Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier: RF+2SCzta+Tf9lArEwE7rfMgucMF9AQw5n1R3Il2Qls=
Subject key identifier: 96:53:82:E9:E7:9F:74:6F:61:02:3E:5B:CD:D3:F9:5D:35:FB:66:8D
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer: /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial: 019D28F2BA10CA8932D3DB34478C280243E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number: 0BE5
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: MynfBVXkhqupQdFkq37Vqdb+WpRhFAlcyg7uc6gCWrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ba:10:ca:89:32:d3:db:34:47:8c:28:02:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=965382e9e79f746f61023e5bcdd3f95d35fb668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:de:5a:21:1a:2b:b6:13:36:46:d9:70:97:
dd:5b:da:48:c6:0c:31:ab:71:35:67:f1:d2:3d:7a:
12:7f:4b:a5:42:05:14:4e:b5:7e:0e:b9:a4:49:13:
f4:55:57:ab:7b:ab:7e:a8:92:1e:53:a5:4d:04:fb:
ad:a5:29:2c:e1:58:0c:8d:fd:17:3b:76:a8:a0:73:
f0:48:4b:73:41:7e:33:03:89:f9:38:8a:aa:e0:fb:
52:f2:ba:eb:e4:fd:76:10:5a:05:34:b3:25:3e:54:
68:99:48:bf:be:61:19:9a:04:f0:65:ca:f4:5e:a9:
a8:ac:c5:a9:4d:00:cb:40:e4:47:9b:93:1b:92:65:
6f:04:69:51:b7:2b:e9:96:b3:8a:80:94:f9:05:81:
90:7a:93:2c:92:b8:33:27:9c:c1:d2:d8:2f:86:eb:
08:60:ea:90:55:2e:ed:f0:1a:a2:dd:bd:06:de:5d:
cc:12:19:3e:d3:10:cf:f1:3e:e9:83:13:0d:33:db:
a1:92:1d:ce:fd:a8:ca:7e:57:1c:52:f7:c0:32:04:
81:eb:dc:17:5f:de:ff:f6:d9:6e:8f:b4:f8:f8:fe:
d6:0d:64:61:95:ba:fd:3b:29:de:96:23:d2:c6:9f:
df:18:99:8f:d7:6e:fd:7c:2b:31:2a:46:7f:a2:84:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:82:E9:E7:9F:74:6F:61:02:3E:5B:CD:D3:F9:5D:35:FB:66:8D
X509v3 Authority Key Identifier:
keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:89:aa:e3:bc:a2:db:35:e0:29:17:be:d9:0b:04:3a:c0:bc:
86:19:b5:2e:5d:a6:ac:38:5b:cc:bd:75:db:a3:7e:61:9d:22:
42:72:8c:76:ea:57:40:30:71:c7:1d:ab:4a:e7:0e:64:b1:0a:
b8:2c:cc:61:8e:a2:48:79:7b:6a:23:7f:80:d3:27:a7:e3:63:
0f:7e:fc:72:61:dd:55:6e:d7:8c:5f:99:5d:ac:40:d1:9e:ea:
ab:da:49:ed:53:10:03:88:59:96:92:95:fb:24:d6:55:80:64:
7e:fe:92:05:16:7e:a2:fc:9e:4a:7e:a4:ff:44:15:7f:dc:2e:
66:87:54:8a:fd:57:96:53:81:e7:65:7b:a0:02:0d:f3:33:69:
c7:7c:4c:de:69:4e:e8:e3:d0:89:de:fa:04:bf:4c:09:63:67:
c0:e0:61:0d:d9:95:2e:5d:5a:ed:6e:c9:dc:7c:39:d7:a5:67:
4a:18:a3:e7:bb:bc:1e:38:f9:c5:57:82:a2:d7:cb:0e:c9:40:
5d:ee:77:d8:92:f1:cb:e4:2f:a3:e3:ad:fc:5e:f4:e0:eb:30:
d8:6c:07:ad:6d:c0:03:3c:9f:c1:f0:37:07:b7:9d:53:23:1d:
d9:e1:22:a2:62:96:75:4f:84:c8:21:ca:57:8d:f7:db:46:bc:
fa:9d:46:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8roQyoky09s0R4woAkPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM2ZDYyODRmMTE2NWQwOWViZWRiNDRkZTYxNzVmZTAz
M2I3NzQwHhcNMjYwMzI2MDcwMTI5WhcNMjYwMzI3MDcwMTI5WjAzMTEwLwYDVQQD
Eyg5NjUzODJlOWU3OWY3NDZmNjEwMjNlNWJjZGQzZjk1ZDM1ZmI2NjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r/eWiEaK7YTNkbZcJfdW9pIxgwx
q3E1Z/HSPXoSf0ulQgUUTrV+DrmkSRP0VVere6t+qJIeU6VNBPutpSks4VgMjf0X
O3aooHPwSEtzQX4zA4n5OIqq4PtS8rrr5P12EFoFNLMlPlRomUi/vmEZmgTwZcr0
XqmorMWpTQDLQORHm5MbkmVvBGlRtyvplrOKgJT5BYGQepMskrgzJ5zB0tgvhusI
YOqQVS7t8Bqi3b0G3l3MEhk+0xDP8T7pgxMNM9uhkh3O/ajKflccUvfAMgSB69wX
X97/9tluj7T4+P7WDWRhlbr9OyneliPSxp/fGJmP1279fCsxKkZ/ooTgEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZTgunnn3RvYQI+W83T+V01+2aNMB8GA1UdIwQY
MBaAFO4sbWKE8RZdCevttE3mF1/gM7d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUt
YzRmNTNlMTdkZGIwLzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUtYzRmNTNlMTdkZGIw
LzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfomq47yi
2zXgKRe+2QsEOsC8hhm1Ll2mrDhbzL1126N+YZ0iQnKMdupXQDBxxx2rSucOZLEK
uCzMYY6iSHl7aiN/gNMnp+NjD378cmHdVW7XjF+ZXaxA0Z7qq9pJ7VMQA4hZlpKV
+yTWVYBkfv6SBRZ+ovyeSn6k/0QVf9wuZodUiv1XllOB52V7oAIN8zNpx3xM3mlO
6OPQid76BL9MCWNnwOBhDdmVLl1a7W7J3Hw516VnShij57u8Hjj5xVeCotfLDslA
Xe532JLxy+Qvo+Ot/F704Osw2GwHrW3AAzyfwfA3B7edUyMd2eEiomKWdU+EyCHK
V43320a8+p1GDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:48 2026 by rpki-client