Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: tokvbfDgqQJbRARjPD7PvIHHGcA10Izgc2S2illwOzo=
Subject key identifier: EA:AA:F4:AC:10:76:88:9F:B3:56:45:46:32:BB:51:41:E8:DA:D4:D2
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 019D265F6D050C625423843D237BBDF2E346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 135A
Signing time: Wed 25 Mar 2026 19:01:20 +0000
Manifest this update: Wed 25 Mar 2026 19:01:20 +0000
Manifest next update: Thu 26 Mar 2026 19:01:20 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: cnK1HUH23Il0aXmgvSRAlNRGYxQDR49rk3cKzi4pmvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6d:05:0c:62:54:23:84:3d:23:7b:bd:f2:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Mar 25 19:01:20 2026 GMT
Not After : Mar 26 19:01:20 2026 GMT
Subject: CN=eaaaf4ac1076889fb356454632bb5141e8dad4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:e6:b5:93:26:0c:cb:39:04:e8:a2:27:78:
d9:d5:bd:02:f2:a5:8f:29:2d:93:8d:21:fc:b4:07:
e4:85:15:c9:7e:43:7f:53:01:e6:f6:4c:70:33:a1:
ae:0e:05:1e:ec:bc:c2:ac:42:30:4d:20:b8:2b:26:
e5:47:b5:46:37:de:98:d7:81:66:9f:d7:d5:57:03:
a7:bb:f6:df:d1:9a:27:96:ef:d8:fb:3c:c8:12:e6:
91:27:7f:cd:95:a7:cd:bc:e0:dc:31:dd:07:5d:41:
01:f8:b8:2c:81:94:35:a2:5f:87:ba:ce:b8:e7:93:
3e:25:21:4f:75:8a:24:f9:a2:dd:1e:6d:d9:37:56:
c6:78:21:10:86:3d:87:17:84:7d:07:ff:fa:c2:06:
37:3b:4e:4d:cb:67:3d:b5:30:aa:99:b5:05:f3:41:
6c:ab:51:56:63:ce:cd:23:0d:e8:89:fe:be:37:c2:
73:7e:fa:6a:13:aa:5c:f8:86:72:ae:05:3a:70:08:
e6:dd:84:93:72:48:7a:0f:82:8d:11:3c:81:1d:47:
32:e8:99:ce:f9:63:a5:60:d5:e8:20:ab:9c:ce:90:
9f:5a:d8:67:97:11:91:ac:00:a0:6e:ee:c6:51:12:
0b:8b:33:c4:a3:99:07:18:aa:c5:48:41:82:15:4d:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AA:F4:AC:10:76:88:9F:B3:56:45:46:32:BB:51:41:E8:DA:D4:D2
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:5a:c7:2f:21:80:4d:96:b7:8a:37:4b:85:22:ca:25:04:
6e:1b:d4:2d:44:48:ca:13:8b:97:8d:e7:9d:f5:dd:de:13:83:
cd:0b:f8:1c:49:ea:5e:96:91:92:20:0c:95:70:6f:18:1e:73:
54:2b:44:5e:e3:d6:2c:f6:b4:46:a5:8b:83:b9:a0:ea:f3:c7:
96:7a:ef:50:72:af:7d:35:74:3f:04:97:7f:71:fe:d4:aa:fc:
a7:0b:e3:be:a9:16:6c:34:13:10:30:0e:74:8c:7f:38:15:55:
8f:48:6d:28:a6:43:f7:99:5a:60:99:a8:6a:ba:0e:9c:da:c1:
be:1b:89:35:18:b5:d9:c3:9b:69:f1:fd:e0:fe:88:cb:25:6d:
63:94:75:ac:aa:10:11:dc:37:a4:bb:40:f9:ed:51:17:c5:44:
9e:0e:f7:f7:5f:8e:e1:62:8f:6e:7e:48:11:7f:a8:7c:03:b6:
4f:c7:39:ad:ce:83:38:bf:8b:98:35:be:a4:5f:be:18:5e:c8:
b7:5e:39:f2:51:eb:06:5d:13:fa:72:cc:ba:cd:9a:0e:a6:f1:
5d:79:ff:24:a2:e9:cc:55:d2:5e:0e:17:2c:98:7f:bf:ed:b1:
da:07:a8:8b:7a:dc:48:ad:6b:41:3a:3e:da:be:c5:93:b8:c1:
2b:23:1c:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX20FDGJUI4Q9I3u98uNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjMzODdiZTZkMjBkNGEyY2UxM2NjMDkyZTg3Zjc3N2I4
Yjk5NTYwHhcNMjYwMzI1MTkwMTIwWhcNMjYwMzI2MTkwMTIwWjAzMTEwLwYDVQQD
EyhlYWFhZjRhYzEwNzY4ODlmYjM1NjQ1NDYzMmJiNTE0MWU4ZGFkNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8jmtZMmDMs5BOiiJ3jZ1b0C8qWP
KS2TjSH8tAfkhRXJfkN/UwHm9kxwM6GuDgUe7LzCrEIwTSC4KyblR7VGN96Y14Fm
n9fVVwOnu/bf0Zonlu/Y+zzIEuaRJ3/NlafNvODcMd0HXUEB+LgsgZQ1ol+Hus64
55M+JSFPdYok+aLdHm3ZN1bGeCEQhj2HF4R9B//6wgY3O05Ny2c9tTCqmbUF80Fs
q1FWY87NIw3oif6+N8JzfvpqE6pc+IZyrgU6cAjm3YSTckh6D4KNETyBHUcy6JnO
+WOlYNXoIKuczpCfWthnlxGRrACgbu7GURILizPEo5kHGKrFSEGCFU1fQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqq9KwQdoifs1ZFRjK7UUHo2tTSMB8GA1UdIwQY
MBaAFAuzOHvm0g1KLOE8wJLof3d7i5lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgt
NDQwNGQ3ZWU3MTIyLzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgtNDQwNGQ3ZWU3MTIy
LzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmFaxy8h
gE2Wt4o3S4UiyiUEbhvULURIyhOLl43nnfXd3hODzQv4HEnqXpaRkiAMlXBvGB5z
VCtEXuPWLPa0RqWLg7mg6vPHlnrvUHKvfTV0PwSXf3H+1Kr8pwvjvqkWbDQTEDAO
dIx/OBVVj0htKKZD95laYJmoaroOnNrBvhuJNRi12cObafH94P6IyyVtY5R1rKoQ
Edw3pLtA+e1RF8VEng7391+O4WKPbn5IEX+ofAO2T8c5rc6DOL+LmDW+pF++GF7I
t1458lHrBl0T+nLMus2aDqbxXXn/JKLpzFXSXg4XLJh/v+2x2geoi3rcSK1rQTo+
2r7Fk7jBKyMcqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:31 2026 by rpki-client