Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: +y0w09MVs1F8yJbIrR112thKsSv7HZQaPlaOViFPTM4=
Subject key identifier: 4D:B3:81:A6:7D:E1:13:26:54:82:4D:8F:13:4A:1E:26:F7:28:50:2A
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019D0AE7E5092998ABCB608EF053E4771518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1878
Signing time: Fri 20 Mar 2026 11:01:02 +0000
Manifest this update: Fri 20 Mar 2026 11:01:02 +0000
Manifest next update: Sat 21 Mar 2026 11:01:02 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: wCdUyjkx0qE1G6iH9JfZU6+7wNaZycg2MWLM0Yjs+qg=)
2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e7:e5:09:29:98:ab:cb:60:8e:f0:53:e4:77:15:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Mar 20 11:01:02 2026 GMT
Not After : Mar 21 11:01:02 2026 GMT
Subject: CN=4db381a67de1132654824d8f134a1e26f728502a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:91:ad:1d:bb:73:0a:4b:79:5e:bd:71:ba:
6f:20:08:a5:83:56:f9:99:8b:98:88:49:c8:fc:dd:
5b:d3:da:8b:2e:21:f7:b7:3c:5b:a3:11:e6:4c:4a:
c2:dc:3e:e3:ca:bf:70:40:36:a4:8f:20:66:24:ab:
a7:0b:a4:21:6b:4f:61:7f:01:b5:b3:0c:ad:61:57:
8e:69:c6:de:67:2e:f1:37:bc:6d:b6:99:78:93:a6:
d0:5c:ac:40:de:df:a9:47:60:c2:97:dd:17:5f:1c:
11:56:79:5f:88:28:88:9e:7f:7a:4b:af:6e:ad:3a:
8b:79:2f:8c:4c:86:a3:1b:56:98:a2:50:06:9a:a7:
e7:12:16:05:de:79:71:a7:82:e3:da:6b:eb:b6:c5:
11:ad:31:14:db:68:10:b9:a4:8f:78:de:7f:5e:0c:
9a:f5:e4:a7:04:ce:b1:5e:78:25:ce:82:f1:0d:1a:
cd:be:25:e5:8f:75:a2:1f:6e:e2:52:c4:ec:2e:87:
7d:33:e7:0e:b4:fd:23:22:c3:b5:c5:5e:ae:7c:ad:
22:e7:84:a9:98:0c:4b:c0:24:72:bd:7d:b5:d8:e7:
38:bf:c5:4d:c0:ab:82:8b:e8:df:6d:5d:05:89:78:
b6:b2:6e:fd:28:cd:6f:82:3c:41:a4:95:05:04:d0:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:81:A6:7D:E1:13:26:54:82:4D:8F:13:4A:1E:26:F7:28:50:2A
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8d:6d:55:ad:2d:1e:2b:4b:2d:c4:f4:5c:2b:05:47:15:d9:
68:17:ad:18:b8:f7:ef:9e:c1:7c:64:b5:b4:c5:70:60:8d:a9:
fd:24:46:13:a4:0b:d5:7f:ad:0d:8d:8a:f8:dc:66:7d:ac:5f:
db:64:ad:c7:62:39:b5:56:bc:d7:7b:fe:dd:63:f7:ad:a7:cd:
fd:69:7a:cd:83:81:87:f6:3f:18:d8:c5:1d:0e:d4:56:bd:10:
13:8f:22:6e:fc:d8:3a:0a:d9:ac:dd:b9:0a:36:81:61:7c:8e:
a1:3a:be:53:61:0b:14:2b:e2:f3:1b:a3:c1:ef:4a:af:3e:63:
66:05:ec:b8:43:32:c0:f5:45:ff:56:17:cc:c8:e3:2b:27:6a:
92:fb:27:23:22:c4:6c:1a:c0:0b:6f:62:98:4d:4c:e4:85:67:
88:8e:9c:6d:b7:4f:96:0c:a8:59:2d:58:67:75:b5:c8:11:50:
44:7f:7f:0d:d4:43:3e:1f:0b:54:db:0b:c2:6c:da:e4:58:a0:
2b:11:88:97:88:39:a1:22:95:1d:55:e5:4b:10:fe:45:47:eb:
75:a7:40:fe:0d:13:c0:8f:80:b8:72:88:8b:89:80:1b:9c:bf:
63:e3:11:44:95:8d:73:4e:45:2a:18:1a:3f:fb:12:31:93:97:
5f:19:91:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0K5+UJKZiry2CO8FPkdxUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk
NjEyMjAwHhcNMjYwMzIwMTEwMTAyWhcNMjYwMzIxMTEwMTAyWjAzMTEwLwYDVQQD
Eyg0ZGIzODFhNjdkZTExMzI2NTQ4MjRkOGYxMzRhMWUyNmY3Mjg1MDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeSRrR27cwpLeV69cbpvIAilg1b5
mYuYiEnI/N1b09qLLiH3tzxboxHmTErC3D7jyr9wQDakjyBmJKunC6Qha09hfwG1
swytYVeOacbeZy7xN7xttpl4k6bQXKxA3t+pR2DCl90XXxwRVnlfiCiInn96S69u
rTqLeS+MTIajG1aYolAGmqfnEhYF3nlxp4Lj2mvrtsURrTEU22gQuaSPeN5/Xgya
9eSnBM6xXnglzoLxDRrNviXlj3WiH27iUsTsLod9M+cOtP0jIsO1xV6ufK0i54Sp
mAxLwCRyvX212Oc4v8VNwKuCi+jfbV0FiXi2sm79KM1vgjxBpJUFBNCZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2zgaZ94RMmVIJNjxNKHib3KFAqMB8GA1UdIwQY
MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt
NDNlOTFlNWVmMTQ1LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1
LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT41tVa0t
HitLLcT0XCsFRxXZaBetGLj3757BfGS1tMVwYI2p/SRGE6QL1X+tDY2K+Nxmfaxf
22Stx2I5tVa813v+3WP3rafN/Wl6zYOBh/Y/GNjFHQ7UVr0QE48ibvzYOgrZrN25
CjaBYXyOoTq+U2ELFCvi8xujwe9Krz5jZgXsuEMywPVF/1YXzMjjKydqkvsnIyLE
bBrAC29imE1M5IVniI6cbbdPlgyoWS1YZ3W1yBFQRH9/DdRDPh8LVNsLwmza5Fig
KxGIl4g5oSKVHVXlSxD+RUfrdadA/g0TwI+AuHKIi4mAG5y/Y+MRRJWNc05FKhga
P/sSMZOXXxmRIQ==
-----END CERTIFICATE-----
Generated at Fri Mar 20 14:25:52 2026 by rpki-client