Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: VgZ/qm9GIySj3L8TyZ19wYyfWD9TmivV1rBGMtQSmgM=
Subject key identifier: 7D:0B:FE:3F:D9:B4:33:DE:E2:FC:BB:F4:D2:66:8B:17:57:30:B2:CC
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019D24A798CED3BAFE90EACBBC1C8B0EB783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 0509
Signing time: Wed 25 Mar 2026 11:00:56 +0000
Manifest this update: Wed 25 Mar 2026 11:00:56 +0000
Manifest next update: Thu 26 Mar 2026 11:00:56 +0000
Files and hashes: 1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: 5qtvITqDZunJO851LsTN8YoHlUHBmV2kMDkHanh9Lgk=)
3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:98:ce:d3:ba:fe:90:ea:cb:bc:1c:8b:0e:b7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Mar 25 11:00:56 2026 GMT
Not After : Mar 26 11:00:56 2026 GMT
Subject: CN=7d0bfe3fd9b433dee2fcbbf4d2668b175730b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:b8:c2:a4:2a:f3:d0:bf:53:8e:9e:19:21:
f9:bd:1d:55:c4:6e:e0:cc:fb:ec:8b:ab:b7:dd:23:
d0:30:f1:12:34:82:4d:84:57:ce:9e:6e:8a:55:06:
a7:1a:80:c7:17:e0:b8:5e:f4:01:b9:60:17:c9:1f:
8f:ab:32:5b:39:c6:87:06:b0:aa:36:b5:12:d8:ad:
c6:3a:cc:16:89:c1:8a:67:6f:48:09:6d:d6:dd:7e:
ea:a3:16:31:b4:95:d8:30:8b:9b:52:83:87:98:be:
b7:b8:d2:9c:9b:f5:b8:57:f5:28:dc:9e:2f:f1:84:
5b:52:75:6f:9a:f3:cc:72:e5:d2:ac:a8:dc:5f:85:
7f:eb:ba:df:00:49:8a:26:2c:1c:94:17:2b:86:10:
86:da:62:be:e3:29:f8:eb:61:a4:56:b5:a2:e7:58:
30:18:70:16:c4:cf:e9:61:c9:01:4e:29:cd:e4:e1:
69:9b:ab:20:ad:d1:b9:0c:a6:98:47:10:3e:0f:a7:
8b:9d:52:31:46:40:c8:4f:d3:25:ac:b8:c1:ac:b1:
ac:d9:ff:16:2b:72:2f:17:44:91:1a:7b:2e:e6:d7:
76:ef:13:c5:cd:79:68:aa:da:82:a0:bb:11:b1:ff:
bc:72:ff:cb:53:44:ba:82:c3:82:6b:1d:da:3b:e0:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:FE:3F:D9:B4:33:DE:E2:FC:BB:F4:D2:66:8B:17:57:30:B2:CC
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0b:35:cb:ca:41:32:a9:f4:d8:68:a9:a5:a8:d1:e4:80:32:
19:ef:c9:49:d4:ba:39:20:95:fb:b0:a1:c1:b8:20:d2:1f:14:
b1:57:48:fd:2a:98:b8:56:f8:cf:57:95:eb:d3:a3:c6:ea:9f:
60:4e:45:42:b9:f9:ab:61:70:dc:80:e3:6f:d7:9f:09:09:b0:
07:15:83:59:7e:e5:7a:c8:61:2f:40:48:c9:7b:8c:88:43:72:
e9:a9:1f:44:90:39:5b:8d:b0:31:98:14:f5:57:20:40:79:dc:
3c:2d:b4:0c:18:b6:ca:14:4a:8c:bf:9e:14:9d:ca:d1:32:8c:
a2:c0:95:36:d7:5c:2c:f3:9e:d1:15:1e:0d:c6:6d:49:50:e0:
b4:33:4a:aa:17:b3:17:01:73:38:ca:db:3f:2f:d0:7d:3f:33:
af:c3:9d:98:f1:e9:ee:17:35:94:5c:7d:48:81:e1:2d:01:37:
54:5e:38:4c:2d:15:f7:08:2b:2c:4b:ea:53:1e:14:62:1e:55:
c9:2c:7a:a8:e3:c7:d4:f3:42:7b:fc:54:45:5a:65:48:e0:fb:
6c:8d:04:05:cd:1f:2c:68:a1:6d:2b:f5:d3:86:62:fb:40:e7:
d4:05:b0:9b:84:83:17:b7:c8:ec:71:a3:1c:c2:4a:e6:bc:fe:
38:06:ee:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kp5jO07r+kOrLvByLDreDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx
MzcyZTYwHhcNMjYwMzI1MTEwMDU2WhcNMjYwMzI2MTEwMDU2WjAzMTEwLwYDVQQD
Eyg3ZDBiZmUzZmQ5YjQzM2RlZTJmY2JiZjRkMjY2OGIxNzU3MzBiMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRa4wqQq89C/U46eGSH5vR1VxG7g
zPvsi6u33SPQMPESNIJNhFfOnm6KVQanGoDHF+C4XvQBuWAXyR+PqzJbOcaHBrCq
NrUS2K3GOswWicGKZ29ICW3W3X7qoxYxtJXYMIubUoOHmL63uNKcm/W4V/Uo3J4v
8YRbUnVvmvPMcuXSrKjcX4V/67rfAEmKJiwclBcrhhCG2mK+4yn462GkVrWi51gw
GHAWxM/pYckBTinN5OFpm6sgrdG5DKaYRxA+D6eLnVIxRkDIT9MlrLjBrLGs2f8W
K3IvF0SRGnsu5td27xPFzXloqtqCoLsRsf+8cv/LU0S6gsOCax3aO+CwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0L/j/ZtDPe4vy79NJmixdXMLLMMB8GA1UdIwQY
MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt
ZDc1ODI1ODliYjU5LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5
LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQs1y8pB
Mqn02GippajR5IAyGe/JSdS6OSCV+7Chwbgg0h8UsVdI/SqYuFb4z1eV69Ojxuqf
YE5FQrn5q2Fw3IDjb9efCQmwBxWDWX7leshhL0BIyXuMiENy6akfRJA5W42wMZgU
9VcgQHncPC20DBi2yhRKjL+eFJ3K0TKMosCVNtdcLPOe0RUeDcZtSVDgtDNKqhez
FwFzOMrbPy/QfT8zr8OdmPHp7hc1lFx9SIHhLQE3VF44TC0V9wgrLEvqUx4UYh5V
ySx6qOPH1PNCe/xURVplSOD7bI0EBc0fLGihbSv104Zi+0Dn1AWwm4SDF7fI7HGj
HMJK5rz+OAbuJQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:44 2026 by rpki-client