Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: gXFXSpdzNdx6MWdevwDPd6tKT56U8/FOwPO5AG73cYE=
Subject key identifier: 99:77:4F:33:64:58:DE:56:05:57:29:4E:4E:7A:A3:C3:A5:2D:EA:11
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019D38D3BF08EFF2626B079758590688544A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 1610
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: +9uV+u8xW5Z382DjBHS+jtlIEA8sPrBB0Mx2ewxpAT4=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:bf:08:ef:f2:62:6b:07:97:58:59:06:88:54:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=99774f336458de560557294e4e7aa3c3a52dea11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:85:15:e9:73:8d:ee:ce:ae:46:b8:fa:23:
49:70:05:1d:d3:07:e0:96:4d:a8:d1:86:f1:5f:66:
41:aa:21:3b:2e:fa:83:90:57:09:ef:17:3d:4e:1e:
fb:f7:2b:a1:35:ab:d5:ab:0c:46:bf:7f:bd:3f:7a:
4d:c9:cb:53:0d:c0:e6:44:5a:12:a3:7e:bf:1d:b6:
08:97:e6:4b:a6:fd:1a:24:6b:10:50:36:07:ee:fc:
96:19:af:3e:5a:05:56:11:9a:73:28:14:4d:48:73:
6f:70:bf:0f:4f:04:90:4b:c8:ad:b6:af:27:3e:84:
3c:66:42:af:14:05:94:75:23:4a:f8:32:bf:a2:8f:
d2:b9:d2:da:17:5e:70:fe:10:d3:50:36:69:c2:e7:
3e:27:85:e3:8e:21:60:c0:9d:95:e7:61:20:9b:22:
57:65:e6:32:df:e8:ef:5f:96:00:31:f1:53:97:51:
53:f4:c8:d9:73:c6:4a:28:2e:8e:8b:bf:ef:ce:de:
6f:89:30:4d:3e:b2:a8:55:80:52:f8:ff:77:fd:91:
38:a1:00:1d:56:84:19:c0:c8:db:1f:74:b6:da:8f:
4b:d7:40:3c:e0:69:11:52:91:c4:97:70:62:0e:47:
40:22:9d:d8:bf:70:79:d1:23:13:f1:f1:2b:a0:4d:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:4F:33:64:58:DE:56:05:57:29:4E:4E:7A:A3:C3:A5:2D:EA:11
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:91:7d:7d:bf:d2:b0:b6:80:2d:17:ae:62:be:81:ee:78:
34:32:d1:b4:eb:62:14:21:8d:9c:31:3e:58:9f:5e:f6:7b:bb:
0c:1e:84:fe:a7:79:f0:dc:c7:59:3b:30:98:cf:ff:5c:b1:9d:
d9:d8:6c:d3:04:88:4d:34:0f:48:08:8d:3d:94:a9:1d:f2:bf:
10:33:ea:ba:d3:0f:3e:0f:77:e5:13:cc:90:c0:c1:61:6a:7d:
29:c8:32:41:24:45:e0:bf:59:fc:45:df:ec:04:91:76:b8:86:
bb:ea:3a:7b:a7:5a:c3:5e:b5:90:fa:7c:ac:6c:5d:c1:52:0a:
9f:eb:ba:d6:fc:10:39:2b:30:47:d4:35:43:c5:d7:48:13:fc:
13:b6:60:ff:bf:00:dc:f3:e1:e9:b8:46:dc:1c:94:03:18:2b:
e2:0a:db:57:2f:8b:8f:2e:dd:62:8a:94:a7:c5:bf:b3:92:03:
45:94:b6:e3:80:69:ed:53:3e:3f:86:c3:ac:cf:e3:cc:e4:ea:
91:fe:89:16:de:ff:e2:e4:5d:9a:2e:e0:e4:28:f1:b9:2b:f8:
76:99:9d:dc:d1:97:af:74:0d:b5:67:af:e5:37:b4:16:94:4c:
f3:d7:e9:c6:84:ae:21:56:d8:ac:93:53:0e:fa:f4:96:16:9d:
dd:7b:78:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04078I7/JiaweXWFkGiFRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh
YTE0ODcwHhcNMjYwMzI5MDkwMTM0WhcNMjYwMzMwMDkwMTM0WjAzMTEwLwYDVQQD
Eyg5OTc3NGYzMzY0NThkZTU2MDU1NzI5NGU0ZTdhYTNjM2E1MmRlYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ACFFelzje7Orka4+iNJcAUd0wfg
lk2o0YbxX2ZBqiE7LvqDkFcJ7xc9Th779yuhNavVqwxGv3+9P3pNyctTDcDmRFoS
o36/HbYIl+ZLpv0aJGsQUDYH7vyWGa8+WgVWEZpzKBRNSHNvcL8PTwSQS8ittq8n
PoQ8ZkKvFAWUdSNK+DK/oo/SudLaF15w/hDTUDZpwuc+J4XjjiFgwJ2V52EgmyJX
ZeYy3+jvX5YAMfFTl1FT9MjZc8ZKKC6Oi7/vzt5viTBNPrKoVYBS+P93/ZE4oQAd
VoQZwMjbH3S22o9L10A84GkRUpHEl3BiDkdAIp3Yv3B50SMT8fEroE2oDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl3TzNkWN5WBVcpTk56o8OlLeoRMB8GA1UdIwQY
MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt
YzgxNWU1MGVjNWU3LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3
LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4+RfX2/
0rC2gC0XrmK+ge54NDLRtOtiFCGNnDE+WJ9e9nu7DB6E/qd58NzHWTswmM//XLGd
2dhs0wSITTQPSAiNPZSpHfK/EDPqutMPPg935RPMkMDBYWp9KcgyQSRF4L9Z/EXf
7ASRdriGu+o6e6daw161kPp8rGxdwVIKn+u61vwQOSswR9Q1Q8XXSBP8E7Zg/78A
3PPh6bhG3ByUAxgr4grbVy+Ljy7dYoqUp8W/s5IDRZS244Bp7VM+P4bDrM/jzOTq
kf6JFt7/4uRdmi7g5CjxuSv4dpmd3NGXr3QNtWev5Te0FpRM89fpxoSuIVbYrJNT
Dvr0lhad3Xt4Nw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:10 2026 by rpki-client