Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: BUID06E6Ra4wan3J/P7TgNmZDVwCgDOmifX353m3d/E=
Subject key identifier: CF:9A:AE:3E:DC:EE:CA:E4:82:2D:CB:C1:C5:FD:11:CC:76:49:F7:80
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 019DCF06FC4FD4A6CF58F363E5AD392680A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 151D
Signing time: Mon 27 Apr 2026 13:00:34 +0000
Manifest this update: Mon 27 Apr 2026 13:00:34 +0000
Manifest next update: Tue 28 Apr 2026 13:00:34 +0000
Files and hashes: 1: 1-nbvgTns4XEuIeTkS-WiJtQc-Ow.roa (hash: EpsG3PKVN4LLuyVtTXVPkQWMYJTWkP9XR4apujaoYwQ=)
2: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: SqPYpkCKdOB82asto3YOG1nynAzpnwY3jbPojPlSDF8=)
3: sXC5yLn4k7J0Q9mLK5jMRSmlHl4.roa (hash: oarBoJiBeI3rfhIyVi9iZrYHFYrWYPyK5g0g+OH5uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:06:fc:4f:d4:a6:cf:58:f3:63:e5:ad:39:26:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Apr 27 13:00:34 2026 GMT
Not After : Apr 28 13:00:34 2026 GMT
Subject: CN=cf9aae3edceecae4822dcbc1c5fd11cc7649f780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:15:9b:b8:11:8a:57:cb:91:ed:b9:fe:c9:
27:8b:e5:ce:4d:9e:22:ff:a0:a3:27:e8:fe:db:21:
ed:49:29:d3:48:cb:f9:87:9b:9a:d8:94:9e:d1:56:
1f:bc:da:d5:9b:c2:1f:66:2a:cd:bb:86:4d:0c:1b:
b9:78:e1:95:2f:80:36:e6:e2:fc:3d:06:07:8b:f9:
72:2b:35:0a:2f:22:ad:da:7a:e9:56:69:43:36:a8:
ea:7b:b1:ca:39:e7:de:3b:80:44:25:22:6a:4d:78:
47:7c:5b:03:6a:22:8e:6f:3d:56:69:74:04:48:40:
ec:98:1a:11:cd:d5:d5:c6:f3:76:05:2d:95:d2:88:
e9:88:cb:bb:90:46:d6:d4:af:8c:47:a2:74:8e:c2:
6c:9f:ed:da:40:b8:20:24:f3:e1:e5:72:89:2c:81:
26:6f:94:eb:8d:67:7a:c4:ce:d0:4d:52:9d:19:ef:
b7:66:5e:22:52:12:91:49:63:a9:59:e8:f0:77:c3:
c2:ba:a1:ca:4e:b0:51:97:de:86:43:90:11:de:77:
f4:93:72:46:7a:02:76:79:c1:85:65:9a:2b:0e:e5:
a9:ec:b2:b6:9c:aa:90:c3:e6:d6:b3:cf:39:0e:04:
6b:9d:07:89:d5:85:37:ce:1a:a4:32:ed:4f:dc:4d:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9A:AE:3E:DC:EE:CA:E4:82:2D:CB:C1:C5:FD:11:CC:76:49:F7:80
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:18:bf:fe:45:58:fc:db:8b:a8:4a:12:37:e6:55:bf:93:fe:
56:f6:83:fb:2a:70:45:13:f5:03:f3:cd:29:6e:69:a5:2d:25:
ab:81:5a:df:84:06:f7:14:b2:aa:d1:96:1f:0b:dc:aa:73:3f:
78:59:f7:0e:f4:a0:b8:3e:97:7f:af:02:b3:fb:1a:86:bd:b2:
f2:eb:e2:a4:7c:60:c2:ca:e2:c1:be:84:35:f9:7b:55:06:59:
1d:f2:56:83:76:1f:fb:fa:48:81:34:c4:5c:ea:81:88:6c:a8:
87:26:9b:ba:92:4b:43:f8:09:ab:58:86:73:5f:3b:9a:5f:94:
d7:6a:be:53:b4:2e:11:99:b9:14:ae:66:8b:7f:e4:e8:af:cc:
a2:c5:ff:7f:6c:ee:18:e6:8f:ef:7d:64:12:0d:25:ec:e7:bc:
69:12:2c:1e:47:74:48:45:ed:8a:c8:68:ca:d2:89:ae:f9:1d:
9d:a4:4a:c3:95:e1:d5:41:f0:25:d0:66:73:17:b5:76:54:1d:
ee:50:5a:a5:43:62:30:39:f7:98:c3:53:ba:f9:bb:e1:8f:f8:
81:fe:a4:51:13:a7:18:83:ef:be:28:3e:c6:c3:e8:9e:53:c5:
12:b4:f4:0e:21:f9:1f:47:16:a3:0a:f3:5d:01:8b:90:34:e0:
65:78:14:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PBvxP1KbPWPNj5a05JoCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzU0M2FhMDAzNzNlOWU0ZDEwZTY0YzgzZDM3NzliMzc4
ODg4YzEwHhcNMjYwNDI3MTMwMDM0WhcNMjYwNDI4MTMwMDM0WjAzMTEwLwYDVQQD
EyhjZjlhYWUzZWRjZWVjYWU0ODIyZGNiYzFjNWZkMTFjYzc2NDlmNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBkVm7gRilfLke25/skni+XOTZ4i
/6CjJ+j+2yHtSSnTSMv5h5ua2JSe0VYfvNrVm8IfZirNu4ZNDBu5eOGVL4A25uL8
PQYHi/lyKzUKLyKt2nrpVmlDNqjqe7HKOefeO4BEJSJqTXhHfFsDaiKObz1WaXQE
SEDsmBoRzdXVxvN2BS2V0ojpiMu7kEbW1K+MR6J0jsJsn+3aQLggJPPh5XKJLIEm
b5TrjWd6xM7QTVKdGe+3Zl4iUhKRSWOpWejwd8PCuqHKTrBRl96GQ5AR3nf0k3JG
egJ2ecGFZZorDuWp7LK2nKqQw+bWs885DgRrnQeJ1YU3zhqkMu1P3E3QbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+arj7c7srkgi3LwcX9Ecx2SfeAMB8GA1UdIwQY
MBaAFOw1Q6oANz6eTRDmTIPTd5s3iIjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEt
NTZmNmVjYzFjMTIxLzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOWU3MTUtZmZhYS00YzQzLWI3OWEtNTZmNmVjYzFjMTIx
LzEvN0RWRHFnQTNQcDVORU9aTWc5TjNtemVJaU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhi//kVY
/NuLqEoSN+ZVv5P+VvaD+ypwRRP1A/PNKW5ppS0lq4Fa34QG9xSyqtGWHwvcqnM/
eFn3DvSguD6Xf68Cs/sahr2y8uvipHxgwsriwb6ENfl7VQZZHfJWg3Yf+/pIgTTE
XOqBiGyohyabupJLQ/gJq1iGc187ml+U12q+U7QuEZm5FK5mi3/k6K/MosX/f2zu
GOaP731kEg0l7Oe8aRIsHkd0SEXtishoytKJrvkdnaRKw5Xh1UHwJdBmcxe1dlQd
7lBapUNiMDn3mMNTuvm74Y/4gf6kUROnGIPvvig+xsPonlPFErT0DiH5H0cWowrz
XQGLkDTgZXgUTw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:43 2026 by rpki-client