Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: oDClqh8Fk3E3ntpnb4RRcEDQlfA+X/RAcmzb1H+vQAM=
Subject key identifier: 8B:A9:F0:15:F6:71:7E:63:2E:E8:DF:04:76:C6:42:D7:1C:B9:4C:9D
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 019D32634459975CF5BCF1E715D1615BC7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 0ADD
Signing time: Sat 28 Mar 2026 03:00:59 +0000
Manifest this update: Sat 28 Mar 2026 03:00:59 +0000
Manifest next update: Sun 29 Mar 2026 03:00:59 +0000
Files and hashes: 1: Gq2VB9PjY2d42VE1l06FJT2-xes.roa (hash: idiOLZ8yC3ZWBi2Z9igfWCRSUat/SpYrqd26vqS32rI=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: CBvDpI1Vfybnio9aRcAlen8RM30jZ1q8OaZZAJXGFzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:44:59:97:5c:f5:bc:f1:e7:15:d1:61:5b:c7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: Mar 28 03:00:59 2026 GMT
Not After : Mar 29 03:00:59 2026 GMT
Subject: CN=8ba9f015f6717e632ee8df0476c642d71cb94c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:9c:f5:b2:b4:45:b2:17:18:ee:2e:9b:4f:
05:a8:49:b6:bf:4e:3d:47:ea:60:8f:10:5d:08:ed:
99:b4:02:86:a0:36:37:66:22:a0:f5:c5:10:f3:6c:
97:52:ae:01:f0:23:74:9c:2b:40:de:c6:25:8e:00:
ea:56:73:6e:e7:1a:30:98:84:50:65:f0:95:24:ee:
5d:21:7b:2c:1b:d3:82:d4:a9:89:a7:f2:6c:df:56:
10:dc:60:04:80:b5:cb:89:48:73:fd:ac:7e:62:f5:
45:ca:d3:03:5c:40:44:89:05:b3:5d:cc:56:5f:cc:
09:1e:15:27:60:3b:3c:78:16:ff:76:27:e8:65:4e:
99:ed:45:54:2e:45:70:24:e7:0a:37:e1:e8:9d:8f:
a8:a7:11:24:07:2d:51:fb:3a:95:28:89:d9:9b:0b:
19:f7:e3:4c:e7:fe:fd:bf:47:a8:4b:f5:9d:0f:6d:
d1:1b:7f:65:9d:9a:3b:46:e6:0b:5e:e9:b0:9d:8e:
85:28:cf:ab:8d:fe:a8:41:5b:30:f6:85:ec:f9:83:
ee:92:8a:4a:f4:8a:02:4b:65:6a:57:c3:6a:81:2e:
6a:02:5f:18:c0:df:57:ca:19:2e:17:8a:a0:f7:06:
5f:c3:f0:06:55:37:b7:40:54:06:50:48:06:2d:c0:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A9:F0:15:F6:71:7E:63:2E:E8:DF:04:76:C6:42:D7:1C:B9:4C:9D
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:a4:8b:e0:fb:10:e1:cd:e1:65:7b:75:ac:51:eb:fe:8e:
c4:24:42:1a:0b:04:46:65:a4:30:9e:b7:46:33:8a:2c:40:ff:
46:7c:fb:ea:a1:13:29:69:4f:cf:7f:e7:d0:78:3f:93:58:b5:
ae:d5:f2:88:54:4b:0a:a0:85:4e:84:c8:35:7b:1e:20:01:e8:
10:13:a9:4d:05:83:9e:4e:82:6e:6e:b3:fd:f4:72:4d:c6:5a:
0e:7a:b0:2d:c6:0a:af:47:c9:0b:4b:8f:11:b8:96:47:a3:39:
7f:67:22:20:af:b6:88:47:2d:a4:be:f6:cd:19:4e:2b:fa:97:
c6:80:c6:4e:23:cb:59:25:35:ff:c2:96:51:43:68:89:b6:6d:
2a:42:63:af:67:b5:b9:9b:79:3b:a3:60:fe:33:02:2a:3d:71:
3f:ab:a7:a8:b4:42:8d:37:01:dd:5c:25:ca:8c:3c:cc:cc:15:
8f:47:71:2c:68:eb:c3:26:e1:3f:44:b1:53:a5:10:06:37:d6:
9a:b5:d6:12:64:22:fc:3a:c6:0f:c5:15:07:93:7d:6e:12:45:
17:b4:00:d1:8e:4a:a0:66:78:18:69:62:76:0b:18:9d:b0:05:
49:7a:d0:1b:a4:90:a1:ca:24:7b:9d:c9:9c:54:97:18:de:f8:
2a:23:c3:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yY0RZl1z1vPHnFdFhW8e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YjFkZWY2OTU4ODVlYWRlNWNjYzhiNGJlMmEwMmJiMTYw
NzllOWMwHhcNMjYwMzI4MDMwMDU5WhcNMjYwMzI5MDMwMDU5WjAzMTEwLwYDVQQD
Eyg4YmE5ZjAxNWY2NzE3ZTYzMmVlOGRmMDQ3NmM2NDJkNzFjYjk0YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mKc9bK0RbIXGO4um08FqEm2v049
R+pgjxBdCO2ZtAKGoDY3ZiKg9cUQ82yXUq4B8CN0nCtA3sYljgDqVnNu5xowmIRQ
ZfCVJO5dIXssG9OC1KmJp/Js31YQ3GAEgLXLiUhz/ax+YvVFytMDXEBEiQWzXcxW
X8wJHhUnYDs8eBb/difoZU6Z7UVULkVwJOcKN+HonY+opxEkBy1R+zqVKInZmwsZ
9+NM5/79v0eoS/WdD23RG39lnZo7RuYLXumwnY6FKM+rjf6oQVsw9oXs+YPukopK
9IoCS2VqV8NqgS5qAl8YwN9XyhkuF4qg9wZfw/AGVTe3QFQGUEgGLcCMSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIup8BX2cX5jLujfBHbGQtccuUydMB8GA1UdIwQY
MBaAFKex3vaViF6t5czItL4qArsWB56cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ODhjYWUtNWY5Ni00ODc1LTg3MDEt
OTQ0ZWNlYzdhNDIzLzEvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82ODhjYWUtNWY5Ni00ODc1LTg3MDEtOTQ0ZWNlYzdhNDIz
LzEvcDdIZTlwV0lYcTNsek1pMHZpb0N1eFlIbnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtOki+D7
EOHN4WV7daxR6/6OxCRCGgsERmWkMJ63RjOKLED/Rnz76qETKWlPz3/n0Hg/k1i1
rtXyiFRLCqCFToTINXseIAHoEBOpTQWDnk6Cbm6z/fRyTcZaDnqwLcYKr0fJC0uP
EbiWR6M5f2ciIK+2iEctpL72zRlOK/qXxoDGTiPLWSU1/8KWUUNoibZtKkJjr2e1
uZt5O6Ng/jMCKj1xP6unqLRCjTcB3Vwlyow8zMwVj0dxLGjrwybhP0SxU6UQBjfW
mrXWEmQi/DrGD8UVB5N9bhJFF7QA0Y5KoGZ4GGlidgsYnbAFSXrQG6SQocoke53J
nFSXGN74KiPD0Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:59 2026 by rpki-client