Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
File: 7pl3APBqqbf8Ia67FWIpnVpiXdw.mft (raw, json)
Hash identifier: CfklkYIdOSV0IhTSntTeKxakF3dFu16F2Dlq1wzfx7E=
Subject key identifier: 90:F0:B9:83:B2:9F:68:C7:B6:65:A4:59:B1:63:4D:9E:06:BA:92:3C
Authority key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
Certificate issuer: /CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Certificate serial: 019E1CEB4F4455E1D12FF412B8099B1D0043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
Manifest number: 0234
Signing time: Tue 12 May 2026 16:00:43 +0000
Manifest this update: Tue 12 May 2026 16:00:43 +0000
Manifest next update: Wed 13 May 2026 16:00:43 +0000
Files and hashes: 1: 7pl3APBqqbf8Ia67FWIpnVpiXdw.crl (hash: 8ajB03YNDPAWQVf6cwv/n2h9E1SkApsNtbBG1+GIeJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:4f:44:55:e1:d1:2f:f4:12:b8:09:9b:1d:00:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Validity
Not Before: May 12 16:00:43 2026 GMT
Not After : May 13 16:00:43 2026 GMT
Subject: CN=90f0b983b29f68c7b665a459b1634d9e06ba923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:a6:b1:87:a4:0a:38:3e:97:82:3a:75:25:
0b:ea:65:fb:67:62:72:7f:35:0e:75:c5:63:87:b1:
c7:2e:94:97:3a:c1:04:2d:92:77:b6:fd:a3:ae:fc:
0e:60:dc:30:1b:2e:5a:c7:ba:f9:4c:a7:bf:d8:05:
bc:6b:10:8a:ad:88:4a:90:c0:da:65:3b:05:6d:76:
3d:03:58:2d:5d:b1:2d:2f:a5:41:a7:3f:49:3b:e8:
50:5a:3a:3b:78:25:4c:a1:8d:1b:2a:bb:6b:7a:76:
8b:ed:be:97:cd:4a:42:e7:0c:36:2b:18:0f:c6:d6:
21:7b:99:03:05:ee:16:b9:a4:e0:8d:f9:d7:7b:80:
d4:47:65:cc:ef:54:24:8e:42:b9:24:74:31:97:99:
46:b8:1e:dc:04:62:7d:ad:50:5f:d2:cc:62:c8:bf:
4b:3b:3b:0c:02:99:bc:25:71:66:fa:b0:0c:ae:06:
05:e2:20:64:85:1a:d1:5b:87:c3:04:e2:67:bb:e2:
68:6e:71:8b:81:ab:a6:74:07:e3:f6:e4:07:a5:dd:
d2:3c:74:81:3a:18:7c:b7:8c:59:58:b1:53:7c:0c:
e6:47:0a:45:2a:af:df:2d:f6:49:f8:57:a8:d3:c2:
38:e4:59:70:72:f6:cd:d3:1f:eb:97:d7:20:a9:d4:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:B9:83:B2:9F:68:C7:B6:65:A4:59:B1:63:4D:9E:06:BA:92:3C
X509v3 Authority Key Identifier:
keyid:EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1d:0c:9c:0b:2d:dd:c3:f4:53:8e:10:19:d1:1f:9a:26:a0:
04:0f:a9:7f:9b:7f:50:a5:56:58:19:24:0e:c6:c2:a4:4c:7a:
6a:c2:b1:f6:e2:b6:78:75:65:0e:46:0f:ed:ed:60:40:ce:ef:
b4:c0:5f:92:4e:93:16:9f:8f:ac:c5:5a:b5:43:75:79:f0:aa:
dd:09:e4:27:d4:f2:c4:52:0a:18:31:7c:e4:ed:66:90:0a:83:
72:cb:84:1c:a6:51:94:39:2e:30:ee:66:b4:14:b2:17:d1:dc:
9c:f5:4e:4f:12:b8:c4:8c:df:ae:25:14:e9:ce:2b:e5:54:a3:
b5:eb:19:31:d9:cd:e4:88:65:3a:60:1d:b2:97:26:a0:68:c7:
a2:1f:4c:c7:5e:03:ed:74:ea:a4:53:7e:60:0f:b7:65:7e:33:
ad:0c:dc:8e:07:d9:9c:e2:2e:af:3f:2f:f5:c5:5b:60:91:c6:
9d:9e:09:81:62:cd:c5:fe:89:22:ed:d1:5d:f1:e2:ac:69:05:
c2:71:be:e6:9f:4b:48:d2:ad:c4:8d:0c:b5:24:e1:9e:03:33:
67:44:9b:12:e8:d7:cc:cb:60:20:26:2c:29:b3:c9:c6:86:08:
eb:88:14:3c:15:1a:6d:4a:83:d8:58:62:3f:dd:83:50:1d:1e:
d8:59:1f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c609EVeHRL/QSuAmbHQBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOTk3NzAwZjA2YWE5YjdmYzIxYWViYjE1NjIyOTlkNWE2
MjVkZGMwHhcNMjYwNTEyMTYwMDQzWhcNMjYwNTEzMTYwMDQzWjAzMTEwLwYDVQQD
Eyg5MGYwYjk4M2IyOWY2OGM3YjY2NWE0NTliMTYzNGQ5ZTA2YmE5MjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7KmsYekCjg+l4I6dSUL6mX7Z2Jy
fzUOdcVjh7HHLpSXOsEELZJ3tv2jrvwOYNwwGy5ax7r5TKe/2AW8axCKrYhKkMDa
ZTsFbXY9A1gtXbEtL6VBpz9JO+hQWjo7eCVMoY0bKrtrenaL7b6XzUpC5ww2KxgP
xtYhe5kDBe4WuaTgjfnXe4DUR2XM71QkjkK5JHQxl5lGuB7cBGJ9rVBf0sxiyL9L
OzsMApm8JXFm+rAMrgYF4iBkhRrRW4fDBOJnu+JobnGLgaumdAfj9uQHpd3SPHSB
Ohh8t4xZWLFTfAzmRwpFKq/fLfZJ+Feo08I45FlwcvbN0x/rl9cgqdSMkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDwuYOyn2jHtmWkWbFjTZ4GupI8MB8GA1UdIwQY
MBaAFO6ZdwDwaqm3/CGuuxViKZ1aYl3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3BsM0FQQnFxYmY4SWE2N0ZXSXBuVnBpWGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yOTA2YWYtYzhjOC00NDQ2LWFhOTct
MzgzMGI1M2YyNjVkLzEvN3BsM0FQQnFxYmY4SWE2N0ZXSXBuVnBpWGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yOTA2YWYtYzhjOC00NDQ2LWFhOTctMzgzMGI1M2YyNjVk
LzEvN3BsM0FQQnFxYmY4SWE2N0ZXSXBuVnBpWGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeR0MnAst
3cP0U44QGdEfmiagBA+pf5t/UKVWWBkkDsbCpEx6asKx9uK2eHVlDkYP7e1gQM7v
tMBfkk6TFp+PrMVatUN1efCq3QnkJ9TyxFIKGDF85O1mkAqDcsuEHKZRlDkuMO5m
tBSyF9HcnPVOTxK4xIzfriUU6c4r5VSjtesZMdnN5IhlOmAdspcmoGjHoh9Mx14D
7XTqpFN+YA+3ZX4zrQzcjgfZnOIurz8v9cVbYJHGnZ4JgWLNxf6JIu3RXfHirGkF
wnG+5p9LSNKtxI0MtSThngMzZ0SbEujXzMtgICYsKbPJxoYI64gUPBUabUqD2Fhi
P92DUB0e2FkfMQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:08:14 2026 by rpki-client