Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: cNWoNIsbzUM9gClBsGJboOGW7N/GQGcOgcS+wvgNkMU=
Subject key identifier: 16:7E:6A:17:72:24:CE:FE:94:AE:AD:DE:71:D7:A3:59:1C:26:25:7A
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 019D3A539E7425E0211B35F4D22C69C9A18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 16:00:51 +0000
Manifest this update: Sun 29 Mar 2026 16:00:51 +0000
Manifest next update: Mon 30 Mar 2026 16:00:51 +0000
Files and hashes: 1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: kQepcFzJLc7mhS3boq1okDB95Tq6oi8num4CBl1rwz8=)
2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:9e:74:25:e0:21:1b:35:f4:d2:2c:69:c9:a1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Mar 29 16:00:51 2026 GMT
Not After : Mar 30 16:00:51 2026 GMT
Subject: CN=167e6a177224cefe94aeadde71d7a3591c26257a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:9d:f5:ed:1f:ad:96:bf:33:93:40:45:ca:
9a:55:94:ca:9e:a0:f2:07:da:9d:1a:39:54:da:4d:
18:bc:5c:ea:dd:a5:a3:fd:3e:13:a5:5c:a5:98:80:
4c:14:7d:b1:a9:6b:c4:df:92:6a:7c:c8:c4:31:a1:
cb:36:d5:01:68:16:30:06:a8:15:90:dd:8e:0d:c3:
c1:68:d8:d7:f0:d1:c2:c1:10:96:66:b2:0f:6a:6f:
c2:5f:d3:cc:d9:b2:dd:6b:65:61:5d:39:a9:e3:f2:
88:dc:d8:cb:1f:5a:64:1c:c7:48:fb:e4:a6:c5:dd:
43:17:36:0a:ee:c8:90:fa:04:bd:6e:48:39:bd:44:
ec:02:ea:cc:e8:de:85:af:1a:ad:18:2d:0f:79:b0:
c9:0e:38:ea:f0:63:ba:07:74:38:43:21:8a:5f:7b:
02:2d:52:09:66:c0:0f:96:60:8d:60:f5:54:67:6b:
4c:cc:c8:fe:f3:31:77:1f:8e:ce:39:9e:05:32:d1:
ca:3f:a1:06:2d:3e:32:4a:b3:86:97:73:54:f8:98:
d8:c7:70:fe:6d:ed:18:56:0f:b1:9c:09:a1:55:f7:
67:d0:4c:2f:d1:f7:85:24:b1:b3:65:ea:4f:02:21:
6c:9c:b7:d7:d2:5d:ad:75:b9:a5:0a:b2:57:e9:bf:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7E:6A:17:72:24:CE:FE:94:AE:AD:DE:71:D7:A3:59:1C:26:25:7A
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8d:05:57:59:25:58:3c:f9:f1:cf:ac:6f:e8:42:15:ea:78:
8f:d5:e3:12:2a:f8:fa:51:fe:4b:98:64:55:db:51:78:d9:e6:
c1:8e:3b:ec:ca:6e:9d:ca:24:34:70:2f:ac:02:a8:3f:d6:a1:
cd:ac:ab:69:fa:f7:61:83:43:76:c7:27:a1:e4:3e:32:4f:09:
19:d5:66:1e:53:a3:89:ab:34:c3:06:9e:77:4e:79:f3:34:16:
82:3d:5f:6f:6c:ac:fe:71:6d:e2:82:a0:47:3f:cd:e0:da:2c:
08:44:1c:f5:9b:73:5b:61:64:ab:f8:70:6b:a9:bc:1f:c7:f4:
b2:88:3d:0b:14:cb:be:76:50:41:9a:ba:09:ed:05:bf:c9:6b:
a4:66:61:86:dc:c1:90:f7:a2:6c:c8:d0:78:39:4c:12:79:62:
64:e0:ce:13:c1:a9:49:3e:11:a4:af:e0:bc:e8:1c:2e:62:97:
68:84:60:83:8e:7a:2f:8d:c6:dc:94:16:05:32:6c:6b:29:1a:
e6:0b:11:b3:45:50:ae:79:44:8e:2a:65:d5:49:72:c1:49:86:
93:56:27:54:08:a9:e4:43:77:5d:22:21:fb:08:d2:52:52:5f:
9b:83:64:c8:e1:47:91:66:4f:a3:47:44:56:1f:df:f7:a7:f8:
53:15:90:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U550JeAhGzX00ixpyaGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2
NTYzN2IwHhcNMjYwMzI5MTYwMDUxWhcNMjYwMzMwMTYwMDUxWjAzMTEwLwYDVQQD
EygxNjdlNmExNzcyMjRjZWZlOTRhZWFkZGU3MWQ3YTM1OTFjMjYyNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/id9e0frZa/M5NARcqaVZTKnqDy
B9qdGjlU2k0YvFzq3aWj/T4TpVylmIBMFH2xqWvE35JqfMjEMaHLNtUBaBYwBqgV
kN2ODcPBaNjX8NHCwRCWZrIPam/CX9PM2bLda2VhXTmp4/KI3NjLH1pkHMdI++Sm
xd1DFzYK7siQ+gS9bkg5vUTsAurM6N6FrxqtGC0PebDJDjjq8GO6B3Q4QyGKX3sC
LVIJZsAPlmCNYPVUZ2tMzMj+8zF3H47OOZ4FMtHKP6EGLT4ySrOGl3NU+JjYx3D+
be0YVg+xnAmhVfdn0Ewv0feFJLGzZepPAiFsnLfX0l2tdbmlCrJX6b80gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ+ahdyJM7+lK6t3nHXo1kcJiV6MB8GA1UdIwQY
MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt
MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2
LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY40FV1kl
WDz58c+sb+hCFep4j9XjEir4+lH+S5hkVdtReNnmwY477MpuncokNHAvrAKoP9ah
zayrafr3YYNDdscnoeQ+Mk8JGdVmHlOjias0wwaed0558zQWgj1fb2ys/nFt4oKg
Rz/N4NosCEQc9ZtzW2Fkq/hwa6m8H8f0sog9CxTLvnZQQZq6Ce0Fv8lrpGZhhtzB
kPeibMjQeDlMEnliZODOE8GpST4RpK/gvOgcLmKXaIRgg456L43G3JQWBTJsayka
5gsRs0VQrnlEjipl1UlywUmGk1YnVAip5EN3XSIh+wjSUlJfm4NkyOFHkWZPo0dE
Vh/f96f4UxWQ0w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:48 2026 by rpki-client