d3b6928f3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:15:a9:74:33:29:ef:95:3d:5d:24:20:12:
a8:1a:6a:ed:5c:14:d8:18:3e:35:5e:e1:f9:10:d1:
df:d9:b3:38:80:08:24:c9:c7:80:85:cc:54:72:ae:
cf:94:80:e2:ee:5d:83:90:03:94:84:ec:bd:45:75:
45:0a:5d:43:54:96:7c:ae:ba:a3:f2:41:06:b0:4c:
77:36:41:63:a6:08:6b:e8:62:11:e4:b3:1c:77:87:
bc:f3:80:81:d0:e4:c4:16:58:31:a2:cc:e3:e1:ab:
f6:99:4f:fe:4c:d8:67:a2:74:57:5e:a0:86:67:a2:
57:9a:47:fc:b3:86:79:16:f2:ee:33:85:ce:c5:06:
ba:de:7d:63:e0:9a:bb:71:a4:5b:f3:79:a2:b5:a4:
0e:ce:43:c3:eb:97:0f:8c:bc:6a:f6:6f:d1:55:0c:
37:46:7e:47:5f:5f:24:d0:1e:22:73:c9:c6:27:d3:
cf:b8:7a:fa:a4:1e:11:3a:1c:4b:d6:53:e0:a9:0a:
4f:6e:73:23:3f:0d:2c:6f:7a:f0:b8:7c:4d:22:56:
32:d7:09:c6:bd:34:ea:ed:61:14:8a:67:e4:d5:ac:
b5:66:ec:59:2f:0d:e0:cd:5e:98:27:27:d5:80:bd:
ac:bf:3a:a3:0a:89:a8:2b:ac:26:2c:64:5b:e8:3d:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:3C:5A:58:61:A2:D6:5A:96:1E:20:C5:2C:8D:3B:69:28:F3:A3
X509v3 Authority Key Identifier:
keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5b:be:a2:dc:5a:c3:63:a0:8e:18:ef:90:54:4b:d7:0f:24:
af:b9:ae:22:3e:c3:b9:b6:0c:0e:a7:e1:b7:83:7d:bf:87:1f:
53:6d:ad:61:01:6f:de:3d:73:76:b8:8f:6e:9f:e5:00:4c:7d:
4e:fa:8a:46:2c:5f:bd:9d:10:a8:86:5f:ad:a3:45:9a:85:97:
30:e3:6a:74:44:ee:8c:9c:4c:73:bb:9b:f1:e7:5e:24:29:74:
d5:19:b9:9c:c6:6e:f5:b5:6f:c8:90:a2:8e:46:33:0f:02:c7:
b0:25:bd:76:08:3b:f0:a9:e5:9f:e3:67:83:6a:88:6d:89:ef:
0f:8f:2b:8f:82:4c:d3:3c:74:49:80:bc:1d:30:1d:aa:81:04:
c5:05:c0:b7:18:63:0b:3c:3d:ef:ce:a1:3e:9a:bd:69:88:26:
f4:ed:f2:0a:99:e0:04:ac:21:21:c0:ce:19:7f:b5:b6:29:a1:
5e:a7:95:e8:50:15:d8:75:b0:e1:f1:45:33:5d:b2:9c:93:30:
08:45:19:31:55:40:2d:31:3a:d3:0a:01:4f:76:9d:05:81:6d:
d3:d6:7c:a7:84:13:d5:48:a8:64:44:f8:f3:42:12:3a:73:ba:
f2:f0:4a:5b:57:17:da:e8:a4:f2:cc:6f:a3:32:9a:97:6e:ed:
e3:0f:b9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYPHN1y1cDDWZP5PlXy4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWZkY2E2ZWFjZTRmMTI5MzIyM2IwMmVlYmMyNzgyNDM4
NjliN2IwHhcNMjYwMzI2MDkwMTUyWhcNMjYwMzI3MDkwMTUyWjAzMTEwLwYDVQQD
EygzMTE0M2M1YTU4NjFhMmQ2NWE5NjFlMjBjNTJjOGQzYjY5MjhmM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFIVqXQzKe+VPV0kIBKoGmrtXBTY
GD41XuH5ENHf2bM4gAgkyceAhcxUcq7PlIDi7l2DkAOUhOy9RXVFCl1DVJZ8rrqj
8kEGsEx3NkFjpghr6GIR5LMcd4e884CB0OTEFlgxoszj4av2mU/+TNhnonRXXqCG
Z6JXmkf8s4Z5FvLuM4XOxQa63n1j4Jq7caRb83mitaQOzkPD65cPjLxq9m/RVQw3
Rn5HX18k0B4ic8nGJ9PPuHr6pB4ROhxL1lPgqQpPbnMjPw0sb3rwuHxNIlYy1wnG
vTTq7WEUimfk1ay1ZuxZLw3gzV6YJyfVgL2svzqjComoK6wmLGRb6D2mtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEUPFpYYaLWWpYeIMUsjTtpKPOjMB8GA1UdIwQY
MBaAFO2v3Kbqzk8SkyI7Au68J4JDhpt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgt
NWYxZGMwYTBiZmNmLzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iNDc2ZjktZDI0Mi00NjVhLTg3NDgtNWYxZGMwYTBiZmNm
LzEvN2FfY3B1ck9UeEtUSWpzQzdyd25na09HbTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1u+otxa
w2OgjhjvkFRL1w8kr7muIj7DubYMDqfht4N9v4cfU22tYQFv3j1zdriPbp/lAEx9
TvqKRixfvZ0QqIZfraNFmoWXMONqdETujJxMc7ub8edeJCl01Rm5nMZu9bVvyJCi
jkYzDwLHsCW9dgg78Knln+Nng2qIbYnvD48rj4JM0zx0SYC8HTAdqoEExQXAtxhj
Czw9786hPpq9aYgm9O3yCpngBKwhIcDOGX+1timhXqeV6FAV2HWw4fFFM12ynJMw
CEUZMVVALTE60woBT3adBYFt09Z8p4QT1UioZET480ISOnO68vBKW1cX2uik8sxv
ozKal27t4w+5kQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:03 2026 by rpki-client