Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: teVVIl9yzNeKLKdPOaQLc90lWsiSVBu51IHZsZJpTT0=
Subject key identifier: FC:73:1E:F4:36:2E:A3:C7:13:5B:16:39:E6:8E:15:84:AA:48:83:56
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 019D2A3BE8B85A2D836B704532CBAA50C510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 13:01:02 +0000
Manifest this update: Thu 26 Mar 2026 13:01:02 +0000
Manifest next update: Fri 27 Mar 2026 13:01:02 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: 99IVB2V8q3jxFeqR3tqEsbni8ou/ETdGc4q6ifIFSzg=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e8:b8:5a:2d:83:6b:70:45:32:cb:aa:50:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Mar 26 13:01:02 2026 GMT
Not After : Mar 27 13:01:02 2026 GMT
Subject: CN=fc731ef4362ea3c7135b1639e68e1584aa488356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:de:2c:7c:87:c3:4c:f8:b2:0f:34:79:b0:
cd:62:58:79:10:71:e7:2d:f0:88:27:e3:7b:fa:fd:
c7:1e:52:1d:ef:0d:fb:e8:b8:23:47:15:13:27:8e:
d9:e8:74:fb:ea:ef:2c:21:27:05:ba:e0:2a:e2:2a:
28:76:45:fc:8d:3b:c0:a2:53:e5:72:79:97:a4:81:
43:9a:c2:ac:f0:7b:30:57:06:40:2e:6a:46:b3:e6:
d7:70:8f:6a:c4:6c:ad:13:84:2a:bc:7d:b7:3d:2d:
80:94:e1:1b:e2:36:89:bc:05:fe:7e:8c:d0:ad:71:
df:f1:ea:3a:b9:fd:b1:cb:01:17:27:c2:6e:f3:75:
75:8e:40:a3:6b:21:e3:b1:49:5d:37:69:a1:06:3d:
3d:4e:15:77:da:d1:07:71:46:64:40:87:a6:08:67:
cf:51:b1:5e:65:f9:60:42:5b:a2:44:0a:68:f2:65:
e8:10:af:a8:1e:c7:7b:73:d6:e1:bf:d4:61:99:29:
da:e2:1f:1d:d9:bb:1b:64:c0:32:fe:9f:dc:92:d1:
0b:90:1c:2a:dd:46:83:40:16:c3:4d:ca:44:9a:f1:
58:ab:a2:66:3d:29:1e:82:9e:e5:68:ce:7f:a1:f2:
51:aa:df:72:76:f3:0b:b6:4d:10:db:3e:9b:5c:24:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:73:1E:F4:36:2E:A3:C7:13:5B:16:39:E6:8E:15:84:AA:48:83:56
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:00:f2:5c:26:24:97:f3:9b:d4:e4:0d:2f:3d:f0:38:2c:1b:
46:e8:d3:e8:bb:9a:8a:cc:db:80:36:dd:cf:04:54:4d:28:e1:
41:d3:0a:38:1a:f8:71:fe:66:e2:ee:cc:71:66:41:3c:21:4e:
ee:e8:66:20:52:b7:22:95:08:a4:75:c6:cd:a3:26:9b:a0:49:
9a:48:4a:7a:1f:f3:3d:86:eb:9f:cc:9a:8e:59:b0:0b:d0:48:
c6:e8:9a:93:a8:78:dd:54:62:1d:ba:dd:25:0f:05:a3:dc:e1:
1b:91:8d:eb:d4:f0:fc:a5:e7:38:67:40:17:7e:44:04:83:fc:
dc:ef:72:10:d1:28:ea:13:be:b7:d3:5a:ed:b2:85:a6:02:d1:
70:b4:d6:3c:81:e1:58:19:2b:58:51:43:95:62:7a:79:af:17:
4b:cc:ee:47:8f:b6:e3:99:4b:e0:b2:5e:2a:e4:b0:ec:a3:44:
a8:3f:ae:0f:e2:98:96:67:06:e7:da:20:96:61:05:15:91:69:
19:35:04:59:f6:48:8d:a6:4d:86:44:b4:c0:8f:1d:64:22:89:
83:2d:55:a2:37:ad:a9:86:87:f4:db:6e:b6:f1:35:2c:2c:11:
42:60:42:83:d6:2a:ab:9a:8b:74:45:f3:67:f3:08:0a:7f:96:
a8:2d:51:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO+i4Wi2Da3BFMsuqUMUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYzhhMWFhZDAyMDU5NDNhNDU3MjM4OWJiNzQzMzRlMWNh
Mjg0ODUwHhcNMjYwMzI2MTMwMTAyWhcNMjYwMzI3MTMwMTAyWjAzMTEwLwYDVQQD
EyhmYzczMWVmNDM2MmVhM2M3MTM1YjE2MzllNjhlMTU4NGFhNDg4MzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttzeLHyHw0z4sg80ebDNYlh5EHHn
LfCIJ+N7+v3HHlId7w376LgjRxUTJ47Z6HT76u8sIScFuuAq4ioodkX8jTvAolPl
cnmXpIFDmsKs8HswVwZALmpGs+bXcI9qxGytE4QqvH23PS2AlOEb4jaJvAX+fozQ
rXHf8eo6uf2xywEXJ8Ju83V1jkCjayHjsUldN2mhBj09ThV32tEHcUZkQIemCGfP
UbFeZflgQluiRApo8mXoEK+oHsd7c9bhv9RhmSna4h8d2bsbZMAy/p/cktELkBwq
3UaDQBbDTcpEmvFYq6JmPSkegp7laM5/ofJRqt9ydvMLtk0Q2z6bXCSm6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxzHvQ2LqPHE1sWOeaOFYSqSINWMB8GA1UdIwQY
MBaAFOzIoarQIFlDpFcjibt0M04cooSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEt
NGE2OGYyMzVjMzg4LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEtNGE2OGYyMzVjMzg4
LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQDyXCYk
l/Ob1OQNLz3wOCwbRujT6LuaiszbgDbdzwRUTSjhQdMKOBr4cf5m4u7McWZBPCFO
7uhmIFK3IpUIpHXGzaMmm6BJmkhKeh/zPYbrn8yajlmwC9BIxuiak6h43VRiHbrd
JQ8Fo9zhG5GN69Tw/KXnOGdAF35EBIP83O9yENEo6hO+t9Na7bKFpgLRcLTWPIHh
WBkrWFFDlWJ6ea8XS8zuR4+245lL4LJeKuSw7KNEqD+uD+KYlmcG59oglmEFFZFp
GTUEWfZIjaZNhkS0wI8dZCKJgy1VojetqYaH9NtutvE1LCwRQmBCg9Yqq5qLdEXz
Z/MICn+WqC1RnA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:23 2026 by rpki-client