Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: 7HR6Us1yEB9M/aw2tXHy/EQYmXZ/rezQBiWlyCj5k5g=
Subject key identifier: 9D:8F:F7:CF:C8:83:D7:A5:C7:25:F3:85:0B:94:0D:BB:9E:76:D4:4B
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 019D38655A0511977AAAF4E84D9A5B8079E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: ri2iVNVcgWWRq6rqCgE2YRC54ZwssAzAUWde+XPM4E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5a:05:11:97:7a:aa:f4:e8:4d:9a:5b:80:79:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=9d8ff7cfc883d7a5c725f3850b940dbb9e76d44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:fa:0d:2b:b4:89:51:23:59:55:d8:80:73:
25:53:a8:aa:60:ec:33:f5:54:7a:69:f3:54:59:52:
77:f7:0b:8f:39:cc:d4:c9:cc:ae:17:3c:e8:65:a6:
1f:22:83:39:03:fd:24:e5:5c:a2:37:37:35:b8:dd:
e8:f0:0e:58:fb:8c:7e:1a:da:87:e6:97:33:b4:79:
38:b0:78:4f:70:25:ea:c1:43:b7:ef:d4:14:a6:13:
19:05:47:23:6f:a2:3a:18:53:89:17:42:44:66:04:
17:f1:9d:5e:67:b4:5d:81:ab:ac:e9:75:b5:37:17:
d5:46:24:56:24:1a:47:7c:95:14:84:56:bf:ad:4e:
2d:36:f4:39:0f:cd:05:73:07:2c:6f:48:9e:f4:7b:
74:f3:b9:8f:d1:f7:e9:69:b2:d1:78:5b:12:cd:c6:
51:b1:a9:14:e1:3e:60:eb:32:20:a8:49:e5:11:06:
79:9b:fe:6d:bd:84:81:a3:2e:07:15:96:01:54:ab:
04:d0:d8:21:67:b4:35:dc:42:60:90:3f:d6:88:6b:
4d:b0:e3:0f:1f:52:cd:e6:cd:bf:02:92:66:7f:41:
87:fd:d2:ee:ca:9b:81:32:47:ca:75:19:db:0f:41:
a8:34:ab:70:69:bf:70:dd:95:38:c3:61:97:66:5a:
e6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8F:F7:CF:C8:83:D7:A5:C7:25:F3:85:0B:94:0D:BB:9E:76:D4:4B
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9e:5a:05:bc:d6:38:f2:6f:04:aa:a4:6a:dc:08:2b:ab:00:
53:ac:a0:c7:4e:74:bb:6c:3e:bc:d0:0e:11:22:b4:73:6e:57:
93:f1:10:04:a3:9e:ea:0c:c1:5e:ca:7f:0e:ab:a3:fd:df:49:
f7:3f:15:07:12:2a:0b:3b:d1:4c:87:ed:ad:6d:5f:52:db:f2:
78:43:a4:a0:36:e0:9b:b4:d9:ac:59:02:89:93:4b:b5:a4:ff:
2f:39:04:8d:01:c6:73:4e:7e:f7:43:f0:4d:6f:e4:50:cc:71:
4f:ad:eb:b5:19:25:01:a0:b2:58:b6:9d:ef:90:93:be:3b:61:
22:30:cb:01:18:f4:4c:5b:0d:9e:ae:e5:f5:f0:64:78:b8:7e:
45:3f:7d:ef:45:6a:aa:1b:fa:10:bc:74:26:b4:39:89:52:6e:
07:93:1c:46:95:0e:9b:40:1b:13:a0:2b:05:eb:57:3d:76:3e:
f9:b6:c1:b5:de:ab:5a:db:78:c6:25:63:67:3a:d8:5e:32:33:
45:71:2c:6d:cc:d6:cf:3f:7c:43:f5:82:12:fb:1c:7c:02:d9:
1f:ae:af:21:9b:12:63:dc:a9:ab:1e:be:52:42:0c:89:3a:d9:
4e:34:c0:6a:85:fe:ee:d0:b4:12:52:4e:f4:a5:10:b0:93:15:
32:2f:82:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVoFEZd6qvToTZpbgHnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVlMjFiODQ1YmIxZGRmYWJiMzg4ODgwMmMxOWE2MjI3
NzM4MDIwHhcNMjYwMzI5MDcwMDU5WhcNMjYwMzMwMDcwMDU5WjAzMTEwLwYDVQQD
Eyg5ZDhmZjdjZmM4ODNkN2E1YzcyNWYzODUwYjk0MGRiYjllNzZkNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Gz6DSu0iVEjWVXYgHMlU6iqYOwz
9VR6afNUWVJ39wuPOczUycyuFzzoZaYfIoM5A/0k5VyiNzc1uN3o8A5Y+4x+GtqH
5pcztHk4sHhPcCXqwUO379QUphMZBUcjb6I6GFOJF0JEZgQX8Z1eZ7Rdgaus6XW1
NxfVRiRWJBpHfJUUhFa/rU4tNvQ5D80Fcwcsb0ie9Ht087mP0ffpabLReFsSzcZR
sakU4T5g6zIgqEnlEQZ5m/5tvYSBoy4HFZYBVKsE0NghZ7Q13EJgkD/WiGtNsOMP
H1LN5s2/ApJmf0GH/dLuypuBMkfKdRnbD0GoNKtwab9w3ZU4w2GXZlrmwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2P98/Ig9elxyXzhQuUDbuedtRLMB8GA1UdIwQY
MBaAFLO14huEW7Hd+rs4iIAsGaYidzgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTIt
ZmU1MDY1MGUxYmU0LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84ODE3OGEtN2Y1MS00MzY1LWFhZTItZmU1MDY1MGUxYmU0
LzEvczdYaUc0UmJzZDM2dXppSWdDd1pwaUozT0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZ5aBbzW
OPJvBKqkatwIK6sAU6ygx050u2w+vNAOESK0c25Xk/EQBKOe6gzBXsp/Dquj/d9J
9z8VBxIqCzvRTIftrW1fUtvyeEOkoDbgm7TZrFkCiZNLtaT/LzkEjQHGc05+90Pw
TW/kUMxxT63rtRklAaCyWLad75CTvjthIjDLARj0TFsNnq7l9fBkeLh+RT9970Vq
qhv6ELx0JrQ5iVJuB5McRpUOm0AbE6ArBetXPXY++bbBtd6rWtt4xiVjZzrYXjIz
RXEsbczWzz98Q/WCEvscfALZH66vIZsSY9ypqx6+UkIMiTrZTjTAaoX+7tC0ElJO
9KUQsJMVMi+CLw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:58 2026 by rpki-client