Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier: 2cFCrpS1bQCkE2pW7MD0acNdTZVhOPT3HZmtCDORFZc=
Subject key identifier: 67:3D:39:67:DF:C4:BF:CE:F0:69:09:78:64:FF:BA:67:84:3A:17:66
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer: /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial: 019D38659F2D5510B44428C6D5AC20AD47F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number: 08EC
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: TXQD8tWd/J2N9PxeXg5D/5U6gsPgTW7p7U3cH/D0LHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9f:2d:55:10:b4:44:28:c6:d5:ac:20:ad:47:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=673d3967dfc4bfcef069097864ffba67843a1766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:cf:21:6b:fd:ab:5a:1c:dc:17:36:cd:a5:
9c:7e:44:74:01:da:65:5f:27:91:76:1d:79:7c:2e:
f6:d5:6b:77:5c:ea:61:b0:f5:3a:2b:3b:cc:a9:84:
c4:d4:89:48:a2:72:ff:39:85:7a:07:8a:61:82:5d:
ac:69:1b:f7:55:22:5d:c2:97:8e:42:d6:30:c7:36:
25:f5:90:25:50:0e:20:06:b6:73:b9:fb:93:53:14:
11:67:f4:b7:fc:62:6d:69:dd:af:12:40:9d:da:38:
de:57:47:ae:ed:81:58:73:34:54:03:7e:77:4f:d7:
24:03:ef:a2:9a:01:98:72:88:f6:f6:23:b8:bc:58:
37:62:3a:5e:1b:90:f1:80:a4:db:72:a9:e1:d7:85:
6e:0b:53:91:ff:e4:5e:ab:93:a3:a2:a6:cb:7b:a1:
1e:cb:b6:8e:c3:6d:3e:ab:fb:26:3a:78:8d:5b:9a:
2a:9c:91:9d:4f:16:83:fa:9e:45:d5:2d:6c:7f:ac:
e9:b6:e7:98:74:16:c5:27:86:ff:4e:b8:d0:67:9c:
01:c7:3c:45:90:bc:cb:b4:29:01:de:99:a5:05:d8:
68:ab:f1:04:72:00:95:c5:2a:00:8c:43:dd:ca:ce:
2a:a9:af:bd:90:e0:a4:10:7d:9e:13:e4:72:a1:eb:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3D:39:67:DF:C4:BF:CE:F0:69:09:78:64:FF:BA:67:84:3A:17:66
X509v3 Authority Key Identifier:
keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ea:56:14:fb:19:16:ba:62:70:a7:31:59:3c:50:f4:a4:8b:
2d:6c:6e:08:85:b7:c7:04:27:45:66:55:44:99:33:37:f0:73:
44:76:7e:0c:83:b7:c8:9b:42:cf:a9:c0:8c:df:e9:24:fb:71:
89:62:c8:37:aa:da:67:0e:8c:cc:aa:98:89:ca:37:dc:7a:5e:
d9:52:8f:d4:ed:8c:5e:43:d5:5d:19:7a:57:dc:5c:9f:22:f6:
cc:5e:11:82:7e:7e:36:b6:06:eb:f6:1a:3e:42:37:2c:f4:a1:
4e:49:85:83:22:96:97:49:bf:c0:27:85:9f:b0:60:bb:aa:03:
80:2f:a7:3c:a1:73:f6:28:56:4a:32:2c:43:c0:8c:88:b6:da:
0b:e7:88:60:bc:e5:21:53:d2:4e:f0:6d:f7:e6:e4:91:bb:35:
50:9a:22:9b:14:6b:8a:5c:15:34:f4:55:97:56:58:0e:1b:01:
b7:e6:32:6c:0a:ce:ea:3d:57:19:e6:f5:d5:ae:9d:10:9e:76:
b9:2a:db:52:64:85:23:24:10:a1:3a:2e:d4:f9:db:27:f6:fd:
1b:57:be:59:00:0a:fa:c1:6a:c5:a2:82:e4:e9:e3:3f:d4:0b:
66:d3:5e:4b:2a:4e:41:de:7d:4e:4a:dd:44:9e:53:32:a2:27:
01:c0:7a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZ8tVRC0RCjG1awgrUfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWZhOWMyOTUwNmI0ZmNmMTcyOTIxMWE0ZmE3N2MxZjIx
MTQ2OGQwHhcNMjYwMzI5MDcwMTE3WhcNMjYwMzMwMDcwMTE3WjAzMTEwLwYDVQQD
Eyg2NzNkMzk2N2RmYzRiZmNlZjA2OTA5Nzg2NGZmYmE2Nzg0M2ExNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVzPIWv9q1oc3Bc2zaWcfkR0Adpl
XyeRdh15fC721Wt3XOphsPU6KzvMqYTE1IlIonL/OYV6B4phgl2saRv3VSJdwpeO
QtYwxzYl9ZAlUA4gBrZzufuTUxQRZ/S3/GJtad2vEkCd2jjeV0eu7YFYczRUA353
T9ckA++imgGYcoj29iO4vFg3YjpeG5DxgKTbcqnh14VuC1OR/+Req5OjoqbLe6Ee
y7aOw20+q/smOniNW5oqnJGdTxaD+p5F1S1sf6zptueYdBbFJ4b/TrjQZ5wBxzxF
kLzLtCkB3pmlBdhoq/EEcgCVxSoAjEPdys4qqa+9kOCkEH2eE+RyoeucGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc9OWffxL/O8GkJeGT/umeEOhdmMB8GA1UdIwQY
MBaAFO7vqcKVBrT88XKSEaT6d8HyEUaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQt
Y2YzNjA3M2QyZGIwLzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQtY2YzNjA3M2QyZGIw
LzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+pWFPsZ
FrpicKcxWTxQ9KSLLWxuCIW3xwQnRWZVRJkzN/BzRHZ+DIO3yJtCz6nAjN/pJPtx
iWLIN6raZw6MzKqYico33Hpe2VKP1O2MXkPVXRl6V9xcnyL2zF4Rgn5+NrYG6/Ya
PkI3LPShTkmFgyKWl0m/wCeFn7Bgu6oDgC+nPKFz9ihWSjIsQ8CMiLbaC+eIYLzl
IVPSTvBt9+bkkbs1UJoimxRrilwVNPRVl1ZYDhsBt+YybArO6j1XGeb11a6dEJ52
uSrbUmSFIyQQoTou1PnbJ/b9G1e+WQAK+sFqxaKC5OnjP9QLZtNeSypOQd59Tkrd
RJ5TMqInAcB6Tg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:15 2026 by rpki-client