Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: 3RWUOqCRPGK/hqrKsywnr5XGNLaQ5N5rsh9syQIPX10=
Subject key identifier: 6F:9B:31:38:5D:36:26:09:24:5C:23:C2:2E:8B:9D:DB:44:ED:47:70
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019D371B4F1D3688F88337FCAA7382A7F6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 01:00:29 +0000
Manifest this update: Sun 29 Mar 2026 01:00:29 +0000
Manifest next update: Mon 30 Mar 2026 01:00:29 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: FUlRzyrjCuGSbPpNlMSkBweGSGxRgZ2FoTU5dVTzrS4=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4f:1d:36:88:f8:83:37:fc:aa:73:82:a7:f6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Mar 29 01:00:29 2026 GMT
Not After : Mar 30 01:00:29 2026 GMT
Subject: CN=6f9b31385d362609245c23c22e8b9ddb44ed4770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:a1:10:13:b9:92:a5:f4:4c:7c:8a:fc:bd:
54:d1:b7:2c:9c:fa:93:07:6c:bd:02:91:8c:28:64:
90:a5:65:28:1b:d1:f0:c7:84:d6:f3:96:47:31:b8:
bc:75:9a:96:bd:79:28:45:b0:ac:19:53:27:8b:2c:
2a:0e:4f:30:8f:a0:fd:58:04:57:06:53:e4:3c:60:
89:f0:c0:ea:6d:fc:14:fb:5d:e0:cd:b3:fd:dc:0b:
47:8c:38:db:68:94:89:b8:ae:06:18:e2:8d:4c:8a:
08:d2:ed:42:34:fa:bd:af:0c:e6:bd:c2:db:78:d5:
2a:59:8b:01:c1:1f:b8:10:bc:20:77:7c:d6:04:e3:
f4:62:e5:cf:71:e1:85:72:7d:c9:bd:66:5c:d7:cb:
67:9a:ef:5b:92:31:c0:be:5d:48:2e:f1:b1:33:66:
9f:2f:76:4c:17:3b:de:cd:59:38:8c:10:a7:46:bc:
4c:ae:57:d7:78:0c:84:94:c2:2c:3e:4a:c6:71:69:
89:3e:70:95:60:d8:3e:ab:16:22:b2:f1:3c:87:85:
dc:34:8a:af:25:a5:47:8c:e7:39:ef:3b:13:bc:ee:
ad:70:65:95:9a:df:dd:83:e3:3b:19:34:53:a0:a6:
1a:39:72:93:6e:f2:45:cc:7d:f0:45:ad:ce:b4:cf:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:31:38:5D:36:26:09:24:5C:23:C2:2E:8B:9D:DB:44:ED:47:70
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:18:03:2b:6e:e7:86:15:56:51:a5:dd:1c:0a:e8:f5:d5:70:
a1:70:eb:05:bb:ed:71:ec:dd:fe:f4:af:ce:85:f1:7d:e8:a0:
67:29:70:95:98:a9:7f:e4:01:85:2a:30:2b:1d:15:47:79:80:
86:51:aa:f0:ea:7f:37:13:32:33:de:aa:7a:3f:ab:2f:fd:d1:
fb:72:2c:51:03:57:91:d3:1e:8a:e9:a4:93:6c:45:a8:5b:80:
15:9a:04:33:0f:b4:df:29:c7:40:74:2e:92:a9:98:f6:4d:26:
3a:ba:b5:ba:cb:66:04:c4:bd:f3:b0:9e:db:77:8b:a1:19:85:
4c:ad:9d:1b:3a:23:2b:56:36:1c:74:b7:2c:04:d0:5e:ec:4b:
a6:6a:79:58:71:af:fc:79:06:39:a4:54:1f:d3:55:0f:43:a7:
ad:38:71:bb:38:74:f6:f1:17:79:a3:84:de:5e:30:b0:6f:b2:
95:5f:ea:2d:6e:f1:2b:8d:1e:48:ec:7d:f0:ff:cf:6e:ed:48:
85:7a:19:24:49:44:3e:42:b1:b7:06:63:4c:58:f9:6c:89:d5:
00:a2:2b:99:1d:2a:29:8d:26:4d:a0:d0:04:6c:61:d9:6a:87:
58:55:2e:6c:b2:9b:ca:bb:ac:3c:08:63:33:93:a9:85:1e:c6:
b0:6a:4d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G08dNoj4gzf8qnOCp/a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1
ZDY0MGMwHhcNMjYwMzI5MDEwMDI5WhcNMjYwMzMwMDEwMDI5WjAzMTEwLwYDVQQD
Eyg2ZjliMzEzODVkMzYyNjA5MjQ1YzIzYzIyZThiOWRkYjQ0ZWQ0NzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdOhEBO5kqX0THyK/L1U0bcsnPqT
B2y9ApGMKGSQpWUoG9Hwx4TW85ZHMbi8dZqWvXkoRbCsGVMniywqDk8wj6D9WARX
BlPkPGCJ8MDqbfwU+13gzbP93AtHjDjbaJSJuK4GGOKNTIoI0u1CNPq9rwzmvcLb
eNUqWYsBwR+4ELwgd3zWBOP0YuXPceGFcn3JvWZc18tnmu9bkjHAvl1ILvGxM2af
L3ZMFzvezVk4jBCnRrxMrlfXeAyElMIsPkrGcWmJPnCVYNg+qxYisvE8h4XcNIqv
JaVHjOc57zsTvO6tcGWVmt/dg+M7GTRToKYaOXKTbvJFzH3wRa3OtM/sAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+bMThdNiYJJFwjwi6LndtE7UdwMB8GA1UdIwQY
MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut
MDJmZmNlZmYxYWNjLzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj
LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRgDK27n
hhVWUaXdHAro9dVwoXDrBbvtcezd/vSvzoXxfeigZylwlZipf+QBhSowKx0VR3mA
hlGq8Op/NxMyM96qej+rL/3R+3IsUQNXkdMeiumkk2xFqFuAFZoEMw+03ynHQHQu
kqmY9k0mOrq1ustmBMS987Ce23eLoRmFTK2dGzojK1Y2HHS3LATQXuxLpmp5WHGv
/HkGOaRUH9NVD0OnrThxuzh09vEXeaOE3l4wsG+ylV/qLW7xK40eSOx98P/Pbu1I
hXoZJElEPkKxtwZjTFj5bInVAKIrmR0qKY0mTaDQBGxh2WqHWFUubLKbyrusPAhj
M5OphR7GsGpNuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:45 2026 by rpki-client