Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File: 7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier: vJhD+ruTEKR4I/LWvyRD8vcsLZ191ZboZE+IVEgSRk0=
Subject key identifier: CA:5E:52:02:0D:AA:6F:31:FF:0B:53:27:97:91:F0:4F:08:55:AC:C6
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer: /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial: 019D3375D116D626B96B9A1B84C5ABA109E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number: DC
Signing time: Sat 28 Mar 2026 08:00:52 +0000
Manifest this update: Sat 28 Mar 2026 08:00:52 +0000
Manifest next update: Sun 29 Mar 2026 08:00:52 +0000
Files and hashes: 1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: vsGD15MtQNG0tezwjGc6q5W6fkW+vMoyNieBxM+KkMM=)
2: rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa (hash: r6SGrYKI+ASOCBn2fHuASlLRkC7+wUAXBFPIKFArmfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:d1:16:d6:26:b9:6b:9a:1b:84:c5:ab:a1:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Validity
Not Before: Mar 28 08:00:52 2026 GMT
Not After : Mar 29 08:00:52 2026 GMT
Subject: CN=ca5e52020daa6f31ff0b53279791f04f0855acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:00:7d:48:99:3b:fd:65:f6:f6:ca:0d:50:
65:0e:39:77:d5:01:2f:e4:8d:63:37:0b:81:d6:44:
64:22:ac:78:3e:6b:5c:52:b1:4e:ff:db:43:12:db:
54:06:a6:a4:e5:67:ae:16:b0:85:fa:33:bb:c2:40:
5a:dc:00:5a:a1:31:b0:41:fd:9b:96:8a:18:42:91:
bd:7f:0e:a2:b6:b4:e2:b7:c9:02:c8:6f:ec:60:7f:
fc:22:54:71:46:3b:f9:af:a9:4d:a9:4c:f6:d6:a1:
d8:c9:51:38:cb:28:52:bc:5a:6d:eb:ea:74:40:3c:
2e:99:44:5b:b7:6b:51:51:97:18:01:76:c0:dc:5d:
01:9a:59:10:cf:cd:ff:32:49:4f:e2:81:54:e8:20:
c5:73:84:76:a7:71:f6:f6:25:f2:19:b5:f8:4c:5d:
b1:1b:1d:33:8e:05:e0:b4:cf:4f:97:18:f9:45:5a:
83:32:ee:23:5b:de:0d:55:8b:06:76:c1:e0:89:f3:
57:c4:7a:3d:c1:17:71:df:b9:6e:bf:2e:28:2a:57:
15:f0:a4:77:4c:5e:8b:54:40:6c:62:2a:fd:22:f6:
29:4f:45:fb:35:30:54:76:93:81:3a:a8:9b:21:fb:
55:d9:cb:f3:92:8d:5a:a2:f6:d7:01:e8:39:ca:f7:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:52:02:0D:AA:6F:31:FF:0B:53:27:97:91:F0:4F:08:55:AC:C6
X509v3 Authority Key Identifier:
keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d5:75:e7:4a:3f:a5:f2:e4:6f:ba:47:25:9b:c3:6a:73:c7:
54:38:ab:a4:f4:0e:db:c8:f9:54:86:eb:9b:9a:93:41:b8:a9:
72:55:d0:e6:4f:88:fb:9e:89:80:67:6c:b6:21:96:ae:a0:e8:
10:21:1c:a5:13:9b:19:f4:7c:c5:84:32:21:ca:6c:b3:19:9c:
b2:cf:79:01:b1:4b:1c:9f:11:34:bd:7a:cc:81:60:e0:01:b3:
8e:75:fd:ee:28:60:6c:16:82:77:6a:2b:8d:f7:5f:b8:21:c3:
97:3c:c7:07:c0:4c:86:69:49:98:ad:8b:bf:db:ce:e2:ff:e7:
5d:07:be:cf:d6:f5:36:16:3b:9f:f2:d3:bb:f0:2f:28:6e:28:
7d:d3:01:53:f3:78:1e:b8:1c:c3:51:0c:16:94:8e:09:6d:f0:
1c:af:42:ed:e5:78:06:f3:26:32:07:57:41:7b:c1:14:9b:b0:
69:a1:dd:68:2e:ae:d6:51:ec:1e:cc:02:e7:67:e3:f0:75:fc:
4e:39:32:03:22:08:1b:b3:72:27:d9:5a:2d:aa:b2:15:df:68:
59:36:20:68:fc:92:4b:18:72:96:c1:75:d4:9e:40:ea:3a:85:
4f:a9:db:95:4d:05:97:a7:34:63:0b:3d:85:30:49:ff:ef:52:
d8:f2:98:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zddEW1ia5a5obhMWroQngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZGUxM2I5N2E3Yzc3OGFkODAxM2ZhZmZhMmIxYmI2NDg3
NjJjZmMwHhcNMjYwMzI4MDgwMDUyWhcNMjYwMzI5MDgwMDUyWjAzMTEwLwYDVQQD
EyhjYTVlNTIwMjBkYWE2ZjMxZmYwYjUzMjc5NzkxZjA0ZjA4NTVhY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnygAfUiZO/1l9vbKDVBlDjl31QEv
5I1jNwuB1kRkIqx4PmtcUrFO/9tDEttUBqak5WeuFrCF+jO7wkBa3ABaoTGwQf2b
looYQpG9fw6itrTit8kCyG/sYH/8IlRxRjv5r6lNqUz21qHYyVE4yyhSvFpt6+p0
QDwumURbt2tRUZcYAXbA3F0BmlkQz83/MklP4oFU6CDFc4R2p3H29iXyGbX4TF2x
Gx0zjgXgtM9Plxj5RVqDMu4jW94NVYsGdsHgifNXxHo9wRdx37luvy4oKlcV8KR3
TF6LVEBsYir9IvYpT0X7NTBUdpOBOqibIftV2cvzko1aovbXAeg5yvcLKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpeUgINqm8x/wtTJ5eR8E8IVazGMB8GA1UdIwQY
MBaAFO7eE7l6fHeK2AE/r/orG7ZIdiz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wOTJjMWMtMjJmYi00OGFiLWJlOWMt
YTUyMGRlNzU5YTUwLzEvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8wOTJjMWMtMjJmYi00OGFiLWJlOWMtYTUyMGRlNzU5YTUw
LzEvN3Q0VHVYcDhkNHJZQVQtdi1pc2J0a2gyTFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNV150o/
pfLkb7pHJZvDanPHVDirpPQO28j5VIbrm5qTQbipclXQ5k+I+56JgGdstiGWrqDo
ECEcpRObGfR8xYQyIcpssxmcss95AbFLHJ8RNL16zIFg4AGzjnX97ihgbBaCd2or
jfdfuCHDlzzHB8BMhmlJmK2Lv9vO4v/nXQe+z9b1NhY7n/LTu/AvKG4ofdMBU/N4
Hrgcw1EMFpSOCW3wHK9C7eV4BvMmMgdXQXvBFJuwaaHdaC6u1lHsHswC52fj8HX8
TjkyAyIIG7NyJ9laLaqyFd9oWTYgaPySSxhylsF11J5A6jqFT6nblU0Fl6c0Yws9
hTBJ/+9S2PKY2w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:44 2026 by rpki-client