Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File: t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier: VQs3ONENmfmgV02LbvwY8CCrKOJV+RuMu69bh3e9zDE=
Subject key identifier: 22:14:D2:50:32:CD:73:98:62:93:62:00:C5:26:52:79:00:AD:9B:95
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial: 019D29CE23B9A653F9814797C036E96F424A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: 6KkpY3UMlsn4lmwRTfmLoXlCvZo.roa (hash: h6bDcvlLQ2oWH39OehL7j4jN9y68+hpsxgqt/2oRmFc=)
2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: +FwdoZyOW8EkyL0/XFy2vmxkeOp+sZrtUR73+R2PsB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:23:b9:a6:53:f9:81:47:97:c0:36:e9:6f:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=2214d25032cd739862936200c526527900ad9b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:a5:38:ff:5a:eb:a1:03:2b:86:3f:f1:ff:
dc:19:3a:62:0b:7d:44:c5:4a:b6:ec:07:5c:cf:c2:
5f:d0:79:b4:fe:6f:91:1b:da:e9:66:db:7f:b8:45:
52:dc:cb:eb:26:c1:f5:2a:07:55:e1:de:24:a4:d5:
f3:b9:28:08:49:82:8d:3b:ca:ba:32:6e:fc:e3:2b:
85:55:27:26:1b:97:b0:91:80:bf:48:31:93:5d:13:
a8:cf:0a:ce:87:85:47:08:cc:fa:f2:20:71:12:4b:
19:85:77:72:61:8a:ba:38:78:68:31:0b:cc:91:d3:
d1:a1:25:9c:f3:48:a5:e8:3f:07:80:33:5a:a7:bb:
b3:be:fd:df:30:de:df:90:f6:cd:4b:cd:91:6e:be:
b8:fe:c1:a0:20:2f:8a:52:0f:ce:e0:af:84:93:2f:
31:f9:2a:75:65:c4:c8:55:ce:31:1a:3a:c1:ee:27:
8a:e2:69:5c:42:ff:43:c4:1d:f7:d8:62:b7:83:1f:
b6:4e:7b:e2:be:fa:d8:d4:9c:92:b8:c5:3c:c3:48:
3a:99:03:2b:b9:29:8d:88:46:65:19:62:58:af:2a:
ad:f7:a4:31:5a:a8:72:11:de:b3:69:f9:59:28:f2:
84:62:6c:2c:9d:4d:2d:74:69:b8:89:c4:a3:3c:0b:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:14:D2:50:32:CD:73:98:62:93:62:00:C5:26:52:79:00:AD:9B:95
X509v3 Authority Key Identifier:
keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:97:c8:41:59:5d:8e:d3:9d:6d:35:8e:43:b2:24:91:bd:f8:
19:cd:b5:1a:72:ac:0d:27:b2:9f:8c:c7:db:af:4c:b0:68:9c:
8e:76:4d:cd:a0:18:ec:2c:59:ef:c6:b9:26:61:97:b4:08:2b:
5a:cf:7e:dd:fd:0c:1c:54:75:b3:f8:40:31:59:ea:6c:bc:4d:
ad:93:c6:14:bb:cb:b6:eb:f4:6e:36:f4:98:56:db:69:13:b9:
9e:9b:70:77:c5:eb:5b:f7:af:65:9f:48:74:54:32:ce:4a:23:
46:af:c1:38:02:6b:7a:be:e6:09:88:5b:79:a1:6e:a3:ec:0e:
2d:21:3e:6d:00:bf:ee:5e:cc:4f:cf:e5:17:91:46:ca:bd:72:
02:b0:48:b0:c7:7d:d5:f1:23:a4:29:e8:f4:c0:14:7b:18:48:
a7:65:dc:bb:56:7f:c5:05:40:c0:b6:c6:3f:6a:b6:94:5c:9b:
9d:07:ff:36:2d:ed:f5:99:bc:68:71:2a:f7:1a:5f:08:74:f0:
5c:29:ab:06:0b:e4:af:4e:aa:5b:35:c1:b0:fc:05:22:59:57:
c9:79:7b:2d:3d:59:0d:02:6d:83:40:3b:06:4e:58:82:2c:79:
c6:c7:79:be:87:0c:84:5e:bf:d0:50:16:4d:70:fc:b3:9b:5e:
03:82:6b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pziO5plP5gUeXwDbpb0JKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YmMxYWRmYmYzNjI2NDhmYzYzNWMzMzMyZjM4M2JjYmMw
MWU3NzQwHhcNMjYwMzI2MTEwMTA4WhcNMjYwMzI3MTEwMTA4WjAzMTEwLwYDVQQD
EygyMjE0ZDI1MDMyY2Q3Mzk4NjI5MzYyMDBjNTI2NTI3OTAwYWQ5Yjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz+lOP9a66EDK4Y/8f/cGTpiC31E
xUq27Adcz8Jf0Hm0/m+RG9rpZtt/uEVS3MvrJsH1KgdV4d4kpNXzuSgISYKNO8q6
Mm784yuFVScmG5ewkYC/SDGTXROozwrOh4VHCMz68iBxEksZhXdyYYq6OHhoMQvM
kdPRoSWc80il6D8HgDNap7uzvv3fMN7fkPbNS82Rbr64/sGgIC+KUg/O4K+Eky8x
+Sp1ZcTIVc4xGjrB7ieK4mlcQv9DxB332GK3gx+2TnvivvrY1JySuMU8w0g6mQMr
uSmNiEZlGWJYryqt96QxWqhyEd6zaflZKPKEYmwsnU0tdGm4icSjPAuNBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIU0lAyzXOYYpNiAMUmUnkArZuVMB8GA1UdIwQY
MBaAFLe8Gt+/NiZI/GNcMzLzg7y8Aed0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUt
ZmQ2MDZiMDZhMDFhLzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUtZmQ2MDZiMDZhMDFh
LzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5fIQVld
jtOdbTWOQ7Ikkb34Gc21GnKsDSeyn4zH269MsGicjnZNzaAY7CxZ78a5JmGXtAgr
Ws9+3f0MHFR1s/hAMVnqbLxNrZPGFLvLtuv0bjb0mFbbaRO5nptwd8XrW/evZZ9I
dFQyzkojRq/BOAJrer7mCYhbeaFuo+wOLSE+bQC/7l7MT8/lF5FGyr1yArBIsMd9
1fEjpCno9MAUexhIp2Xcu1Z/xQVAwLbGP2q2lFybnQf/Ni3t9Zm8aHEq9xpfCHTw
XCmrBgvkr06qWzXBsPwFIllXyXl7LT1ZDQJtg0A7Bk5Ygix5xsd5vocMhF6/0FAW
TXD8s5teA4JrLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:32 2026 by rpki-client