Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier: SCGliKq4uTbLDxiljiF+MdWcmmM3XRZWCeKZ1TmOvGU=
Subject key identifier: A5:BC:F5:3F:69:3D:38:57:33:8E:3C:66:AC:74:F2:BA:91:A9:81:5D
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer: /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial: 019A72259A73F944F14CBB54229A7D7FCFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number: 0F76
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: D1X9AWPnlcIFY425yJB73gmMM7MykBaWL19qf/VwnYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9a:73:f9:44:f1:4c:bb:54:22:9a:7d:7f:cf:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=a5bcf53f693d3857338e3c66ac74f2ba91a9815d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:63:09:ce:f4:c2:88:d3:ff:76:05:c3:63:
4a:41:b4:cb:de:f2:cb:cb:30:3c:6d:72:81:7c:46:
6b:7c:24:0f:bc:58:24:10:f3:bd:d2:38:d0:5b:8c:
30:8d:0e:8c:26:b4:15:c8:fd:ec:62:a6:f1:bd:97:
1f:2a:3e:16:6e:68:45:ff:9b:62:cd:9c:f9:c7:fc:
f5:1b:55:e2:5b:57:b4:fd:8c:bd:01:7c:56:b0:82:
97:a5:f8:94:08:7e:b5:8b:9b:62:91:fd:19:bf:6c:
87:c8:88:46:7a:b4:9b:46:02:69:25:08:6e:2a:2a:
1e:9e:db:9e:e4:90:ac:f1:83:89:c6:75:75:b5:4c:
32:83:90:40:2e:28:86:0b:06:b6:f9:1b:d3:15:ef:
84:88:3a:79:e5:29:1c:67:b8:04:ce:49:93:12:b0:
0b:52:4c:29:e6:ae:df:7c:1f:79:1c:b2:a9:26:0f:
e6:13:7c:a3:06:eb:8d:fc:b8:a8:cf:94:fd:a3:27:
82:e8:fa:f2:ab:af:16:15:16:da:7c:0f:da:92:84:
a6:b8:d7:80:87:c0:19:ca:a9:84:4f:eb:b1:21:6f:
69:c7:92:75:ee:9b:3b:4a:0e:d6:82:d8:22:2f:38:
73:c6:d3:91:5d:5f:0f:e8:3e:a4:a7:09:1b:6a:b4:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:F5:3F:69:3D:38:57:33:8E:3C:66:AC:74:F2:BA:91:A9:81:5D
X509v3 Authority Key Identifier:
keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:35:46:f3:ff:5a:df:ec:43:ff:d6:c7:88:94:39:dc:15:d4:
31:fb:ad:bf:3c:8d:97:9c:f8:47:91:aa:c2:69:07:0b:a7:52:
76:6a:34:12:4d:c3:de:93:ea:66:dd:97:15:72:d8:50:14:7b:
69:df:ec:c2:d3:63:18:29:b3:21:9b:4d:70:cc:4b:21:38:7a:
fc:1d:50:cd:be:b3:83:f4:41:97:cd:ec:9d:d6:8e:a4:cc:64:
ef:a7:51:80:00:ab:39:00:b1:7e:33:29:c6:8e:78:92:50:56:
09:1f:db:e8:74:24:86:b9:28:e7:66:14:63:61:47:1f:6d:c5:
a8:9d:1b:ec:f7:16:9e:96:2a:da:87:26:01:03:10:58:60:fa:
2e:97:81:e1:07:51:3d:a0:57:3b:df:ab:7f:5a:45:25:a6:1f:
b1:c9:9a:42:a8:48:0d:0f:4a:97:16:21:4c:0a:c7:db:25:92:
8e:26:af:b2:1e:65:6b:fa:ea:14:e4:5f:ca:51:9b:53:3f:1b:
4c:cf:70:ad:4d:a9:c1:40:7d:ee:11:0e:e0:cb:cc:17:3e:8d:
c7:95:ec:dc:52:8b:9e:52:7b:d9:60:c2:9e:50:69:61:6d:b8:
b9:b9:1d:30:63:04:9c:c8:07:bf:c1:b5:24:87:9c:f9:ef:9b:
db:71:1c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZpz+UTxTLtUIpp9f8/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZmM4YTZmM2M0NGI4ZWRkMTc3ZmU1MWE1OTk5MTU4Yjhk
Y2Y4MTkwHhcNMjUxMTExMDkwMDU4WhcNMjUxMTEyMDkwMDU4WjAzMTEwLwYDVQQD
EyhhNWJjZjUzZjY5M2QzODU3MzM4ZTNjNjZhYzc0ZjJiYTkxYTk4MTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGxjCc70wojT/3YFw2NKQbTL3vLL
yzA8bXKBfEZrfCQPvFgkEPO90jjQW4wwjQ6MJrQVyP3sYqbxvZcfKj4WbmhF/5ti
zZz5x/z1G1XiW1e0/Yy9AXxWsIKXpfiUCH61i5tikf0Zv2yHyIhGerSbRgJpJQhu
Kioentue5JCs8YOJxnV1tUwyg5BALiiGCwa2+RvTFe+EiDp55SkcZ7gEzkmTErAL
Ukwp5q7ffB95HLKpJg/mE3yjBuuN/Lioz5T9oyeC6Pryq68WFRbafA/akoSmuNeA
h8AZyqmET+uxIW9px5J17ps7Sg7WgtgiLzhzxtORXV8P6D6kpwkbarShIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW89T9pPThXM448Zqx08rqRqYFdMB8GA1UdIwQY
MBaAFO/8im88RLjt0Xf+UaWZkVi43PgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQt
NmRkOTM4NzE0MWE4LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hZDI2YmEtMDMxNC00ZmY5LWEzOWQtNmRkOTM4NzE0MWE4
LzEvN195S2J6eEV1TzNSZF81UnBabVJXTGpjLUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTVG8/9a
3+xD/9bHiJQ53BXUMfutvzyNl5z4R5GqwmkHC6dSdmo0Ek3D3pPqZt2XFXLYUBR7
ad/swtNjGCmzIZtNcMxLITh6/B1Qzb6zg/RBl83sndaOpMxk76dRgACrOQCxfjMp
xo54klBWCR/b6HQkhrko52YUY2FHH23FqJ0b7PcWnpYq2ocmAQMQWGD6LpeB4QdR
PaBXO9+rf1pFJaYfscmaQqhIDQ9KlxYhTArH2yWSjiavsh5la/rqFORfylGbUz8b
TM9wrU2pwUB97hEO4MvMFz6Nx5Xs3FKLnlJ72WDCnlBpYW24ubkdMGMEnMgHv8G1
JIec+e+b23EcwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:03 2025 by rpki-client