
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
File: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft (raw, json)
Hash identifier: c7QWxuXKIZZ9zr2VlsPuJXAXVxRqpNg4NYsjdWkoEa8=
Subject key identifier: 5A:9E:CB:29:ED:BF:CD:B6:57:85:B7:61:00:2D:0E:06:8A:3D:05:2C
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 019D2AA9D51DABE2D7558C862F08F75B1402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 15:01:06 +0000
Manifest this update: Thu 26 Mar 2026 15:01:06 +0000
Manifest next update: Fri 27 Mar 2026 15:01:06 +0000
Files and hashes: 1: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl (hash: 4ZGFF6vjrD96C2r6NMVxQ3JY6Lef7reUm19ECTyPcRk=)
2: OYAYkJsr12Z2fzjQPZfjWQb7bPE.roa (hash: mR0GOPgYN71wfw37nSlvDHq0Q6YfRMuXiZgBdujomYI=)
3: PhcWaa3aMcSfSfL7A05LVlfWmo8.roa (hash: muO9ZarGeUAZ/RdE0uDFFvn9bzKE1jMQWRZvhI1+828=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:d5:1d:ab:e2:d7:55:8c:86:2f:08:f7:5b:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Mar 26 15:01:06 2026 GMT
Not After : Mar 27 15:01:06 2026 GMT
Subject: CN=5a9ecb29edbfcdb65785b761002d0e068a3d052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:ac:b9:76:f6:b1:d4:fd:fd:26:47:86:30:
ff:4d:e8:1d:3c:eb:01:68:46:61:a4:20:4d:76:b9:
ad:27:a3:a4:8f:0a:ad:40:66:b3:bd:b2:6e:dd:5f:
de:a6:a7:97:d4:5d:a1:ce:83:4e:83:a4:44:03:a1:
24:bc:ff:85:d0:62:97:b0:df:27:c2:5b:c2:41:6e:
ff:c4:87:64:85:d7:b8:e8:f5:b0:e0:ed:b9:e9:db:
47:a5:e4:51:4a:46:ea:7b:97:8d:22:43:e9:5f:bb:
18:01:d5:b3:80:c1:42:f7:fd:7b:05:8d:3e:67:2f:
90:70:54:1a:b0:26:e1:b7:51:13:f3:09:f9:a6:f2:
b1:e0:46:41:6d:b2:3e:5f:83:51:a8:10:0f:61:d0:
8b:f6:b8:ff:3e:74:4f:76:9c:76:80:81:74:3e:b2:
2e:19:d8:86:0b:9d:82:dc:33:81:34:86:38:67:4a:
b1:b8:50:a3:69:c6:55:9b:12:c0:94:4a:8c:14:08:
f1:d1:39:b9:50:a2:ef:83:8a:44:42:8c:ac:4d:94:
9a:94:68:07:cf:0f:5d:a7:89:59:c8:b9:54:84:b3:
9e:74:84:46:da:21:25:e3:86:14:93:52:50:6f:2c:
2f:75:0a:78:61:68:c3:63:f1:85:36:8f:03:6a:bb:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:CB:29:ED:BF:CD:B6:57:85:B7:61:00:2D:0E:06:8A:3D:05:2C
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a7:bb:fb:07:45:76:3a:7d:8f:b3:b3:37:25:d1:ad:35:8e:
bb:60:e1:47:36:f0:e0:6c:f9:5c:b2:ed:4e:fc:7e:c5:d0:6a:
e8:7f:8f:14:ec:43:b5:c0:ef:87:6a:21:e2:a3:23:2d:6f:ea:
d3:f5:ba:b4:37:0d:e7:f8:fa:53:eb:a0:cc:a4:44:da:bb:09:
0e:42:c6:98:bd:eb:1b:07:47:d7:66:75:eb:d3:5d:d2:c4:38:
e6:ae:c7:1f:55:67:94:e3:a2:18:1d:18:e2:a6:8a:0d:98:d1:
91:c0:76:e0:5a:8d:05:58:9e:0d:75:75:6e:1f:bc:df:87:46:
87:72:64:35:9d:3a:63:1c:34:b2:59:59:17:bb:04:ec:d2:05:
37:b7:64:1d:5b:15:aa:76:a8:3b:2a:8a:9f:ae:76:99:6c:5a:
80:d2:a1:87:82:e5:1b:16:a7:d5:cf:af:0e:7b:aa:e1:83:43:
67:ad:44:fd:de:be:56:ed:f1:2c:dc:41:52:55:26:e6:16:9f:
f4:62:30:1a:62:27:ec:4f:73:c8:08:02:d2:1a:55:02:90:fd:
00:cc:bf:d5:d7:54:82:ca:e1:cf:6c:0e:ce:10:ba:6b:c9:dc:
53:dd:be:da:9e:90:44:36:c4:71:a8:d4:93:09:e0:33:03:ad:
88:50:d9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqdUdq+LXVYyGLwj3WxQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWMxMjJhOTI5MTdjZjk1M2ZmNWM1ZGU2YTFmZmUxMTk5
ZjEyMmMwHhcNMjYwMzI2MTUwMTA2WhcNMjYwMzI3MTUwMTA2WjAzMTEwLwYDVQQD
Eyg1YTllY2IyOWVkYmZjZGI2NTc4NWI3NjEwMDJkMGUwNjhhM2QwNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6OsuXb2sdT9/SZHhjD/TegdPOsB
aEZhpCBNdrmtJ6OkjwqtQGazvbJu3V/epqeX1F2hzoNOg6REA6EkvP+F0GKXsN8n
wlvCQW7/xIdkhde46PWw4O256dtHpeRRSkbqe5eNIkPpX7sYAdWzgMFC9/17BY0+
Zy+QcFQasCbht1ET8wn5pvKx4EZBbbI+X4NRqBAPYdCL9rj/PnRPdpx2gIF0PrIu
GdiGC52C3DOBNIY4Z0qxuFCjacZVmxLAlEqMFAjx0Tm5UKLvg4pEQoysTZSalGgH
zw9dp4lZyLlUhLOedIRG2iEl44YUk1JQbywvdQp4YWjDY/GFNo8DarttKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqeyyntv822V4W3YQAtDgaKPQUsMB8GA1UdIwQY
MBaAFO6sEiqSkXz5U/9cXeah/+EZnxIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84ZWU0NTEtZjYyNi00MzI0LTk4ZmUt
NDFkMmNjN2I3MDM0LzEvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84ZWU0NTEtZjYyNi00MzI0LTk4ZmUtNDFkMmNjN2I3MDM0
LzEvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqe7+wdF
djp9j7OzNyXRrTWOu2DhRzbw4Gz5XLLtTvx+xdBq6H+PFOxDtcDvh2oh4qMjLW/q
0/W6tDcN5/j6U+ugzKRE2rsJDkLGmL3rGwdH12Z169Nd0sQ45q7HH1VnlOOiGB0Y
4qaKDZjRkcB24FqNBVieDXV1bh+834dGh3JkNZ06Yxw0sllZF7sE7NIFN7dkHVsV
qnaoOyqKn652mWxagNKhh4LlGxan1c+vDnuq4YNDZ61E/d6+Vu3xLNxBUlUm5haf
9GIwGmIn7E9zyAgC0hpVApD9AMy/1ddUgsrhz2wOzhC6a8ncU92+2p6QRDbEcajU
kwngMwOtiFDZ/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:24 2026 by rpki-client