Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier: sIHUTWIs+9xZNBraN1ddqv77JUKB99QWDqPA8AEpTMw=
Subject key identifier: 03:3C:F9:E8:B5:19:6A:87:C5:75:D0:10:1D:D3:0E:C7:4D:31:17:78
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer: /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial: 019D2628574C83BB618CA8D0016779BECAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number: 0108
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: AGur7+4YUTsbkXk2EiR1635n+ee40tl6VtZUikD4f04=)
2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:57:4c:83:bb:61:8c:a8:d0:01:67:79:be:ca:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=033cf9e8b5196a87c575d0101dd30ec74d311778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:1e:2f:d8:0e:98:37:4f:f6:3b:6a:c5:40:
fa:1b:d3:50:1a:b1:7e:e1:a9:8e:85:a3:87:21:55:
a9:bc:48:dc:23:22:7b:60:a4:70:3c:56:a6:90:0d:
2f:bd:8e:a6:ce:4f:74:27:b8:35:45:8b:c0:ac:fb:
7d:ee:fa:bd:da:47:9c:48:a5:0d:1a:e9:4d:63:75:
56:b3:a8:b3:08:4d:dd:56:e9:1a:a6:30:be:5f:6e:
3f:c7:e1:ac:c0:09:e5:70:99:13:17:17:3d:d9:3e:
b1:59:85:a0:80:1f:18:77:8f:ab:7c:b3:b7:3a:2e:
4d:fa:e9:07:82:b7:40:8c:5a:71:9e:85:51:a0:bf:
b8:8e:e5:16:72:54:68:6d:c9:49:ab:39:ac:37:d9:
48:b7:f6:19:b3:ea:55:35:aa:ac:f5:44:be:40:e5:
b3:16:71:a9:1f:86:6c:35:3e:5b:55:0d:8b:6f:46:
38:05:5b:96:c9:6d:15:f9:12:6b:09:f3:4b:6f:94:
67:80:e1:94:6d:70:00:dd:33:b1:1d:85:51:47:ce:
1b:d3:f8:c6:1c:75:c6:9f:0c:8e:90:a4:ac:bd:3b:
9d:d5:a6:1e:45:41:44:4c:a8:df:69:22:be:59:8a:
ef:83:06:fd:2e:dd:13:b4:bb:65:17:3c:33:62:88:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:F9:E8:B5:19:6A:87:C5:75:D0:10:1D:D3:0E:C7:4D:31:17:78
X509v3 Authority Key Identifier:
keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8e:ae:bf:82:87:d8:46:39:ff:d3:b7:8c:c1:d0:54:78:22:
9c:5a:41:f0:22:5e:9a:9c:eb:a5:99:c0:31:9d:93:1a:fd:e7:
63:07:53:4d:ed:70:a2:55:ac:18:b3:12:ac:33:d3:1c:b8:86:
d8:07:49:40:41:f6:26:72:ab:82:ef:a8:ac:7d:49:bb:be:a0:
ae:ef:8c:78:2c:49:13:88:09:53:17:b2:71:11:5b:f7:8c:5f:
d9:ed:25:ef:d3:fd:dd:f0:ef:aa:29:eb:f6:bd:0d:8c:5c:8e:
8b:ec:d1:d2:2e:14:e8:af:cc:d3:62:71:07:77:b9:2d:cd:ea:
80:d4:18:08:af:14:50:46:09:01:e6:86:c6:65:22:59:de:43:
7e:e7:dc:26:ee:8d:b7:10:c8:af:b0:c1:c8:3a:e5:63:7a:00:
54:0f:dd:c8:12:8e:71:6b:8d:56:b6:26:e7:11:c6:2b:79:37:
4e:a1:ed:fb:ae:d2:6d:33:6f:95:e1:28:57:b2:3d:a2:f1:82:
30:0b:fc:40:1e:4c:6d:43:a2:2e:dc:d4:0c:af:52:2b:02:59:
8d:a1:49:cb:5b:ec:04:1e:65:53:0f:fe:ec:c7:68:87:ef:a4:
7f:70:e9:f9:05:2a:1e:de:e5:bc:a6:e1:ac:e2:b0:67:07:fb:
71:84:6a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKFdMg7thjKjQAWd5vsr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODJmMzIzMzU5MzgyZDgwMWVkMGI5M2VjMWJmYTAzMGRl
NjM2MjIwHhcNMjYwMzI1MTgwMTExWhcNMjYwMzI2MTgwMTExWjAzMTEwLwYDVQQD
EygwMzNjZjllOGI1MTk2YTg3YzU3NWQwMTAxZGQzMGVjNzRkMzExNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvEeL9gOmDdP9jtqxUD6G9NQGrF+
4amOhaOHIVWpvEjcIyJ7YKRwPFamkA0vvY6mzk90J7g1RYvArPt97vq92kecSKUN
GulNY3VWs6izCE3dVukapjC+X24/x+GswAnlcJkTFxc92T6xWYWggB8Yd4+rfLO3
Oi5N+ukHgrdAjFpxnoVRoL+4juUWclRobclJqzmsN9lIt/YZs+pVNaqs9US+QOWz
FnGpH4ZsNT5bVQ2Lb0Y4BVuWyW0V+RJrCfNLb5RngOGUbXAA3TOxHYVRR84b0/jG
HHXGnwyOkKSsvTud1aYeRUFETKjfaSK+WYrvgwb9Lt0TtLtlFzwzYogofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM8+ei1GWqHxXXQEB3TDsdNMRd4MB8GA1UdIwQY
MBaAFO2C8yM1k4LYAe0Lk+wb+gMN5jYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUt
MTY3ZGQxNWRjYjU5LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUtMTY3ZGQxNWRjYjU5
LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEI6uv4KH
2EY5/9O3jMHQVHginFpB8CJempzrpZnAMZ2TGv3nYwdTTe1wolWsGLMSrDPTHLiG
2AdJQEH2JnKrgu+orH1Ju76gru+MeCxJE4gJUxeycRFb94xf2e0l79P93fDvqinr
9r0NjFyOi+zR0i4U6K/M02JxB3e5Lc3qgNQYCK8UUEYJAeaGxmUiWd5DfufcJu6N
txDIr7DByDrlY3oAVA/dyBKOcWuNVrYm5xHGK3k3TqHt+67SbTNvleEoV7I9ovGC
MAv8QB5MbUOiLtzUDK9SKwJZjaFJy1vsBB5lUw/+7Mdoh++kf3Dp+QUqHt7lvKbh
rOKwZwf7cYRqdw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:14 2026 by rpki-client