Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: XfW9Kqum1bPojSOzGoYpyliEQdvSeW3vHIdE2JPxQOI=
Subject key identifier: B0:34:4E:A0:E8:16:A8:83:EE:16:77:1E:BE:31:79:DB:DB:EA:36:40
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 019D28BBA1C116272E4DE6E87A8D8E89C965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0D3A
Signing time: Thu 26 Mar 2026 06:01:18 +0000
Manifest this update: Thu 26 Mar 2026 06:01:18 +0000
Manifest next update: Fri 27 Mar 2026 06:01:18 +0000
Files and hashes: 1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: FmXy1+dbfpEH+tMY8amsmB3KBZcd8OuxabUa4m5WrzE=)
2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a1:c1:16:27:2e:4d:e6:e8:7a:8d:8e:89:c9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Mar 26 06:01:18 2026 GMT
Not After : Mar 27 06:01:18 2026 GMT
Subject: CN=b0344ea0e816a883ee16771ebe3179dbdbea3640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:c4:43:24:2e:4b:87:a3:fb:d7:fc:2e:92:
3f:10:24:27:c9:3e:97:cd:b8:2a:46:75:2d:45:21:
81:ac:20:8c:e1:a6:fe:0d:36:91:58:86:aa:4c:c8:
5a:f2:9e:fc:17:4e:e4:2d:85:cf:c2:f1:f6:f8:ac:
10:36:77:a6:ca:34:07:f3:60:aa:20:f7:61:a0:20:
c6:b2:73:5d:cc:3c:04:b3:ea:b6:e7:30:e5:0f:4a:
4c:b8:de:63:21:35:8c:7a:9d:08:1b:4b:84:1d:f1:
d0:55:a6:8d:ee:3a:66:ba:4c:4b:71:a0:bc:5b:f6:
f5:6c:93:87:86:45:5e:2a:96:8a:5b:68:eb:f7:ed:
e1:f9:7b:8e:b6:42:1a:fc:33:bf:87:f6:7a:9c:2d:
da:a7:ea:02:e5:76:a7:ad:33:41:13:14:32:3a:32:
9c:d7:44:55:03:d8:7b:fa:8e:0b:13:c8:c0:54:c0:
30:63:25:06:54:58:91:62:19:09:2b:e9:94:bb:a7:
69:45:e1:d6:ba:d2:da:3e:87:bf:0d:cc:b9:48:08:
f2:ff:e8:a1:75:4a:d1:38:c8:ad:67:cf:83:e9:83:
d0:f7:b0:fc:75:bc:3d:4f:14:bc:86:7a:49:b7:24:
7f:1d:a4:e7:cc:73:2b:45:83:57:f8:2c:70:70:c3:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:4E:A0:E8:16:A8:83:EE:16:77:1E:BE:31:79:DB:DB:EA:36:40
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:96:bc:a3:24:f7:0b:40:7a:ec:e4:95:ad:af:a2:e6:d2:1c:
14:0e:97:5e:f6:06:59:5b:e3:3b:76:07:35:e4:1e:5d:96:13:
ff:09:74:aa:5f:92:14:98:f5:76:1a:dc:f8:12:a9:da:ec:79:
5f:cd:99:ab:32:4f:5e:52:a4:b4:3d:93:f1:87:60:a6:fa:03:
25:1e:b4:50:a8:e3:ba:54:21:94:a7:c7:12:27:8a:17:de:39:
3c:8b:ce:df:9b:af:80:6d:a4:f1:c2:50:ba:be:14:92:79:53:
ef:57:6e:bd:6f:92:59:7d:d5:1f:5a:08:be:89:bb:77:91:02:
41:e9:cc:91:db:09:9b:d9:f4:d8:54:9f:3b:30:f8:9d:c6:2c:
fa:4f:99:9e:59:f0:c4:6c:f8:b1:86:9b:ce:fd:9c:78:e1:4c:
c2:29:6e:5d:b9:85:75:45:ff:72:17:03:4e:1b:4e:93:8a:01:
68:81:bf:ab:51:7b:59:27:4e:d0:d6:dd:6a:9d:4d:95:fc:71:
05:a7:ae:f6:9d:52:a7:8d:6f:23:f5:06:5d:c9:3a:d0:a3:a2:
f6:78:68:c6:08:37:93:44:1f:23:b3:dc:d6:f3:7e:6d:b8:39:
57:dd:15:0d:57:a2:b5:71:b9:ca:3e:6e:da:26:43:1f:8e:57:
c5:de:99:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6HBFicuTeboeo2OicllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0
MzVlY2UwHhcNMjYwMzI2MDYwMTE4WhcNMjYwMzI3MDYwMTE4WjAzMTEwLwYDVQQD
EyhiMDM0NGVhMGU4MTZhODgzZWUxNjc3MWViZTMxNzlkYmRiZWEzNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj7EQyQuS4ej+9f8LpI/ECQnyT6X
zbgqRnUtRSGBrCCM4ab+DTaRWIaqTMha8p78F07kLYXPwvH2+KwQNnemyjQH82Cq
IPdhoCDGsnNdzDwEs+q25zDlD0pMuN5jITWMep0IG0uEHfHQVaaN7jpmukxLcaC8
W/b1bJOHhkVeKpaKW2jr9+3h+XuOtkIa/DO/h/Z6nC3ap+oC5XanrTNBExQyOjKc
10RVA9h7+o4LE8jAVMAwYyUGVFiRYhkJK+mUu6dpReHWutLaPoe/Dcy5SAjy/+ih
dUrROMitZ8+D6YPQ97D8dbw9TxS8hnpJtyR/HaTnzHMrRYNX+CxwcMP5lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA0TqDoFqiD7hZ3Hr4xedvb6jZAMB8GA1UdIwQY
MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt
OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl
LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZa8oyT3
C0B67OSVra+i5tIcFA6XXvYGWVvjO3YHNeQeXZYT/wl0ql+SFJj1dhrc+BKp2ux5
X82ZqzJPXlKktD2T8YdgpvoDJR60UKjjulQhlKfHEieKF945PIvO35uvgG2k8cJQ
ur4UknlT71duvW+SWX3VH1oIvom7d5ECQenMkdsJm9n02FSfOzD4ncYs+k+Znlnw
xGz4sYabzv2ceOFMwiluXbmFdUX/chcDThtOk4oBaIG/q1F7WSdO0Nbdap1Nlfxx
Baeu9p1Sp41vI/UGXck60KOi9nhoxgg3k0QfI7Pc1vN+bbg5V90VDVeitXG5yj5u
2iZDH45Xxd6ZIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:32 2026 by rpki-client