Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: HP1nJ1GvhBzkZnvuMOYvzrQAYSLVSZGrpVIu7kcLTMs=
Subject key identifier: 70:16:14:CC:C2:D2:37:44:D2:3E:2A:E5:17:2A:A5:CD:94:82:47:CB
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019D273A96703CCC27B28BE7D2990C48AB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 08B8
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: 1-iYojE0-bkqoV5dZTp5mESZkuMc.roa (hash: IBrMOBEILaJ3aIFlHGFpIPbUN6/UuC5r0K5zqJd+Mnk=)
2: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: ZAPl/JQavWwRz8J6SfD5Yxe0Fk5lygNlgDD2Z/b35oI=)
3: atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa (hash: jkDG3raOa2YgMVxrQwlxDz2jPOeQPczc27crizlM5xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:96:70:3c:cc:27:b2:8b:e7:d2:99:0c:48:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=701614ccc2d23744d23e2ae5172aa5cd948247cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:39:50:fa:7d:5d:e1:02:6c:ab:12:86:74:6d:
5e:dd:f2:f7:a2:e2:e4:62:9d:d2:f6:23:ab:f5:f1:
38:c5:1f:7f:12:32:91:27:23:02:47:63:64:92:a1:
57:50:fe:f8:c0:b7:78:32:90:de:95:1a:3f:99:18:
47:e9:68:9b:ff:a3:d1:a1:28:bf:aa:39:f8:99:af:
dd:9c:be:6e:c5:29:1c:3e:73:77:79:79:20:0e:68:
31:90:81:72:37:8a:bf:67:48:15:86:65:93:60:11:
f3:12:80:ac:04:3f:9e:e4:56:b8:df:f5:b5:7c:2c:
09:63:b9:0c:2f:7a:30:20:a4:17:f6:5f:cb:fe:cf:
bc:d9:77:aa:f9:da:84:82:c3:16:c6:77:75:41:1b:
cf:97:4a:90:94:25:c7:06:0f:0b:7e:5e:85:a5:b9:
6f:c0:32:d2:66:91:1f:2d:2c:08:ba:95:32:bd:ed:
dd:bb:23:95:24:68:63:81:4d:c0:10:5a:9a:35:60:
03:cc:90:2b:09:70:61:36:45:42:87:04:a8:55:0a:
16:03:30:4d:7a:27:e8:05:ef:12:18:61:f8:b8:b3:
58:09:c4:06:65:fc:0f:36:b0:8a:87:a4:5d:44:3f:
78:b9:36:4e:ff:11:1e:f4:09:05:98:46:c8:3e:66:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:14:CC:C2:D2:37:44:D2:3E:2A:E5:17:2A:A5:CD:94:82:47:CB
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:18:b6:fd:3b:31:2c:4e:25:84:4a:bc:01:27:9d:02:28:bc:
12:c0:b0:0d:12:ec:5f:58:1d:80:eb:b3:3c:60:ba:51:23:b7:
ac:e5:61:04:f4:78:42:43:d0:54:7c:f4:d1:bd:dc:74:fa:7c:
af:27:cc:6c:0a:67:0a:a1:bc:4d:0d:8d:e1:f4:8f:23:5b:0c:
52:be:b3:4b:c3:59:6a:44:e8:a2:8f:8e:c6:79:b8:a6:00:78:
65:63:25:29:bd:c6:b0:9c:c3:cd:15:8a:0d:d4:42:13:b4:b4:
26:1c:78:6e:99:e8:e2:5f:56:4b:84:ba:ef:29:94:26:01:d7:
8a:c3:98:55:9a:b7:54:49:1d:a2:f4:94:ed:8f:17:9d:27:70:
33:98:2f:86:c6:73:f8:c0:ab:d2:c7:b2:c2:8a:76:1c:eb:19:
51:d9:16:1e:00:51:50:5a:63:55:71:57:cc:c9:2c:1b:0a:d9:
81:4d:b2:af:69:1d:54:7f:9b:f6:ce:3a:1f:4d:a7:c5:0b:35:
e2:d3:f0:66:d7:5d:4f:7a:33:8c:4a:3c:08:46:48:93:37:b1:
07:ad:e3:6a:a9:05:e5:bd:d5:eb:d1:d0:62:d8:08:a6:56:1a:
a9:ae:31:89:b3:e8:a2:81:fc:be:3c:3d:95:34:9d:a1:31:74:
54:eb:d7:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpZwPMwnsovn0pkMSKsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2
NzcyYjAwHhcNMjYwMzI1MjMwMDQ0WhcNMjYwMzI2MjMwMDQ0WjAzMTEwLwYDVQQD
Eyg3MDE2MTRjY2MyZDIzNzQ0ZDIzZTJhZTUxNzJhYTVjZDk0ODI0N2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjlQ+n1d4QJsqxKGdG1e3fL3ouLk
Yp3S9iOr9fE4xR9/EjKRJyMCR2NkkqFXUP74wLd4MpDelRo/mRhH6Wib/6PRoSi/
qjn4ma/dnL5uxSkcPnN3eXkgDmgxkIFyN4q/Z0gVhmWTYBHzEoCsBD+e5Fa43/W1
fCwJY7kML3owIKQX9l/L/s+82Xeq+dqEgsMWxnd1QRvPl0qQlCXHBg8Lfl6Fpblv
wDLSZpEfLSwIupUyve3duyOVJGhjgU3AEFqaNWADzJArCXBhNkVChwSoVQoWAzBN
eifoBe8SGGH4uLNYCcQGZfwPNrCKh6RdRD94uTZO/xEe9AkFmEbIPmYtwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAWFMzC0jdE0j4q5Rcqpc2UgkfLMB8GA1UdIwQY
MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt
MjZjZGM1NTY0NGQ0LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0
LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhi2/Tsx
LE4lhEq8ASedAii8EsCwDRLsX1gdgOuzPGC6USO3rOVhBPR4QkPQVHz00b3cdPp8
ryfMbApnCqG8TQ2N4fSPI1sMUr6zS8NZakTooo+Oxnm4pgB4ZWMlKb3GsJzDzRWK
DdRCE7S0Jhx4bpno4l9WS4S67ymUJgHXisOYVZq3VEkdovSU7Y8XnSdwM5gvhsZz
+MCr0seywop2HOsZUdkWHgBRUFpjVXFXzMksGwrZgU2yr2kdVH+b9s46H02nxQs1
4tPwZtddT3ozjEo8CEZIkzexB63jaqkF5b3V69HQYtgIplYaqa4xibPoooH8vjw9
lTSdoTF0VOvXEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:52 2026 by rpki-client