Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: 3eUEKgXjLmD76UzajtePI1uqxaEjP/czUhg4NTxi4Cw=
Subject key identifier: 63:00:AA:3A:FB:1B:23:75:57:93:A7:1A:97:87:63:B0:08:0A:0D:55
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 019D27A93386377504FCE76E6EDA435B7DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:33 +0000
Manifest this update: Thu 26 Mar 2026 01:01:33 +0000
Manifest next update: Fri 27 Mar 2026 01:01:33 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: B6bxFXyCCItz2QM8h/zhqt0yBuwOmdNm4tOwgHmxLmw=)
2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:33:86:37:75:04:fc:e7:6e:6e:da:43:5b:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Mar 26 01:01:33 2026 GMT
Not After : Mar 27 01:01:33 2026 GMT
Subject: CN=6300aa3afb1b23755793a71a978763b0080a0d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:d5:51:c7:f4:23:50:05:21:cf:f6:45:a6:
c6:d2:73:7a:49:34:b6:9d:e7:83:47:87:77:7a:d2:
3d:37:97:6f:72:5b:12:3a:a5:e9:21:1c:4a:f6:e5:
08:64:17:00:e4:8b:c7:97:1b:39:cd:a9:c9:71:2b:
41:45:a9:e8:e3:f9:74:a8:05:63:6f:37:88:ce:97:
56:e1:cc:57:9b:0c:51:18:26:ce:e5:bf:e6:3f:e1:
7d:a5:5b:ab:68:5c:ea:18:5c:3a:ed:d0:5d:13:b1:
e9:32:68:67:14:93:5f:30:77:05:f5:a1:07:d9:bb:
38:47:cd:8b:d9:94:7f:8f:7e:9f:f8:ae:cc:44:8e:
03:b8:af:7f:0a:10:f2:81:0d:cf:0a:3c:c5:d8:9e:
f1:67:78:06:63:5d:eb:b8:76:43:75:12:2e:ce:58:
9e:f8:a0:56:59:ff:1a:e7:83:1c:be:36:44:ab:d6:
6e:98:fc:9b:e9:de:22:02:7e:25:e3:3f:be:0f:cb:
c1:9a:6e:8b:88:93:7a:f1:43:ad:be:a2:3a:b7:ba:
16:f4:dc:01:f4:26:a9:ab:71:e9:a7:0f:62:03:17:
78:5b:a2:16:db:8d:7c:bf:0d:13:54:a6:26:29:c5:
eb:c7:63:f5:22:0f:54:04:8d:3b:ad:d9:a1:1f:e6:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:AA:3A:FB:1B:23:75:57:93:A7:1A:97:87:63:B0:08:0A:0D:55
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fe:20:ae:64:91:50:e6:72:91:2f:bc:5a:ba:37:00:67:7f:
3b:55:94:dd:34:41:83:26:3c:5a:4c:43:e3:01:2c:f1:e2:f4:
59:c3:a0:89:39:2e:8a:84:ea:1e:13:0a:c1:a8:a8:98:e7:67:
0c:fd:59:bf:db:a1:e8:2c:59:16:ef:da:c9:f4:6a:8b:23:37:
3c:02:72:f4:32:c7:2c:b4:c9:12:ae:60:06:d8:10:a0:69:fe:
dd:d5:0d:e4:66:8f:c0:14:cf:86:84:c4:93:c1:ba:01:76:3c:
9f:20:a4:22:2e:49:60:3e:29:8e:30:0e:b6:0d:9a:17:9f:b0:
d9:0a:99:0d:4f:03:9d:f7:53:17:55:be:ff:84:86:82:f3:d9:
31:5a:a1:8a:6f:8c:7b:a6:2d:93:bd:ea:36:c2:5c:d2:74:1c:
70:42:d9:89:25:ea:02:1d:d0:d2:08:16:2a:9c:ea:20:51:6e:
aa:93:ac:6a:ba:0a:a4:92:9a:fb:8c:e9:26:d4:40:7d:e7:e0:
76:30:10:60:a2:09:e3:be:e4:24:bc:7a:ee:ba:1d:df:bb:a0:
ca:bc:1e:74:d1:49:6c:78:5d:d1:f8:54:54:07:15:4b:b6:91:
24:96:a5:dd:cd:4d:b9:6a:15:0c:80:ae:41:62:d1:37:dd:9c:
00:8b:32:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqTOGN3UE/OdubtpDW338MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz
NzU4YzAwHhcNMjYwMzI2MDEwMTMzWhcNMjYwMzI3MDEwMTMzWjAzMTEwLwYDVQQD
Eyg2MzAwYWEzYWZiMWIyMzc1NTc5M2E3MWE5Nzg3NjNiMDA4MGEwZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NvVUcf0I1AFIc/2RabG0nN6STS2
neeDR4d3etI9N5dvclsSOqXpIRxK9uUIZBcA5IvHlxs5zanJcStBRano4/l0qAVj
bzeIzpdW4cxXmwxRGCbO5b/mP+F9pVuraFzqGFw67dBdE7HpMmhnFJNfMHcF9aEH
2bs4R82L2ZR/j36f+K7MRI4DuK9/ChDygQ3PCjzF2J7xZ3gGY13ruHZDdRIuzlie
+KBWWf8a54McvjZEq9ZumPyb6d4iAn4l4z++D8vBmm6LiJN68UOtvqI6t7oW9NwB
9Capq3Hppw9iAxd4W6IW2418vw0TVKYmKcXrx2P1Ig9UBI07rdmhH+bAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMAqjr7GyN1V5OnGpeHY7AICg1VMB8GA1UdIwQY
MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt
MDBjZDVlYzAwZDExLzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx
LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/4grmSR
UOZykS+8Wro3AGd/O1WU3TRBgyY8WkxD4wEs8eL0WcOgiTkuioTqHhMKwaiomOdn
DP1Zv9uh6CxZFu/ayfRqiyM3PAJy9DLHLLTJEq5gBtgQoGn+3dUN5GaPwBTPhoTE
k8G6AXY8nyCkIi5JYD4pjjAOtg2aF5+w2QqZDU8DnfdTF1W+/4SGgvPZMVqhim+M
e6Ytk73qNsJc0nQccELZiSXqAh3Q0ggWKpzqIFFuqpOsaroKpJKa+4zpJtRAfefg
djAQYKIJ477kJLx67rod37ugyrwedNFJbHhd0fhUVAcVS7aRJJal3c1NuWoVDICu
QWLRN92cAIsyAw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:30 2026 by rpki-client