Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: gN+R6BG0s6JBXnt92/EhUXUcEVPSC4L5QJrbqjQY9bY=
Subject key identifier: 70:0A:73:5F:DD:A5:F5:79:60:78:51:32:87:8C:6C:66:72:3F:40:BA
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 019E2F5FFC66048900312E422C0A7EC9EA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 1152
Signing time: Sat 16 May 2026 06:01:20 +0000
Manifest this update: Sat 16 May 2026 06:01:20 +0000
Manifest next update: Sun 17 May 2026 06:01:20 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: RL8M8P23tKeSHgoPLdYdxOs+94u6TPH9O5MmD8QbToE=)
2: xkug34IJaWSwOfn5zGdas0MixZ4.roa (hash: IepgvoNLMpyof9xTWeZX3c1cPMLbQuZpVjyEywQxdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:fc:66:04:89:00:31:2e:42:2c:0a:7e:c9:ea:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: May 16 06:01:20 2026 GMT
Not After : May 17 06:01:20 2026 GMT
Subject: CN=700a735fdda5f57960785132878c6c66723f40ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:e5:39:31:5a:0e:aa:09:15:f4:4d:7d:0b:
7a:4d:a2:13:53:6a:0d:a3:7d:04:2c:42:87:8b:09:
9f:e5:7e:78:f2:39:39:90:6b:9e:29:37:5a:ae:04:
62:53:f7:5f:63:c2:f5:2e:67:36:a5:33:46:ee:b4:
93:d7:ad:2f:d6:0c:f7:99:80:90:7e:94:d0:d7:14:
8d:de:b0:a0:44:9c:a8:21:86:7d:48:76:69:77:74:
ab:f0:d7:bb:fe:b1:f7:f4:a6:ae:62:d7:90:c6:e3:
09:62:70:9f:8d:05:07:c2:2b:21:aa:53:18:7a:c1:
e8:f2:39:28:b6:8a:dc:ef:98:be:3a:74:65:61:e5:
48:48:1e:9b:d3:60:1f:84:f4:11:d9:88:86:89:c8:
87:63:d2:71:72:77:d7:a2:f7:aa:87:df:23:1b:87:
ee:61:48:0b:ee:18:06:19:19:0b:f7:ba:01:a6:b0:
98:84:3c:3c:21:51:2b:05:9e:57:54:24:40:5c:f2:
27:91:98:3d:62:3d:c9:e4:c1:fe:a5:3b:35:21:e0:
42:dc:c7:96:22:8f:04:32:f9:0c:21:66:5a:3e:74:
f8:9e:4e:64:a1:d2:79:7a:28:b2:65:53:d4:38:91:
09:c1:6c:2a:4b:62:99:89:76:ec:77:02:12:a0:2f:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0A:73:5F:DD:A5:F5:79:60:78:51:32:87:8C:6C:66:72:3F:40:BA
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:75:f8:06:c8:ac:f0:5b:96:cb:6d:49:76:0c:cc:e9:f5:
f6:78:c2:88:57:6c:e3:43:b3:c0:69:dc:58:fe:34:0a:7d:67:
5a:cf:17:91:6c:84:cf:00:4c:fa:79:1a:ce:4f:59:8c:22:54:
90:17:05:b8:a1:42:a2:fa:f3:c0:a5:56:b0:b6:34:1a:d3:10:
98:86:7b:99:d1:8f:64:45:30:47:02:3a:1f:4f:1b:b2:db:7d:
6d:ce:7f:a1:e6:d4:a8:4a:e1:8c:34:b7:1f:00:02:6f:e9:1e:
de:f7:9f:0c:8f:ab:36:fc:15:97:8f:f6:b1:06:b8:7b:9d:fe:
6f:ad:69:c0:83:0f:1f:ff:79:e7:6f:58:4a:ea:c8:b8:db:ef:
96:54:d5:2a:4b:27:39:c4:d6:0c:8b:33:26:a2:89:0d:8c:6b:
9b:e2:aa:0a:6b:b0:56:69:8c:25:d8:4d:5b:9a:71:80:de:c1:
7f:cd:2b:10:10:79:fd:ac:d0:40:93:24:aa:20:ec:f0:7b:84:
5c:82:bd:68:1d:91:e6:56:c8:4d:f4:6d:9f:98:2e:65:67:a8:
65:60:06:af:1c:82:c3:42:ee:9e:bc:15:9d:36:90:f9:45:92:
b9:49:59:d2:84:17:74:0c:f4:04:16:45:dd:8b:1a:64:72:6f:
6a:38:d6:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vX/xmBIkAMS5CLAp+yeqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYzQ1ZmNhZGM0YzkzM2FjOGZmNGUwYjQzNGE1YmZiNTY3
YjY1YTEwHhcNMjYwNTE2MDYwMTIwWhcNMjYwNTE3MDYwMTIwWjAzMTEwLwYDVQQD
Eyg3MDBhNzM1ZmRkYTVmNTc5NjA3ODUxMzI4NzhjNmM2NjcyM2Y0MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yblOTFaDqoJFfRNfQt6TaITU2oN
o30ELEKHiwmf5X548jk5kGueKTdargRiU/dfY8L1Lmc2pTNG7rST160v1gz3mYCQ
fpTQ1xSN3rCgRJyoIYZ9SHZpd3Sr8Ne7/rH39KauYteQxuMJYnCfjQUHwishqlMY
esHo8jkotorc75i+OnRlYeVISB6b02AfhPQR2YiGiciHY9JxcnfXoveqh98jG4fu
YUgL7hgGGRkL97oBprCYhDw8IVErBZ5XVCRAXPInkZg9Yj3J5MH+pTs1IeBC3MeW
Io8EMvkMIWZaPnT4nk5kodJ5eiiyZVPUOJEJwWwqS2KZiXbsdwISoC+gLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAKc1/dpfV5YHhRMoeMbGZyP0C6MB8GA1UdIwQY
MBaAFOzEX8rcTJM6yP9OC0NKW/tWe2WhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQt
ZTA3NmY4Y2NiOGI5LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQtZTA3NmY4Y2NiOGI5
LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlt1+AbI
rPBblsttSXYMzOn19njCiFds40OzwGncWP40Cn1nWs8XkWyEzwBM+nkazk9ZjCJU
kBcFuKFCovrzwKVWsLY0GtMQmIZ7mdGPZEUwRwI6H08bstt9bc5/oebUqErhjDS3
HwACb+ke3vefDI+rNvwVl4/2sQa4e53+b61pwIMPH/95529YSurIuNvvllTVKksn
OcTWDIszJqKJDYxrm+KqCmuwVmmMJdhNW5pxgN7Bf80rEBB5/azQQJMkqiDs8HuE
XIK9aB2R5lbITfRtn5guZWeoZWAGrxyCw0LunrwVnTaQ+UWSuUlZ0oQXdAz0BBZF
3YsaZHJvajjWDQ==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:08 2026 by rpki-client