Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File: 72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier: 2zL9BDTEwjc6OUdpWzrOCMLfvB6wlw5hJLZ4mMKEiSI=
Subject key identifier: 4E:F9:76:2B:62:FA:7F:F8:F2:E5:09:F0:FD:BD:92:B4:77:51:F5:F1
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 019D3865A8C0FA6CC494DF121B547D79F620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number: 13FA
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: MhNjcSSBogZEhOBm4OyoyWfVA7Wb+LyyIZ/5lBQmuRA=)
2: dwTOvNNNs4_nLfL-zGTDIueq7wE.roa (hash: OZz3Ati+0+Owv6ll3vAAGBWOgVo4lM5LfhjhBc+bzWQ=)
3: ekxswoBsSmNReS3BO5bv3ZcbIgA.roa (hash: fq2RYQXr2Q+LCB9gUhTjaSYI4NdNhOQIDzKGs+coCIc=)
4: qyP69zaDTmNmYkyQ7c7evEHMFbc.roa (hash: NqwYrk8FLr9zreZXVBBWmFtU5YYuWHkOztqiuxftrew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a8:c0:fa:6c:c4:94:df:12:1b:54:7d:79:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=4ef9762b62fa7ff8f2e509f0fdbd92b47751f5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:86:53:ce:49:a5:d7:8c:17:38:a2:b8:c0:
1b:78:48:2d:f3:03:4e:95:b6:df:10:8d:ef:11:f1:
11:53:df:15:76:52:41:fe:bf:68:eb:db:f3:da:bd:
4e:20:75:bb:ee:26:e8:4d:93:8b:8f:9a:42:2f:e5:
3a:cf:8d:51:27:75:82:96:7b:1d:c8:c1:b3:f7:74:
08:85:d5:e3:82:4e:4e:80:65:46:2b:1d:c0:1b:6f:
25:08:68:6a:cf:1d:c8:f6:ec:7b:7f:67:e2:2c:74:
c1:d7:bf:0e:9c:de:fa:44:1c:a7:58:2e:2a:68:74:
ca:68:34:56:87:55:0d:df:f8:cb:12:84:1f:a1:26:
d7:01:52:8f:e9:26:13:02:19:25:d7:84:a7:ee:9e:
4e:7d:c9:17:85:03:5f:ef:9b:45:c3:23:5b:64:8e:
ed:1c:57:54:00:c9:9f:4b:e7:f5:91:47:d8:60:f1:
58:0b:b3:82:49:0a:48:04:b6:ad:b9:13:55:57:21:
2e:65:8d:cf:e3:df:c1:eb:8a:db:37:e0:69:b4:8d:
35:66:77:ec:11:88:0a:b8:d5:48:78:2b:0a:62:4c:
33:f3:de:8f:51:dc:49:9e:04:62:a3:ae:94:2d:ec:
54:a4:a8:a9:1a:50:8c:73:0d:ae:91:81:50:aa:7c:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F9:76:2B:62:FA:7F:F8:F2:E5:09:F0:FD:BD:92:B4:77:51:F5:F1
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b6:ce:a4:3a:eb:e3:a9:a2:f7:bd:77:f8:c0:60:50:71:4a:
f2:b9:6e:2d:31:b2:72:d7:bd:89:6d:13:c4:4d:34:86:fb:af:
ca:5f:ce:5a:e4:44:19:14:d7:4f:d8:ae:61:3f:f7:62:09:72:
79:6f:53:32:18:a4:26:3c:d5:1f:aa:a9:43:0a:8b:9b:76:1c:
db:fa:c1:11:3b:f2:6f:12:5a:36:19:b1:8e:bc:dc:d6:7b:9a:
d8:8e:ea:33:65:ff:e4:36:a1:e7:73:c7:62:3d:72:04:d7:68:
8e:6e:63:50:a3:d7:e3:0f:36:ad:a8:6b:b5:0f:5d:5f:98:de:
7a:00:0f:18:8a:e8:26:0f:95:bf:1a:73:13:c4:98:63:56:b2:
bf:18:57:55:ee:22:ca:f2:2f:3c:d7:46:fe:20:ea:d4:ed:d7:
c4:d5:69:4a:5a:52:25:35:b2:13:8e:20:31:6b:ce:56:ae:df:
7d:a9:90:39:91:a7:7a:d4:10:9b:84:a2:b1:d4:59:ab:84:42:
f1:b8:c5:53:c7:06:d8:a5:46:90:52:a2:50:60:cf:fc:25:72:
06:e9:f9:50:0a:92:a7:ed:4b:d2:68:21:2e:1f:bf:11:1e:39:
44:2b:00:de:51:db:2b:3b:28:6e:57:01:73:c2:9d:5a:05:91:
f3:53:8d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZajA+mzElN8SG1R9efYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNjc4NDY5NTc0YWNjMDNkNzgyZTYzMjgxZmY0NGZhYWFi
M2Y4NDcwHhcNMjYwMzI5MDcwMTE5WhcNMjYwMzMwMDcwMTE5WjAzMTEwLwYDVQQD
Eyg0ZWY5NzYyYjYyZmE3ZmY4ZjJlNTA5ZjBmZGJkOTJiNDc3NTFmNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUyGU85JpdeMFziiuMAbeEgt8wNO
lbbfEI3vEfERU98VdlJB/r9o69vz2r1OIHW77iboTZOLj5pCL+U6z41RJ3WClnsd
yMGz93QIhdXjgk5OgGVGKx3AG28lCGhqzx3I9ux7f2fiLHTB178OnN76RBynWC4q
aHTKaDRWh1UN3/jLEoQfoSbXAVKP6SYTAhkl14Sn7p5OfckXhQNf75tFwyNbZI7t
HFdUAMmfS+f1kUfYYPFYC7OCSQpIBLatuRNVVyEuZY3P49/B64rbN+BptI01Znfs
EYgKuNVIeCsKYkwz896PUdxJngRio66ULexUpKipGlCMcw2ukYFQqny+BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE75diti+n/48uUJ8P29krR3UfXxMB8GA1UdIwQY
MBaAFO9nhGlXSswD14LmMoH/RPqqs/hHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEt
ZGMwNTllNjliMWQwLzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEtZGMwNTllNjliMWQw
LzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7bOpDrr
46mi9713+MBgUHFK8rluLTGycte9iW0TxE00hvuvyl/OWuREGRTXT9iuYT/3Ygly
eW9TMhikJjzVH6qpQwqLm3Yc2/rBETvybxJaNhmxjrzc1nua2I7qM2X/5Dah53PH
Yj1yBNdojm5jUKPX4w82rahrtQ9dX5jeegAPGIroJg+VvxpzE8SYY1ayvxhXVe4i
yvIvPNdG/iDq1O3XxNVpSlpSJTWyE44gMWvOVq7ffamQOZGnetQQm4SisdRZq4RC
8bjFU8cG2KVGkFKiUGDP/CVyBun5UAqSp+1L0mghLh+/ER45RCsA3lHbKzsoblcB
c8KdWgWR81ONSg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:32 2026 by rpki-client