Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: du0e4CgntkQGsjYmBg3ZaTGTdiWEEFwYdf1sQHjNmCk=
Subject key identifier: 61:98:51:46:1A:1E:DC:CE:A8:97:D2:F8:A4:EC:5B:6F:B2:C3:23:49
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 019D2A725BFA2CA1EE2E6190D9C5FFF3E5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 0EF4
Signing time: Thu 26 Mar 2026 14:00:30 +0000
Manifest this update: Thu 26 Mar 2026 14:00:30 +0000
Manifest next update: Fri 27 Mar 2026 14:00:30 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: BgLBmYqx5NebgZn6sdCVOUN11fhnmi+r3GfFSH/MeWw=)
2: 9oOBFeGSrwdju604vrWfdCoTauM.roa (hash: pd4ZMcD0zoZVQx34tpixPFz8KnUMJc8/XoRGbitBdPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5b:fa:2c:a1:ee:2e:61:90:d9:c5:ff:f3:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Mar 26 14:00:30 2026 GMT
Not After : Mar 27 14:00:30 2026 GMT
Subject: CN=619851461a1edccea897d2f8a4ec5b6fb2c32349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:1b:4f:10:66:f2:d5:23:e4:7e:f7:36:d4:
3f:dd:12:b3:72:c1:85:38:32:60:88:b7:54:d7:cd:
43:03:e1:db:f3:ec:a3:52:74:94:e5:2a:c6:5a:fd:
7c:63:3b:be:9e:72:a4:28:fc:8a:1e:68:82:0f:00:
50:71:c8:4e:1b:d8:78:e4:e2:97:b1:33:4a:e5:65:
e4:e8:1f:37:b5:2f:a8:9d:a1:aa:02:76:94:bd:41:
78:20:24:ca:93:fa:21:62:42:12:28:f1:66:50:18:
ab:d9:8a:7c:2e:b1:45:12:fe:15:3e:88:62:1c:c0:
9a:04:c9:0e:82:26:97:2a:85:10:39:c2:15:99:5b:
68:b9:c3:f5:c6:87:2d:4b:ea:7f:8d:32:20:04:19:
5e:73:aa:b8:27:67:71:ef:3e:18:c9:14:90:b0:80:
ae:6f:82:16:27:10:f8:ef:de:85:02:11:24:1a:2f:
88:61:a0:95:56:ff:aa:d5:85:ea:5d:73:79:43:34:
a5:ec:4d:be:c1:1a:50:40:0a:e8:de:d1:d8:61:5c:
04:49:33:c8:b5:1d:eb:4b:bb:92:35:2e:a9:01:6e:
f4:8f:15:15:c6:a9:86:ac:1d:07:5b:8a:33:6b:9f:
fd:e7:80:4f:a3:60:e3:6a:cd:f7:ca:56:d7:f9:7d:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:51:46:1A:1E:DC:CE:A8:97:D2:F8:A4:EC:5B:6F:B2:C3:23:49
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ed:ed:96:b4:5d:0f:61:31:51:a8:8c:70:c5:86:4b:3b:5a:
ef:0c:19:24:b6:93:59:59:e0:17:21:c1:f5:51:1b:4a:0d:52:
9d:4a:2c:3a:e6:77:9c:7e:6c:f4:fe:cf:fe:55:ad:f8:1d:b8:
f5:6a:5e:c7:33:9a:97:3a:bd:70:7e:59:7a:da:67:8d:65:9e:
ac:8a:d1:3f:2d:81:af:44:54:a7:2b:37:89:8a:d2:47:ea:eb:
72:ee:9f:8a:e8:cb:4f:c8:cd:30:be:a4:6f:39:52:85:32:4a:
e9:80:cc:30:45:be:f1:80:5a:83:b6:e1:b8:c0:e5:ce:ac:16:
54:91:25:8b:90:ec:38:5c:a1:bc:78:17:9c:b1:39:27:99:d8:
78:c4:41:04:8e:f9:bd:c5:7a:7f:10:36:9c:8a:29:24:ac:03:
be:dc:9e:49:e9:a0:5a:37:80:55:d0:20:4f:a3:ce:00:9c:7f:
2c:68:36:82:df:6f:b2:23:79:76:cf:f0:bd:80:90:82:f9:a4:
46:9a:6c:12:ef:d8:2d:07:a2:41:6f:62:45:a0:75:b0:ed:8b:
b9:07:6d:ef:16:9d:c0:88:34:34:9d:6c:54:ff:55:4a:ea:23:
2a:97:cd:9e:45:9a:c3:ab:9e:ad:c9:57:35:54:d0:fe:3e:b3:
64:1b:9a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qclv6LKHuLmGQ2cX/8+WlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMjkxODA2OWIyMWUxNjVmOGNjOTQyYTY3OTNmZGU1YjE2
NTViZTYwHhcNMjYwMzI2MTQwMDMwWhcNMjYwMzI3MTQwMDMwWjAzMTEwLwYDVQQD
Eyg2MTk4NTE0NjFhMWVkY2NlYTg5N2QyZjhhNGVjNWI2ZmIyYzMyMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVkbTxBm8tUj5H73NtQ/3RKzcsGF
ODJgiLdU181DA+Hb8+yjUnSU5SrGWv18Yzu+nnKkKPyKHmiCDwBQcchOG9h45OKX
sTNK5WXk6B83tS+onaGqAnaUvUF4ICTKk/ohYkISKPFmUBir2Yp8LrFFEv4VPohi
HMCaBMkOgiaXKoUQOcIVmVtoucP1xoctS+p/jTIgBBlec6q4J2dx7z4YyRSQsICu
b4IWJxD4796FAhEkGi+IYaCVVv+q1YXqXXN5QzSl7E2+wRpQQAro3tHYYVwESTPI
tR3rS7uSNS6pAW70jxUVxqmGrB0HW4oza5/954BPo2Djas33ylbX+X0FAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGYUUYaHtzOqJfS+KTsW2+ywyNJMB8GA1UdIwQY
MBaAFOwpGAabIeFl+MyUKmeT/eWxZVvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5Mzkt
NWY2OTgwYjhjNDY3LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8zNmNjYmEtODVmMC00MDAxLWI5MzktNWY2OTgwYjhjNDY3
LzEvN0NrWUJwc2g0V1g0ekpRcVo1UDk1YkZsVy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+3tlrRd
D2ExUaiMcMWGSzta7wwZJLaTWVngFyHB9VEbSg1SnUosOuZ3nH5s9P7P/lWt+B24
9WpexzOalzq9cH5ZetpnjWWerIrRPy2Br0RUpys3iYrSR+rrcu6fiujLT8jNML6k
bzlShTJK6YDMMEW+8YBag7bhuMDlzqwWVJEli5DsOFyhvHgXnLE5J5nYeMRBBI75
vcV6fxA2nIopJKwDvtyeSemgWjeAVdAgT6POAJx/LGg2gt9vsiN5ds/wvYCQgvmk
RppsEu/YLQeiQW9iRaB1sO2LuQdt7xadwIg0NJ1sVP9VSuojKpfNnkWaw6uerclX
NVTQ/j6zZBuaBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:43 2026 by rpki-client