Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: 7Zwf64DTRkMU09//5NvQvUUukfDQhiTs/JPM2BZxusk=
Subject key identifier: 98:EE:9F:7F:29:BE:BA:89:CB:9E:FC:60:8F:D3:B0:21:79:5D:4B:49
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019D26CD596B535C6AE8C712B57E164D8171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: nkclIAQw0ZmGfCQ2JVZcO6InnghcvoZzq9gTBAxED1Y=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:59:6b:53:5c:6a:e8:c7:12:b5:7e:16:4d:81:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=98ee9f7f29beba89cb9efc608fd3b021795d4b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:61:fb:1d:d0:c7:f8:86:3e:d9:e8:86:31:
6d:e3:b7:db:00:20:ff:06:90:18:89:b2:62:9c:cc:
27:26:d6:3b:d1:fa:d6:75:f2:53:1b:03:22:7c:26:
fd:42:fe:11:96:74:b3:60:51:e4:77:f8:28:81:76:
db:a8:db:ca:2a:df:b2:fb:5b:61:61:57:cc:8f:29:
4b:7b:5c:e8:cf:8d:d7:81:14:20:02:d7:25:6d:af:
9d:64:d4:a4:20:f3:3a:ca:17:92:21:12:e3:12:7e:
61:5e:68:dc:f0:2e:46:e1:f3:93:75:77:19:94:86:
a4:6d:30:4d:f2:ca:76:4f:45:54:85:ca:64:fd:d4:
16:0e:cd:bd:f6:c7:8c:d8:fa:eb:00:e0:b2:ee:9a:
31:36:91:4c:9e:9c:1b:94:19:ea:da:59:11:b1:e5:
68:86:b1:c9:4f:a9:29:c9:ca:53:39:0a:de:bc:78:
dc:26:fb:d6:68:90:06:7d:59:6a:ec:43:8b:02:f0:
13:5f:bd:47:08:b6:64:f0:19:f9:fd:68:7c:3c:00:
16:55:31:93:62:43:c4:5e:55:94:3a:0f:53:11:34:
98:26:88:77:02:a1:08:98:c4:3b:ea:da:38:f9:0a:
00:a8:40:8b:01:c9:c7:67:d8:e5:d7:1c:c9:1c:65:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:9F:7F:29:BE:BA:89:CB:9E:FC:60:8F:D3:B0:21:79:5D:4B:49
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b0:7c:63:fc:81:30:db:ef:35:8c:17:42:2d:a8:11:f3:3b:
b8:73:ae:16:69:81:65:04:6b:b9:81:ac:7d:d3:ea:70:2d:16:
b1:e6:52:9e:d3:c7:c8:26:37:66:1e:59:8d:f7:ad:8b:90:62:
ae:1e:93:6e:fe:d8:ae:eb:54:38:23:be:51:3b:8e:96:20:d4:
a2:c2:5a:a4:a3:20:54:57:96:3f:b7:45:fe:85:9b:c5:42:7c:
87:59:d9:ba:12:ea:78:18:57:d9:48:d3:dc:50:0e:c3:56:1e:
de:16:0c:65:ef:67:57:01:9d:62:78:9d:db:67:8b:0a:06:e9:
ca:7d:21:db:5e:56:95:3e:60:d1:53:85:36:ab:b7:c6:1c:90:
b1:91:43:67:8e:b7:d8:bf:c9:b8:6d:1d:8a:e0:3f:9f:75:0b:
84:e2:39:4d:09:8a:8e:ea:42:55:36:24:76:dd:f6:af:7f:cf:
7d:2b:10:45:4a:2e:0b:f5:c5:c3:d4:82:95:b6:b5:6d:a3:7d:
60:cc:b6:e7:c6:42:cf:e0:59:1d:74:3c:d7:c8:b4:f4:bb:04:
8a:f0:6b:ec:4d:e5:17:5a:94:51:81:c3:2d:81:fb:4a:93:5b:
65:90:71:9e:a1:cd:28:d9:79:10:60:1e:28:14:15:b1:70:6a:
e0:c2:dd:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzVlrU1xq6McStX4WTYFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTEzMTRlMDRlYzk2NzZmMmI2MDI0OGUxYjliZDAyZWYw
MGUxNjgwHhcNMjYwMzI1MjEwMTI0WhcNMjYwMzI2MjEwMTI0WjAzMTEwLwYDVQQD
Eyg5OGVlOWY3ZjI5YmViYTg5Y2I5ZWZjNjA4ZmQzYjAyMTc5NWQ0YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ith+x3Qx/iGPtnohjFt47fbACD/
BpAYibJinMwnJtY70frWdfJTGwMifCb9Qv4RlnSzYFHkd/gogXbbqNvKKt+y+1th
YVfMjylLe1zoz43XgRQgAtclba+dZNSkIPM6yheSIRLjEn5hXmjc8C5G4fOTdXcZ
lIakbTBN8sp2T0VUhcpk/dQWDs299seM2PrrAOCy7poxNpFMnpwblBnq2lkRseVo
hrHJT6kpycpTOQrevHjcJvvWaJAGfVlq7EOLAvATX71HCLZk8Bn5/Wh8PAAWVTGT
YkPEXlWUOg9TETSYJoh3AqEImMQ76to4+QoAqECLAcnHZ9jl1xzJHGVyewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjun38pvrqJy578YI/TsCF5XUtJMB8GA1UdIwQY
MBaAFOxRMU4E7JZ28rYCSOG5vQLvAOFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2It
M2JiYmNhMzEwZDcxLzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2ItM2JiYmNhMzEwZDcx
LzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLB8Y/yB
MNvvNYwXQi2oEfM7uHOuFmmBZQRruYGsfdPqcC0WseZSntPHyCY3Zh5Zjfeti5Bi
rh6Tbv7YrutUOCO+UTuOliDUosJapKMgVFeWP7dF/oWbxUJ8h1nZuhLqeBhX2UjT
3FAOw1Ye3hYMZe9nVwGdYnid22eLCgbpyn0h215WlT5g0VOFNqu3xhyQsZFDZ463
2L/JuG0diuA/n3ULhOI5TQmKjupCVTYkdt32r3/PfSsQRUouC/XFw9SClba1baN9
YMy258ZCz+BZHXQ818i09LsEivBr7E3lF1qUUYHDLYH7SpNbZZBxnqHNKNl5EGAe
KBQVsXBq4MLdCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:35 2026 by rpki-client