Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: B95vo4oyIDpUM5gWfaJgnw/Nrbd2+TvbPIWAzEQB9Lw=
Subject key identifier: 22:4C:92:E8:CF:7F:B6:CD:34:DB:AE:F9:DB:F1:00:73:D9:62:25:08
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 019D2A05037BE384C19EB34DB8F12F3F37BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 12:01:04 +0000
Manifest this update: Thu 26 Mar 2026 12:01:04 +0000
Manifest next update: Fri 27 Mar 2026 12:01:04 +0000
Files and hashes: 1: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: iYEfZTm8mP7Oa470PO+6gTPlVP0u7eKscfjUkG7Tgws=)
2: rUqausp6DPOMmVyNhwwtnCu8uOI.roa (hash: mGV2O68I7SUJIySepwpfOUclIH+MBiTk0XkuVOdxx9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:03:7b:e3:84:c1:9e:b3:4d:b8:f1:2f:3f:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Mar 26 12:01:04 2026 GMT
Not After : Mar 27 12:01:04 2026 GMT
Subject: CN=224c92e8cf7fb6cd34dbaef9dbf10073d9622508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:ac:ae:00:77:95:31:15:ac:8e:fb:2b:89:
0c:47:b8:27:01:f1:16:ec:7c:96:4a:3b:fb:47:e1:
7e:9e:a6:92:0c:df:db:e6:31:58:6d:54:5f:90:8e:
2f:9a:d1:f0:95:e0:ca:58:56:33:11:ce:5a:8c:21:
43:a9:3a:60:49:70:73:c0:48:3a:12:e1:91:46:8a:
0a:30:27:ee:8f:bc:36:34:4c:34:94:b0:57:c3:8b:
d8:7d:c5:9a:b8:27:ac:2d:07:5a:76:f6:73:33:e0:
e5:d5:09:35:b8:aa:de:d4:2c:dd:a9:d6:e5:98:2c:
38:30:cd:53:91:69:6f:cf:e7:d6:5d:21:55:77:df:
31:3a:30:15:cc:4f:0d:df:82:a1:a2:86:a7:87:fe:
72:f8:a9:af:49:d3:e9:c4:a8:86:7d:9b:49:9b:bd:
4c:e0:2e:af:aa:9e:ce:1e:b4:2d:c0:bc:1a:2b:08:
87:4d:01:c1:5c:5f:45:33:aa:56:77:95:b4:f7:a6:
33:e4:a5:da:71:94:6b:80:7a:7a:28:93:7e:8c:e5:
1a:f8:1b:64:d8:94:ba:27:33:ea:5a:56:1b:d4:a7:
99:4d:15:c1:15:c8:75:c6:6b:3b:fb:42:82:b1:83:
f8:2f:61:ab:f2:34:88:c5:02:2d:b8:90:6f:4e:63:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4C:92:E8:CF:7F:B6:CD:34:DB:AE:F9:DB:F1:00:73:D9:62:25:08
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4c:8d:0b:84:4f:68:61:ff:e9:02:9a:a4:b7:d7:cd:58:ca:
98:ce:a3:ba:67:4a:63:bf:78:f3:cd:34:d6:da:87:b8:b2:78:
3e:7a:9c:4e:de:63:96:b0:b4:1c:ac:c9:cb:0c:0b:17:2a:eb:
cc:aa:84:7a:d2:4b:db:b4:6d:de:66:46:e1:1b:41:f9:ee:6d:
2b:e6:28:cc:2a:e2:72:51:ba:ea:01:99:0d:bf:2b:41:b9:04:
49:b7:b8:8e:6b:bc:54:52:e8:60:87:f0:a5:27:4d:49:12:9b:
0f:f2:2e:56:1c:af:97:29:0e:b0:a1:65:cc:fc:3f:4c:9e:54:
36:8d:23:a5:c6:7b:d4:cd:d8:e0:20:87:ef:b2:06:cd:ec:65:
c1:14:13:cc:6d:77:29:c2:73:70:1a:c3:89:b2:74:5f:0c:e1:
64:0e:96:3b:de:95:76:fd:a5:1c:4f:7a:ea:2c:f1:9b:c1:08:
8f:57:d3:63:88:d0:5a:74:96:b8:e3:b1:b7:a6:e0:d6:dd:aa:
48:c8:17:2e:0a:8b:17:6f:84:22:27:42:34:8b:18:f4:91:43:
7b:9a:86:df:7b:83:9b:1c:8b:48:27:46:54:fb:e5:c5:43:da:
4d:26:04:1e:27:26:f9:22:77:5c:e3:95:7f:ea:d9:98:3b:48:
a9:fd:c1:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBQN744TBnrNNuPEvPze7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmZhNzcyYWFjMjEwN2M5MGNmMjhiMjJiOGQyYWQwNzk3
ZjgzMmQwHhcNMjYwMzI2MTIwMTA0WhcNMjYwMzI3MTIwMTA0WjAzMTEwLwYDVQQD
EygyMjRjOTJlOGNmN2ZiNmNkMzRkYmFlZjlkYmYxMDA3M2Q5NjIyNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUasrgB3lTEVrI77K4kMR7gnAfEW
7HyWSjv7R+F+nqaSDN/b5jFYbVRfkI4vmtHwleDKWFYzEc5ajCFDqTpgSXBzwEg6
EuGRRooKMCfuj7w2NEw0lLBXw4vYfcWauCesLQdadvZzM+Dl1Qk1uKre1Czdqdbl
mCw4MM1TkWlvz+fWXSFVd98xOjAVzE8N34Khooanh/5y+KmvSdPpxKiGfZtJm71M
4C6vqp7OHrQtwLwaKwiHTQHBXF9FM6pWd5W096Yz5KXacZRrgHp6KJN+jOUa+Btk
2JS6JzPqWlYb1KeZTRXBFch1xms7+0KCsYP4L2Gr8jSIxQItuJBvTmN0WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJMkujPf7bNNNuu+dvxAHPZYiUIMB8GA1UdIwQY
MBaAFJu/p3KqwhB8kM8osiuNKtB5f4MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEt
ZWU5ODI5ZGRhOGJjLzEvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEtZWU5ODI5ZGRhOGJj
LzEvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUyNC4RP
aGH/6QKapLfXzVjKmM6jumdKY79488001tqHuLJ4PnqcTt5jlrC0HKzJywwLFyrr
zKqEetJL27Rt3mZG4RtB+e5tK+YozCriclG66gGZDb8rQbkESbe4jmu8VFLoYIfw
pSdNSRKbD/IuVhyvlykOsKFlzPw/TJ5UNo0jpcZ71M3Y4CCH77IGzexlwRQTzG13
KcJzcBrDibJ0XwzhZA6WO96Vdv2lHE966izxm8EIj1fTY4jQWnSWuOOxt6bg1t2q
SMgXLgqLF2+EIidCNIsY9JFDe5qG33uDmxyLSCdGVPvlxUPaTSYEHicm+SJ3XOOV
f+rZmDtIqf3BVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:09 2026 by rpki-client