Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: vfnu3HWBbPxaUy5LlE5PcL/jfGnUlqjaZkE16EoIGzQ=
Subject key identifier: 7F:C2:B7:53:77:BD:03:A6:04:CB:D8:42:C0:A8:14:5C:C4:49:50:8A
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 019D27724E8742902B49533BD2E9274A88DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: 0525
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: 1j3vfqmoOqwb7Yh6DBdvRjdsFsg.roa (hash: /Uld+qa79+lTp86N22k2YZMrzBMGIznMfTj+54uPKBY=)
2: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: uQZD9OrK5TBHo5qDlr9PO3XVrfROoPHH0GgBbfh9u7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4e:87:42:90:2b:49:53:3b:d2:e9:27:4a:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=7fc2b75377bd03a604cbd842c0a8145cc449508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:5e:19:05:6d:30:a8:d5:f8:3e:26:80:d9:
c6:a6:79:c1:7d:64:0e:b9:69:f7:00:44:d5:c2:a3:
82:96:d2:2e:b1:be:0e:35:a1:02:a4:1c:84:c5:31:
04:74:fb:7e:98:2c:c6:51:37:73:c8:cd:39:72:11:
9e:7d:4e:82:fe:23:27:1c:a6:37:ab:62:6b:f8:f0:
d1:c9:b9:0b:00:27:a2:97:f1:c6:b4:65:a8:2e:d3:
25:84:ed:16:85:41:3d:ef:d1:0d:5f:62:fd:c1:10:
d5:78:aa:a1:42:07:a7:8f:3d:da:be:2d:76:b1:d3:
f8:9a:82:ec:45:07:30:12:3e:bc:cf:71:b6:37:95:
c0:dc:97:46:77:1f:86:d3:76:52:72:ec:98:36:4d:
e1:0f:bc:39:36:35:2a:92:45:e3:40:a3:9f:6f:a7:
93:6d:83:3d:9a:5f:03:1c:e0:eb:19:44:66:25:c7:
30:d6:94:56:3c:85:05:99:67:ca:14:5a:6c:66:a1:
48:bc:c7:83:75:21:48:b4:ab:73:ae:1c:19:62:79:
ff:21:69:69:59:74:c3:21:1a:df:50:b0:2f:20:e2:
49:8f:ed:c8:33:cc:ce:dd:36:19:4e:0b:f0:50:04:
b2:72:f6:5b:59:7b:b6:f2:44:a3:67:4e:e3:9f:94:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:B7:53:77:BD:03:A6:04:CB:D8:42:C0:A8:14:5C:C4:49:50:8A
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:4f:5d:58:b9:38:fa:bf:b4:82:84:1a:19:94:92:60:ec:
81:b5:0e:39:91:72:39:e4:61:f8:38:33:69:5d:0a:cf:f3:42:
af:c3:7b:9b:8c:b8:51:8b:06:98:fa:c7:69:ad:dc:39:43:1c:
30:9f:fc:fd:26:10:99:e7:52:97:ae:5c:80:3e:9a:5d:94:7a:
ff:eb:cc:84:21:a6:7d:61:6c:b7:dc:10:a7:c2:bf:86:e9:e5:
53:8c:e2:37:09:5e:0b:07:3a:6a:27:de:2e:a5:da:e1:2e:d7:
57:d1:52:61:7a:df:30:88:fc:b9:4c:4f:c5:0a:59:0f:bd:f4:
d6:b4:ea:59:84:ae:e5:18:dc:18:42:af:4d:90:73:12:f2:51:
9a:31:56:bc:30:de:e3:51:6a:61:48:1a:d2:6e:9f:d4:99:11:
0c:67:89:f0:06:70:d8:50:5c:33:0c:f8:b4:5f:b0:dd:6d:8e:
00:bf:33:76:7e:47:f1:6f:3d:94:55:c1:ac:b1:c2:f5:f1:9a:
46:a5:57:0d:97:33:12:be:4e:f6:d3:f1:f8:61:a1:6e:2a:8a:
55:90:26:9b:b6:59:63:73:03:76:8c:b2:f9:f4:6c:90:21:d3:
7d:40:90:8b:c4:f5:8d:6f:39:8f:4e:9b:0c:64:45:1e:79:11:
cf:fe:09:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nck6HQpArSVM70uknSojeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2U1Yzc1ZjY0OGFjNjkyYjE0YmMyMjJlMmMxODBjODYz
YjQ1ZTIwHhcNMjYwMzI2MDAwMTM1WhcNMjYwMzI3MDAwMTM1WjAzMTEwLwYDVQQD
Eyg3ZmMyYjc1Mzc3YmQwM2E2MDRjYmQ4NDJjMGE4MTQ1Y2M0NDk1MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXdeGQVtMKjV+D4mgNnGpnnBfWQO
uWn3AETVwqOCltIusb4ONaECpByExTEEdPt+mCzGUTdzyM05chGefU6C/iMnHKY3
q2Jr+PDRybkLACeil/HGtGWoLtMlhO0WhUE979ENX2L9wRDVeKqhQgenjz3avi12
sdP4moLsRQcwEj68z3G2N5XA3JdGdx+G03ZScuyYNk3hD7w5NjUqkkXjQKOfb6eT
bYM9ml8DHODrGURmJccw1pRWPIUFmWfKFFpsZqFIvMeDdSFItKtzrhwZYnn/IWlp
WXTDIRrfULAvIOJJj+3IM8zO3TYZTgvwUASycvZbWXu28kSjZ07jn5TBnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/Ct1N3vQOmBMvYQsCoFFzESVCKMB8GA1UdIwQY
MBaAFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYt
ZTZiMjBiMDlmODY2LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYtZTZiMjBiMDlmODY2
LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdN9PXVi5
OPq/tIKEGhmUkmDsgbUOOZFyOeRh+DgzaV0Kz/NCr8N7m4y4UYsGmPrHaa3cOUMc
MJ/8/SYQmedSl65cgD6aXZR6/+vMhCGmfWFst9wQp8K/hunlU4ziNwleCwc6aife
LqXa4S7XV9FSYXrfMIj8uUxPxQpZD7301rTqWYSu5RjcGEKvTZBzEvJRmjFWvDDe
41FqYUga0m6f1JkRDGeJ8AZw2FBcMwz4tF+w3W2OAL8zdn5H8W89lFXBrLHC9fGa
RqVXDZczEr5O9tPx+GGhbiqKVZAmm7ZZY3MDdoyy+fRskCHTfUCQi8T1jW85j06b
DGRFHnkRz/4Jcw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:50:16 2026 by rpki-client