Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: 6idfna6xezvdE0HpkhHi/pqPasyVU7H+kA9lVXmAw/c=
Subject key identifier: 35:6C:7F:02:8C:69:3B:C1:24:F9:A2:29:0E:09:13:A5:11:3A:34:DA
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 019D38664F3A1FEFE3325999A4E01B38623C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 15D4
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: a5lc+yrWDauY2kFIDJcPw+XVqDeS5rpSrejRwYPUS24=)
2: Ro8iEiW7rbl5__Js738-X47zd7o.roa (hash: +phYjFZmxaM+pbKEjfOqXvZnYdeDvt8m3Nbx57x5ex4=)
3: xzeSROAZ4o5YtWLRSODt0z_nT28.roa (hash: ewTMl0RKi+Myrcx5oJN4DOCA09oZLzVzmbs3wk5czR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4f:3a:1f:ef:e3:32:59:99:a4:e0:1b:38:62:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=356c7f028c693bc124f9a2290e0913a5113a34da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:dc:f6:2f:b5:2e:d8:22:18:56:55:34:7c:
59:6c:6b:ff:05:79:e2:09:59:19:fd:43:ec:df:3a:
92:c4:bc:c2:47:9c:b6:df:e2:d6:58:e6:01:2f:d6:
93:3d:c0:05:16:99:b6:f6:7c:fd:d4:71:ff:bc:51:
ab:6d:92:38:95:c9:45:f7:eb:a6:df:c0:bf:0e:09:
51:0b:ec:01:6e:f0:d4:33:4e:14:19:8b:5a:a3:82:
3c:85:46:73:93:e7:c5:9e:f8:b1:88:91:50:97:e3:
37:73:1e:7c:cc:d0:56:8d:fc:2a:65:3a:3c:3f:d1:
af:df:5a:62:9f:0f:25:82:21:d7:3e:21:4c:47:6a:
eb:19:0a:4d:aa:ba:f3:1e:05:6e:35:d9:e1:f8:8b:
22:04:96:43:03:69:4f:30:0a:be:20:e3:1e:93:e7:
06:7d:36:34:98:b6:ca:d1:89:c2:15:63:43:ef:e1:
90:17:80:c8:5d:71:b1:01:6c:40:03:8e:a8:ad:3b:
a3:10:71:54:83:db:cb:6e:e0:1a:bd:68:dd:6d:84:
03:92:f4:93:f4:cd:86:bd:af:dd:6a:eb:88:8d:7f:
e7:17:27:06:8d:44:4a:8d:cb:a8:a7:c5:2b:4b:75:
d0:25:2b:1a:f3:b9:7e:85:80:60:fe:d8:1e:45:22:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:7F:02:8C:69:3B:C1:24:F9:A2:29:0E:09:13:A5:11:3A:34:DA
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:38:cf:87:8e:e8:3a:a3:3c:5f:da:1d:1c:3a:d3:5b:ca:88:
52:a8:88:68:1c:5e:5d:8f:4e:76:a9:c3:00:7e:d4:df:d7:ab:
fd:cc:25:3a:f9:ed:ec:fd:61:d3:ab:f2:60:89:25:3c:2e:92:
9b:de:19:8d:4a:97:09:32:f4:d7:36:5e:d2:d7:af:3f:b1:11:
44:d3:d1:04:20:83:3d:b6:10:80:f9:85:1d:cd:5e:fe:f1:a3:
e6:2c:00:88:6d:db:13:ba:86:8c:ee:53:2a:6f:8f:12:2d:49:
57:78:c7:e8:87:89:99:c0:50:87:a9:af:93:f1:f6:ae:c4:8a:
be:bf:66:4f:08:b8:8a:cb:18:32:2e:0e:42:09:7b:ca:58:f7:
fb:9d:63:ff:95:51:aa:0f:aa:87:f7:7d:e0:40:7f:4c:f3:f9:
b3:70:67:0c:01:08:bc:8f:91:34:32:4e:06:dd:95:9f:b4:a8:
98:7a:57:74:52:0d:b9:25:eb:b2:4d:e4:87:cc:0d:85:e5:b0:
d0:24:0c:94:7f:93:0c:42:b2:50:8c:db:95:1f:c7:23:78:df:
37:43:91:ce:64:07:09:55:5c:c6:3b:af:a0:33:ba:8c:6e:5b:
8b:39:ca:b8:e5:dd:15:fc:8d:f4:e3:7a:ed:f4:0e:17:49:77:
f4:57:6e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zk86H+/jMlmZpOAbOGI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZWUyNWE3OGE4MTZiZGUzNjJjNDBjODZlMzliOTQ3ZDBl
ZTJmZjMwHhcNMjYwMzI5MDcwMjAyWhcNMjYwMzMwMDcwMjAyWjAzMTEwLwYDVQQD
EygzNTZjN2YwMjhjNjkzYmMxMjRmOWEyMjkwZTA5MTNhNTExM2EzNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4enc9i+1LtgiGFZVNHxZbGv/BXni
CVkZ/UPs3zqSxLzCR5y23+LWWOYBL9aTPcAFFpm29nz91HH/vFGrbZI4lclF9+um
38C/DglRC+wBbvDUM04UGYtao4I8hUZzk+fFnvixiJFQl+M3cx58zNBWjfwqZTo8
P9Gv31pinw8lgiHXPiFMR2rrGQpNqrrzHgVuNdnh+IsiBJZDA2lPMAq+IOMek+cG
fTY0mLbK0YnCFWND7+GQF4DIXXGxAWxAA46orTujEHFUg9vLbuAavWjdbYQDkvST
9M2Gva/dauuIjX/nFycGjURKjcuop8UrS3XQJSsa87l+hYBg/tgeRSKS7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVsfwKMaTvBJPmiKQ4JE6UROjTaMB8GA1UdIwQY
MBaAFO3uJaeKgWveNixAyG45uUfQ7i/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYt
NTQzNDFjZDEzYTlkLzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYtNTQzNDFjZDEzYTlk
LzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjjPh47o
OqM8X9odHDrTW8qIUqiIaBxeXY9OdqnDAH7U39er/cwlOvnt7P1h06vyYIklPC6S
m94ZjUqXCTL01zZe0tevP7ERRNPRBCCDPbYQgPmFHc1e/vGj5iwAiG3bE7qGjO5T
Km+PEi1JV3jH6IeJmcBQh6mvk/H2rsSKvr9mTwi4issYMi4OQgl7ylj3+51j/5VR
qg+qh/d94EB/TPP5s3BnDAEIvI+RNDJOBt2Vn7SomHpXdFINuSXrsk3kh8wNheWw
0CQMlH+TDEKyUIzblR/HI3jfN0ORzmQHCVVcxjuvoDO6jG5biznKuOXdFfyN9ON6
7fQOF0l39Fduxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:58 2026 by rpki-client