Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: d5c+yc2v3R5bhvzOsU7QBRZHHbI3kVLIQEfYz7z3S9E=
Subject key identifier: D4:AA:B8:39:B0:27:07:64:0F:21:AB:63:D6:7E:B2:17:73:0C:4E:12
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019DB359AAE094C46B189B837937A0367E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0785
Signing time: Wed 22 Apr 2026 04:01:31 +0000
Manifest this update: Wed 22 Apr 2026 04:01:31 +0000
Manifest next update: Thu 23 Apr 2026 04:01:31 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: q0mjqnD0ptjYreIFhekfcq8XrOTz6faolzQ0MnT7zhE=)
2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:59:aa:e0:94:c4:6b:18:9b:83:79:37:a0:36:7e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Apr 22 04:01:31 2026 GMT
Not After : Apr 23 04:01:31 2026 GMT
Subject: CN=d4aab839b02707640f21ab63d67eb217730c4e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:87:bc:a1:95:de:2e:69:32:5b:0d:d2:13:
7d:72:e4:46:83:83:d1:7a:27:1b:c0:b6:f8:69:51:
1e:1d:ed:5c:85:3e:f1:5b:8d:60:58:2f:3e:51:f9:
12:2d:b4:8c:f9:1d:10:92:d9:f6:f0:22:b3:8d:05:
33:0b:03:bc:11:b0:9c:22:5a:1c:7d:3f:5e:99:0b:
60:2c:1c:f5:73:f8:4c:bb:85:22:9d:ce:61:19:d2:
9a:37:f1:0d:0c:53:cf:d8:aa:7b:26:20:b7:47:39:
0a:88:13:7a:af:e5:b3:2d:69:5f:6d:8b:0f:ec:1d:
c8:5c:ad:27:b6:cb:10:1c:7a:0e:99:f5:55:b1:1e:
70:9e:96:71:0b:fc:a8:92:aa:5e:e1:1d:f9:50:5d:
5e:99:a7:df:b9:a0:9c:a3:24:d6:72:c6:f3:44:7a:
ac:ef:8e:43:78:eb:8c:ce:75:89:2d:e6:28:12:12:
a5:fb:1e:cd:b2:52:58:8d:78:da:c2:c5:c7:d4:eb:
f8:4f:a2:0b:bb:b9:bb:88:8a:d0:72:c3:f3:58:f5:
74:11:ab:34:b6:7c:4f:18:a6:2f:a2:84:4e:94:d1:
74:1c:55:3b:85:33:f8:22:f5:a0:1b:ce:33:db:4a:
68:10:a9:f7:6a:44:55:83:91:c2:75:34:1e:1e:f0:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AA:B8:39:B0:27:07:64:0F:21:AB:63:D6:7E:B2:17:73:0C:4E:12
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:64:25:91:2e:16:f8:91:bb:b9:9b:f8:55:83:fa:e8:8a:
34:05:52:8e:9e:33:11:f3:cf:85:cc:db:a4:f0:45:df:ca:80:
d4:13:0c:a6:4e:d6:fb:a3:c8:c0:c8:bd:9b:f1:57:36:aa:61:
78:0d:99:00:95:d0:3f:bf:06:17:25:6d:c8:f4:a1:d8:14:78:
21:56:bd:fc:05:8f:ac:59:f4:cf:ae:e6:99:43:7b:7d:2d:07:
ff:f5:52:0c:38:38:39:0d:e4:c3:46:b7:5b:b5:ae:c6:ac:78:
3c:82:22:c5:fc:95:b1:5e:f8:a9:4e:e5:a6:7d:c2:92:00:3e:
78:a0:6b:57:4b:79:9f:87:e8:8a:76:65:a3:21:57:4d:83:e0:
63:46:3f:8a:a8:0e:24:05:b4:48:74:d5:13:ee:dc:a7:71:12:
52:a1:a2:4d:57:13:b7:d2:17:7b:0f:70:ce:80:9a:d7:61:d8:
64:69:d9:f0:62:b7:69:1b:00:a8:5c:35:16:ee:80:3f:0c:1c:
99:a7:36:2c:98:00:d7:af:f6:1b:86:a7:34:04:c1:bd:68:83:
7d:b3:bc:fd:27:03:1c:e6:20:19:0f:46:0e:e0:31:9c:c2:d8:
18:b1:8d:14:ad:eb:fa:59:54:31:eb:1e:6b:38:f1:e6:69:65:
d7:b1:14:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2zWarglMRrGJuDeTegNn5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk
MTQ0ODkwHhcNMjYwNDIyMDQwMTMxWhcNMjYwNDIzMDQwMTMxWjAzMTEwLwYDVQQD
EyhkNGFhYjgzOWIwMjcwNzY0MGYyMWFiNjNkNjdlYjIxNzczMGM0ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+SHvKGV3i5pMlsN0hN9cuRGg4PR
eicbwLb4aVEeHe1chT7xW41gWC8+UfkSLbSM+R0Qktn28CKzjQUzCwO8EbCcIloc
fT9emQtgLBz1c/hMu4Uinc5hGdKaN/ENDFPP2Kp7JiC3RzkKiBN6r+WzLWlfbYsP
7B3IXK0ntssQHHoOmfVVsR5wnpZxC/yokqpe4R35UF1emaffuaCcoyTWcsbzRHqs
745DeOuMznWJLeYoEhKl+x7NslJYjXjawsXH1Ov4T6ILu7m7iIrQcsPzWPV0Eas0
tnxPGKYvooROlNF0HFU7hTP4IvWgG84z20poEKn3akRVg5HCdTQeHvDErQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSquDmwJwdkDyGrY9Z+shdzDE4SMB8GA1UdIwQY
MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt
ZGU2YTljMDE3ZjdiLzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi
LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq5kJZEu
FviRu7mb+FWD+uiKNAVSjp4zEfPPhczbpPBF38qA1BMMpk7W+6PIwMi9m/FXNqph
eA2ZAJXQP78GFyVtyPSh2BR4IVa9/AWPrFn0z67mmUN7fS0H//VSDDg4OQ3kw0a3
W7Wuxqx4PIIixfyVsV74qU7lpn3CkgA+eKBrV0t5n4foinZloyFXTYPgY0Y/iqgO
JAW0SHTVE+7cp3ESUqGiTVcTt9IXew9wzoCa12HYZGnZ8GK3aRsAqFw1Fu6APwwc
mac2LJgA16/2G4anNATBvWiDfbO8/ScDHOYgGQ9GDuAxnMLYGLGNFK3r+llUMese
azjx5mll17EUiQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 06:01:40 2026 by rpki-client