Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: EjFlTM9zk+28emWGK7zn7kPsAZbGouAFuszt2a38q4I=
Subject key identifier: FA:9A:3A:00:F7:82:6D:ED:24:7B:B7:E8:33:1A:1C:C5:87:4F:49:DD
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019D28F33E35BCCB1BB02D5E48CF5C964EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0C0B
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: tm3DII0JEcMr9WT3tzzEVuklEBcOkvZTqCHIpXR21zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3e:35:bc:cb:1b:b0:2d:5e:48:cf:5c:96:4e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=fa9a3a00f7826ded247bb7e8331a1cc5874f49dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:df:fb:3e:11:e7:58:b9:bc:c4:b0:62:5a:
9b:ea:25:35:05:81:89:a8:73:65:1c:f3:4d:f0:6d:
ae:34:95:f7:09:4b:8f:17:45:3a:32:58:d6:a6:2f:
77:2d:2d:4b:62:a9:d9:99:5a:89:37:ba:9d:8e:65:
bf:fe:d8:43:39:bc:5e:c3:ef:f9:a0:a5:59:5d:f6:
92:58:3b:db:7f:1f:a5:29:f7:e3:06:3d:da:cd:1c:
bf:77:87:3e:0f:b4:c1:48:48:b3:dd:6a:8a:62:be:
76:4c:1f:df:07:41:37:d7:fa:53:3e:5e:33:70:30:
70:7b:ec:23:94:a8:e8:6f:2c:21:24:58:b0:e7:73:
36:13:fd:0a:f8:89:a1:a2:5e:e3:6d:03:28:d2:a8:
1b:fb:5a:74:c7:02:18:51:cb:2e:b6:7b:27:37:9b:
fa:e0:79:b0:0f:90:1a:ef:ba:f7:38:b6:0e:55:63:
34:b1:36:2c:e5:96:aa:7d:d9:fb:5f:15:6e:0c:af:
a5:d7:c5:e4:af:a6:00:d7:1f:c2:a1:4a:fb:05:b6:
4e:7f:15:a9:b3:59:7e:d3:45:43:15:a9:a8:fe:28:
73:48:ed:27:27:d4:b2:d9:26:58:e5:ba:2e:f4:cd:
4d:35:9f:48:95:ce:30:7a:e1:ac:bd:3b:7f:b4:71:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:3A:00:F7:82:6D:ED:24:7B:B7:E8:33:1A:1C:C5:87:4F:49:DD
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e8:1c:45:36:44:9f:d8:30:fc:9b:1b:a2:63:c6:c1:cc:af:
a5:57:3f:b4:d4:be:45:1a:a2:de:12:94:fc:f8:2b:72:ef:68:
6d:09:3d:00:be:62:f4:85:34:d2:db:c9:fe:e1:73:da:4e:d7:
29:72:34:0a:1b:c2:4b:3e:2f:dd:6c:21:ea:fe:47:34:36:1a:
76:a2:6a:72:cb:0e:1e:7f:1e:ef:fb:d8:9f:38:3e:c7:65:fa:
7d:03:59:6b:01:5a:11:5f:12:00:91:43:f4:ec:88:a7:22:4f:
2f:37:b0:e4:f1:28:63:46:f4:7a:a5:2e:ea:73:d2:db:a5:8c:
2f:ea:9f:3c:a4:d6:dd:20:0a:52:d6:4b:d8:72:55:74:01:42:
2d:93:b0:7c:a6:9e:b8:48:c4:6a:76:8f:0c:d4:dd:9a:d3:8e:
fb:01:d9:cd:27:36:e8:8f:af:7a:b0:d3:75:e8:87:ce:62:08:
31:08:5a:ed:b3:77:e0:e0:2a:90:9f:7d:49:3f:64:4d:c8:a5:
66:1b:72:46:38:ca:77:32:78:9e:df:3b:da:7e:85:52:22:34:
26:38:a5:ae:ae:2e:43:56:91:f3:b7:a4:19:d2:3c:fd:ee:71:
5e:fb:05:9a:58:15:16:d8:25:a9:7f:b3:dd:59:55:ac:d6:d7:
1c:3d:91:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8z41vMsbsC1eSM9clk7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOThkYzI1YWJkN2FiNjNlMzViNjI4ZWFhYzJhNTRkOTQ5
YTlmNDYwHhcNMjYwMzI2MDcwMjAyWhcNMjYwMzI3MDcwMjAyWjAzMTEwLwYDVQQD
EyhmYTlhM2EwMGY3ODI2ZGVkMjQ3YmI3ZTgzMzFhMWNjNTg3NGY0OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7nf+z4R51i5vMSwYlqb6iU1BYGJ
qHNlHPNN8G2uNJX3CUuPF0U6MljWpi93LS1LYqnZmVqJN7qdjmW//thDObxew+/5
oKVZXfaSWDvbfx+lKffjBj3azRy/d4c+D7TBSEiz3WqKYr52TB/fB0E31/pTPl4z
cDBwe+wjlKjobywhJFiw53M2E/0K+Imhol7jbQMo0qgb+1p0xwIYUcsutnsnN5v6
4HmwD5Aa77r3OLYOVWM0sTYs5Zaqfdn7XxVuDK+l18Xkr6YA1x/CoUr7BbZOfxWp
s1l+00VDFamo/ihzSO0nJ9Sy2SZY5bou9M1NNZ9Ilc4weuGsvTt/tHGwwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqaOgD3gm3tJHu36DMaHMWHT0ndMB8GA1UdIwQY
MBaAFOyY3CWr16tj41tijqrCpU2Ump9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEt
ZDViM2Q3ZmNjZmU0LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEtZDViM2Q3ZmNjZmU0
LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdegcRTZE
n9gw/JsbomPGwcyvpVc/tNS+RRqi3hKU/Pgrcu9obQk9AL5i9IU00tvJ/uFz2k7X
KXI0ChvCSz4v3Wwh6v5HNDYadqJqcssOHn8e7/vYnzg+x2X6fQNZawFaEV8SAJFD
9OyIpyJPLzew5PEoY0b0eqUu6nPS26WML+qfPKTW3SAKUtZL2HJVdAFCLZOwfKae
uEjEanaPDNTdmtOO+wHZzSc26I+verDTdeiHzmIIMQha7bN34OAqkJ99ST9kTcil
ZhtyRjjKdzJ4nt872n6FUiI0Jjilrq4uQ1aR87ekGdI8/e5xXvsFmlgVFtglqX+z
3VlVrNbXHD2RAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:33 2026 by rpki-client