Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: cnJN30pQ2PVa5mdRcmMv0StRTXLuJSxgJ2znE1K4UMo=
Subject key identifier: E1:08:AC:49:1E:6E:BE:F1:F9:D1:A3:A7:5A:DD:C9:C4:BB:2C:57:44
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 019E3072E91CEDC96BC79468B16913F0C62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 127A
Signing time: Sat 16 May 2026 11:01:37 +0000
Manifest this update: Sat 16 May 2026 11:01:37 +0000
Manifest next update: Sun 17 May 2026 11:01:37 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: clzIlwTg5fDxdciEs2rUfl5viC/a7vaLuFgLbxDVTvU=)
2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:e9:1c:ed:c9:6b:c7:94:68:b1:69:13:f0:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: May 16 11:01:37 2026 GMT
Not After : May 17 11:01:37 2026 GMT
Subject: CN=e108ac491e6ebef1f9d1a3a75addc9c4bb2c5744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:b7:f3:50:10:85:2c:26:40:0f:4b:24:84:
ed:e1:bd:69:60:8c:c8:50:e3:d7:86:1c:8c:97:27:
9e:67:b3:b3:fd:a3:f7:51:6f:ae:49:07:56:85:90:
01:1c:9a:5c:f8:f3:7b:c7:e8:bb:0e:e0:56:1a:76:
da:e4:6a:f7:f9:a6:09:e5:f5:53:26:5e:d6:2f:2d:
43:f5:34:e8:14:c6:8b:0d:b5:8d:fb:fc:16:8b:46:
cc:4d:af:71:cd:d0:f5:c2:f4:81:08:c4:11:6a:52:
63:1e:be:31:b6:d1:d5:19:78:f8:b3:b3:ff:04:38:
7c:6e:23:df:d8:26:d2:e5:7e:2b:75:8b:65:22:95:
17:eb:34:52:e7:d1:f2:ab:78:d6:ef:84:f5:9e:fc:
58:b1:24:02:b9:6c:2b:7d:84:5d:d4:f1:ce:9d:2c:
c6:7d:19:28:9e:39:c4:ee:97:0d:a9:b5:22:94:4d:
de:d3:41:dc:81:40:a0:50:9e:45:f8:b5:10:14:f4:
db:c2:df:70:d2:ec:66:81:95:03:0d:80:a0:5b:90:
86:c5:d7:08:68:06:3b:c0:f4:1e:21:da:9c:5d:87:
87:31:19:58:c1:fd:c5:6e:7c:90:7d:60:30:15:1b:
b4:f9:eb:57:7e:a5:01:85:e1:81:98:d6:30:b0:74:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:08:AC:49:1E:6E:BE:F1:F9:D1:A3:A7:5A:DD:C9:C4:BB:2C:57:44
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:9f:5d:74:da:30:34:68:f3:fe:d5:fe:b5:00:8b:3e:5d:
87:2a:10:71:9a:3d:71:48:bc:43:f7:6b:a4:22:0a:05:7a:ff:
df:e5:5c:62:36:e3:55:f4:f8:1c:c8:91:e6:d9:22:f0:83:90:
c6:7e:51:a4:55:86:36:0b:35:c2:3c:09:28:8e:78:98:31:c1:
76:88:88:a4:c3:33:c3:79:f3:61:c2:0c:41:71:fd:35:dd:bb:
ed:4d:15:2d:14:4d:27:6f:28:f1:5c:f4:39:a5:f7:c1:5e:df:
80:bb:0d:24:e3:bd:69:1d:62:83:a0:16:d0:da:a9:e8:30:25:
9d:b5:61:24:3a:22:c6:33:e1:24:66:89:8e:e9:05:7f:27:da:
06:9a:ed:f0:24:19:2c:e4:b0:29:48:1c:54:8f:da:40:45:cb:
cb:eb:c4:d8:44:0c:89:5a:85:77:12:c7:4a:f9:8a:5e:b9:8a:
22:5a:3c:96:6e:48:a2:4e:6e:96:dd:05:04:65:0b:d1:2e:28:
99:d2:1e:72:bf:b5:74:d8:5a:d5:41:26:55:c2:d3:cd:b8:b7:
b2:4e:d0:cb:63:7f:fc:98:ad:ec:c2:01:60:b9:2d:6c:3d:e4:
4a:f2:dc:ce:29:27:9d:2b:24:2f:57:6b:01:67:3e:9c:e6:e3:
92:f7:8f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcukc7clrx5RosWkT8MYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2
ODI0ZjEwHhcNMjYwNTE2MTEwMTM3WhcNMjYwNTE3MTEwMTM3WjAzMTEwLwYDVQQD
EyhlMTA4YWM0OTFlNmViZWYxZjlkMWEzYTc1YWRkYzljNGJiMmM1NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpi381AQhSwmQA9LJITt4b1pYIzI
UOPXhhyMlyeeZ7Oz/aP3UW+uSQdWhZABHJpc+PN7x+i7DuBWGnba5Gr3+aYJ5fVT
Jl7WLy1D9TToFMaLDbWN+/wWi0bMTa9xzdD1wvSBCMQRalJjHr4xttHVGXj4s7P/
BDh8biPf2CbS5X4rdYtlIpUX6zRS59Hyq3jW74T1nvxYsSQCuWwrfYRd1PHOnSzG
fRkonjnE7pcNqbUilE3e00HcgUCgUJ5F+LUQFPTbwt9w0uxmgZUDDYCgW5CGxdcI
aAY7wPQeIdqcXYeHMRlYwf3FbnyQfWAwFRu0+etXfqUBheGBmNYwsHSH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEIrEkebr7x+dGjp1rdycS7LFdEMB8GA1UdIwQY
MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt
MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh
LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTifXXTa
MDRo8/7V/rUAiz5dhyoQcZo9cUi8Q/drpCIKBXr/3+VcYjbjVfT4HMiR5tki8IOQ
xn5RpFWGNgs1wjwJKI54mDHBdoiIpMMzw3nzYcIMQXH9Nd277U0VLRRNJ28o8Vz0
OaX3wV7fgLsNJOO9aR1ig6AW0Nqp6DAlnbVhJDoixjPhJGaJjukFfyfaBprt8CQZ
LOSwKUgcVI/aQEXLy+vE2EQMiVqFdxLHSvmKXrmKIlo8lm5Iok5ult0FBGUL0S4o
mdIecr+1dNha1UEmVcLTzbi3sk7Qy2N//Jit7MIBYLktbD3kSvLcziknnSskL1dr
AWc+nObjkvePaQ==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:49 2026 by rpki-client