Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier: sJwI6RfOGsxKo55Nj4LNmPQlPyCQmtzIZM9Q+ttMZik=
Subject key identifier: D9:C4:DA:AA:8A:4C:7D:1F:CE:D0:D2:EF:EA:A5:3F:C4:B7:59:26:CF
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial: 019D262896829100436CC99316964A492DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:27 +0000
Manifest this update: Wed 25 Mar 2026 18:01:27 +0000
Manifest next update: Thu 26 Mar 2026 18:01:27 +0000
Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: k8FVQq8fpA/goI52onG5AecvhL8PTi9IbP+SYt/k118=)
2: LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa (hash: N4Dq+gbQXVdAatGtvXXu2yj7TOMEElBVnNjMgumVWCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:96:82:91:00:43:6c:c9:93:16:96:4a:49:2d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Validity
Not Before: Mar 25 18:01:27 2026 GMT
Not After : Mar 26 18:01:27 2026 GMT
Subject: CN=d9c4daaa8a4c7d1fced0d2efeaa53fc4b75926cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:93:dc:6d:22:21:2a:0d:00:38:bf:3b:09:
70:5f:e3:91:80:ef:bb:8f:ad:b7:05:c1:1f:d7:55:
a6:5c:d4:c9:c6:b8:1c:ca:48:61:f9:1d:76:88:83:
a0:bf:98:1a:19:0a:28:8c:be:63:55:f9:82:25:bb:
d2:9b:77:00:1a:40:e4:5c:58:27:fd:67:73:55:9a:
86:59:3f:fa:70:94:56:4e:a3:72:31:21:21:bf:5e:
72:99:97:b4:14:f5:1b:10:dd:b9:5b:76:4c:b0:79:
66:2a:d7:0b:e8:27:94:86:3c:ab:25:e6:38:bf:d7:
48:41:52:c3:96:d5:3f:63:8b:b2:0f:91:a4:8a:30:
e6:0d:38:77:80:df:60:7c:0f:b1:e0:ad:08:8e:cf:
32:25:d7:25:b8:c1:d2:55:7f:3a:85:54:af:64:ab:
81:69:4f:67:04:cc:53:14:88:e2:c7:15:ab:68:57:
75:65:2d:68:b1:d1:52:f4:b0:34:57:7f:d3:74:a4:
25:4b:d7:72:e1:80:bd:e9:c9:d5:24:87:ae:08:85:
d3:41:bd:d2:c0:74:d2:e2:65:68:ec:17:af:19:1f:
a5:01:59:e0:81:34:42:3f:15:75:74:8e:02:33:95:
b8:4e:5c:b2:f5:4e:13:8e:d7:93:2b:f0:b1:0e:34:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:DA:AA:8A:4C:7D:1F:CE:D0:D2:EF:EA:A5:3F:C4:B7:59:26:CF
X509v3 Authority Key Identifier:
keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:94:e8:14:c7:58:64:72:c3:a9:ff:4f:4b:28:fb:36:9c:52:
14:ce:f7:2f:e9:74:af:c1:51:b3:25:84:ab:05:01:82:63:07:
04:6d:b4:62:56:1e:51:31:56:15:aa:00:0e:ae:31:b5:c0:69:
90:ae:5c:fe:48:97:24:52:f3:f0:49:97:84:54:bb:64:a7:8c:
78:f4:d4:f9:34:11:5e:72:b6:e7:92:2a:1b:39:58:b6:1d:fc:
c4:8b:df:ae:2e:51:76:2b:33:4b:c7:eb:e3:78:54:47:01:3e:
28:69:9a:c0:b1:1a:a1:05:53:8e:7f:a8:0e:22:8d:ee:8e:0f:
b3:db:f6:6b:f6:54:26:03:51:55:92:45:f1:55:76:6b:9a:1a:
c3:2b:2d:7c:cb:5b:56:5f:3f:09:ed:d0:3e:a7:51:c7:1e:82:
0b:72:2e:9e:c9:98:c2:c9:5a:d9:3b:b8:37:17:5a:55:c8:fb:
ad:92:94:ce:9b:3c:da:0d:31:00:18:a0:6a:2a:64:ee:d3:e0:
c3:34:fe:f9:23:75:4c:8b:e8:30:c9:b3:35:de:6e:9b:67:e9:
5b:12:82:5a:8c:a1:b4:0f:85:d9:cd:e8:70:45:d1:88:44:58:
5a:a9:99:c6:5a:06:bf:af:a5:8e:89:70:be:e1:b0:be:02:51:
2a:23:c9:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKJaCkQBDbMmTFpZKSS2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli
MjA4ODcwHhcNMjYwMzI1MTgwMTI3WhcNMjYwMzI2MTgwMTI3WjAzMTEwLwYDVQQD
EyhkOWM0ZGFhYThhNGM3ZDFmY2VkMGQyZWZlYWE1M2ZjNGI3NTkyNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql6T3G0iISoNADi/OwlwX+ORgO+7
j623BcEf11WmXNTJxrgcykhh+R12iIOgv5gaGQoojL5jVfmCJbvSm3cAGkDkXFgn
/WdzVZqGWT/6cJRWTqNyMSEhv15ymZe0FPUbEN25W3ZMsHlmKtcL6CeUhjyrJeY4
v9dIQVLDltU/Y4uyD5GkijDmDTh3gN9gfA+x4K0Ijs8yJdcluMHSVX86hVSvZKuB
aU9nBMxTFIjixxWraFd1ZS1osdFS9LA0V3/TdKQlS9dy4YC96cnVJIeuCIXTQb3S
wHTS4mVo7BevGR+lAVnggTRCPxV1dI4CM5W4Tlyy9U4TjteTK/CxDjSFPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnE2qqKTH0fztDS7+qlP8S3WSbPMB8GA1UdIwQY
MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt
ZjUzYWQ0NmNhZjNjLzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj
LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5ToFMdY
ZHLDqf9PSyj7NpxSFM73L+l0r8FRsyWEqwUBgmMHBG20YlYeUTFWFaoADq4xtcBp
kK5c/kiXJFLz8EmXhFS7ZKeMePTU+TQRXnK255IqGzlYth38xIvfri5RdiszS8fr
43hURwE+KGmawLEaoQVTjn+oDiKN7o4Ps9v2a/ZUJgNRVZJF8VV2a5oawystfMtb
Vl8/Ce3QPqdRxx6CC3IunsmYwsla2Tu4NxdaVcj7rZKUzps82g0xABigaipk7tPg
wzT++SN1TIvoMMmzNd5um2fpWxKCWoyhtA+F2c3ocEXRiERYWqmZxloGv6+ljolw
vuGwvgJRKiPJzQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:54 2026 by rpki-client