Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File: frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier: 04n2/jPdAbUNB+FJoxJcXrj+8MXsm/ZdzjFgxQu7jgE=
Subject key identifier: E1:D4:54:45:20:28:4C:6A:EE:95:7C:11:79:FF:6A:A3:C1:EF:63:B3
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer: /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial: 019D29CE3EDB736853BA33249C3C295D41AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number: 0869
Signing time: Thu 26 Mar 2026 11:01:15 +0000
Manifest this update: Thu 26 Mar 2026 11:01:15 +0000
Manifest next update: Fri 27 Mar 2026 11:01:15 +0000
Files and hashes: 1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: RxopD9kG3R3aKtghY8Kg6iWyB2u+ob6Ou2es5CYigl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:3e:db:73:68:53:ba:33:24:9c:3c:29:5d:41:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Validity
Not Before: Mar 26 11:01:15 2026 GMT
Not After : Mar 27 11:01:15 2026 GMT
Subject: CN=e1d4544520284c6aee957c1179ff6aa3c1ef63b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:a1:df:4e:e9:5f:43:3a:f6:14:04:07:b5:
4a:0d:80:e5:fd:1b:4f:ff:37:b0:2e:f2:d9:31:77:
69:89:e9:71:76:a2:b7:c7:ed:bc:f4:f8:9f:f1:f8:
24:0b:fd:fa:2d:b4:8b:db:47:d9:97:f5:76:d5:52:
8d:41:a5:a0:01:79:aa:00:19:55:a6:8b:e8:64:45:
c5:2b:a4:ec:c6:17:37:2d:f1:ec:59:f8:71:70:ad:
d7:d0:c3:ff:b5:bb:ca:71:20:26:10:4f:28:25:06:
56:93:29:a1:6b:75:cd:f3:f6:48:56:8b:3a:cb:fd:
c4:aa:08:2a:61:5a:93:cf:51:e0:45:57:f5:a4:12:
9f:09:ae:4a:0d:fb:3b:d8:7f:c1:a0:a9:eb:bb:8a:
59:f5:f9:b4:35:b8:c5:f5:d5:84:07:f3:66:41:b8:
e4:d2:6d:79:ab:98:61:df:d3:c3:08:73:c4:9b:9b:
48:74:30:9a:67:89:c0:0e:84:e8:b8:20:d6:97:c7:
c3:56:67:93:00:ab:a8:73:5d:5a:82:6a:66:33:22:
60:7c:be:8f:cf:3c:37:b3:a7:d6:79:59:fa:d9:7d:
c7:9b:b1:72:99:ba:cb:c6:bc:f3:92:45:ee:07:9c:
67:40:87:61:83:e2:f9:1c:6a:9f:05:76:e1:c2:88:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D4:54:45:20:28:4C:6A:EE:95:7C:11:79:FF:6A:A3:C1:EF:63:B3
X509v3 Authority Key Identifier:
keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e0:89:16:2c:5e:33:1b:73:31:e8:bd:b2:09:34:1e:56:14:
5f:52:3b:36:86:72:2d:1c:5f:6c:6a:c3:7b:13:92:65:85:af:
15:f4:b8:47:3a:96:4a:a8:21:c2:d9:ca:ed:4c:fd:ba:d6:df:
65:37:70:00:3b:80:67:43:ab:2f:d2:35:41:70:89:69:56:15:
c5:cf:4e:cc:d4:36:e3:fa:eb:f3:00:db:c9:65:c4:c2:f3:89:
01:db:2e:93:f7:a3:fd:06:ce:79:88:64:3f:28:ea:a4:6a:bd:
16:23:65:cc:67:88:ba:19:d2:2c:e3:24:cc:1d:2f:31:6e:44:
ea:fb:d7:29:0c:41:e9:c1:05:4d:f0:c9:a0:3f:08:aa:9c:bb:
19:df:f0:07:95:f3:32:db:99:67:63:4c:9d:73:63:3e:c0:66:
37:e4:90:a3:b5:02:8b:dc:ad:80:87:08:63:37:0a:48:9d:1a:
67:be:8c:0e:b0:bf:6f:44:44:51:f1:2d:4f:2a:7f:29:79:39:
cc:ec:60:82:33:fb:95:fa:51:15:53:2e:59:18:c4:a4:e2:94:
da:f8:b5:f3:b0:75:79:01:f0:1d:14:25:d7:6e:0e:77:7f:37:
20:5e:63:f2:93:c5:5f:fe:ca:c8:9c:fa:d6:ea:44:ff:a7:1a:
84:c9:ac:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzj7bc2hTujMknDwpXUGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjYwMzcwNDBhODYwY2Q5MWJhNzdhMzcxOGVkNTgwY2Fk
ZjVkZDgwHhcNMjYwMzI2MTEwMTE1WhcNMjYwMzI3MTEwMTE1WjAzMTEwLwYDVQQD
EyhlMWQ0NTQ0NTIwMjg0YzZhZWU5NTdjMTE3OWZmNmFhM2MxZWY2M2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEOh307pX0M69hQEB7VKDYDl/RtP
/zewLvLZMXdpielxdqK3x+289Pif8fgkC/36LbSL20fZl/V21VKNQaWgAXmqABlV
povoZEXFK6Tsxhc3LfHsWfhxcK3X0MP/tbvKcSAmEE8oJQZWkymha3XN8/ZIVos6
y/3EqggqYVqTz1HgRVf1pBKfCa5KDfs72H/BoKnru4pZ9fm0NbjF9dWEB/NmQbjk
0m15q5hh39PDCHPEm5tIdDCaZ4nADoTouCDWl8fDVmeTAKuoc11agmpmMyJgfL6P
zzw3s6fWeVn62X3Hm7FymbrLxrzzkkXuB5xnQIdhg+L5HGqfBXbhwojcdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHUVEUgKExq7pV8EXn/aqPB72OzMB8GA1UdIwQY
MBaAFH62A3BAqGDNkbp3o3GO1YDK313YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTkt
Yjg4NjZlOTQxOTYzLzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTktYjg4NjZlOTQxOTYz
LzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOCJFixe
MxtzMei9sgk0HlYUX1I7NoZyLRxfbGrDexOSZYWvFfS4RzqWSqghwtnK7Uz9utbf
ZTdwADuAZ0OrL9I1QXCJaVYVxc9OzNQ24/rr8wDbyWXEwvOJAdsuk/ej/QbOeYhk
PyjqpGq9FiNlzGeIuhnSLOMkzB0vMW5E6vvXKQxB6cEFTfDJoD8Iqpy7Gd/wB5Xz
MtuZZ2NMnXNjPsBmN+SQo7UCi9ytgIcIYzcKSJ0aZ76MDrC/b0REUfEtTyp/KXk5
zOxggjP7lfpRFVMuWRjEpOKU2vi187B1eQHwHRQl124Od383IF5j8pPFX/7KyJz6
1upE/6cahMmsDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:11 2026 by rpki-client