Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
File: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft (raw, json)
Hash identifier: KQURjClvtQTCZSMDgckBMRp9EJsytPHdrkjXx34zjVg=
Subject key identifier: B1:C4:B6:EB:51:DD:3D:AB:13:F6:FD:00:F7:53:88:7F:0D:12:95:49
Authority key identifier: EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2
Certificate issuer: /CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2
Certificate serial: 019D37F710E877477A9D0F0A4AE3186D745F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
Manifest number: 01AD
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl (hash: FVzGgdIKCTi8YM7bksu8VEsYlFfvoNkD/6V7PWJwWwM=)
2: gSax7OXH-iNOvXWvL1n7wzpYk_A.roa (hash: 1itI78/MFf8nZzpbrs5mEB4VVmo+weMxJkNLYAmF8A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:10:e8:77:47:7a:9d:0f:0a:4a:e3:18:6d:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=b1c4b6eb51dd3dab13f6fd00f753887f0d129549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:b8:f5:92:1a:a3:66:7e:24:10:18:b3:9a:
4c:85:9d:dd:f7:9c:7c:5b:6b:7c:40:b4:6e:55:01:
a2:17:06:52:4f:25:1e:d6:b4:34:cf:b5:a0:b3:21:
8e:eb:c6:f3:36:76:9f:69:62:41:1d:66:3f:3a:aa:
7f:a0:e1:6f:89:40:7b:c2:c7:6f:47:4b:90:97:df:
ed:46:9b:4a:9a:8d:fb:bc:3d:68:89:87:3f:9c:a0:
8e:37:41:4a:f5:c8:98:c7:31:5e:02:f5:82:5d:ce:
89:a5:61:42:3a:98:45:62:77:f1:a1:fa:ce:0a:bd:
d4:db:42:7c:89:33:2c:63:dd:2b:ea:2e:1c:3c:81:
cd:43:1c:47:1c:0a:92:52:67:cc:3a:9b:83:9f:89:
df:76:9f:ef:8b:c6:1e:e5:6f:b1:1e:10:a5:d0:75:
b3:a2:09:83:7d:60:42:e3:a8:89:95:d1:95:8e:d4:
8f:4f:60:bf:4b:0b:b4:b3:3d:73:53:48:3c:5c:8e:
35:94:01:a8:f6:c2:97:25:0a:3b:6d:e2:46:bf:c5:
ed:41:b0:68:d5:5a:68:65:49:e4:3d:3a:31:e9:20:
60:7e:16:20:c3:d1:25:d3:51:ed:a9:48:f7:ed:24:
54:78:7a:2b:b5:70:d8:23:36:23:89:5b:3b:db:71:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:B6:EB:51:DD:3D:AB:13:F6:FD:00:F7:53:88:7F:0D:12:95:49
X509v3 Authority Key Identifier:
keyid:EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e9:68:46:a3:10:5b:a5:20:15:7e:67:24:4e:17:95:c4:13:
00:af:91:4b:ac:dc:0a:7c:dd:bf:ef:8b:ad:9a:6e:17:88:e7:
ee:e5:aa:71:01:bd:2b:57:89:64:03:4d:64:5b:e2:e7:41:be:
b5:6f:45:ef:ef:b0:68:71:62:04:a3:11:36:30:6a:51:3b:4f:
5d:90:f1:cf:78:0d:8b:05:8c:e3:70:8b:63:9e:8a:a6:64:c6:
22:3b:70:b3:bd:56:c5:6b:4e:5f:b7:3e:ef:19:b1:ba:18:49:
72:9f:cf:e8:19:58:03:e8:10:bb:54:4d:0c:2c:c2:35:35:69:
7d:3d:14:2d:b2:75:5d:3c:46:a5:63:d8:a0:09:c6:1d:a3:54:
44:8d:ad:fd:d0:17:44:0e:36:e3:57:cc:8a:78:61:0f:74:2e:
36:d4:4e:85:dd:18:b2:27:36:47:d0:c1:f8:7b:85:d6:2a:d0:
77:7e:dd:7a:9e:ec:68:13:bd:da:6e:d3:3e:8f:08:61:00:60:
21:f4:ad:10:f4:07:04:ec:7e:4a:74:97:1e:19:55:7f:1f:9e:
90:aa:99:23:c4:3f:d8:1e:98:6b:de:b7:a0:1e:51:e3:91:1e:
11:6e:53:b0:9f:ec:39:b9:04:54:9b:50:35:af:1f:37:b5:64:
05:15:2e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xDod0d6nQ8KSuMYbXRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMDlmMGU4ODY2M2Y4M2E1YjZmODRmMWZlZTZiNDJjMzVj
MGY4ZjIwHhcNMjYwMzI5MDUwMDMxWhcNMjYwMzMwMDUwMDMxWjAzMTEwLwYDVQQD
EyhiMWM0YjZlYjUxZGQzZGFiMTNmNmZkMDBmNzUzODg3ZjBkMTI5NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84W49ZIao2Z+JBAYs5pMhZ3d95x8
W2t8QLRuVQGiFwZSTyUe1rQ0z7WgsyGO68bzNnafaWJBHWY/Oqp/oOFviUB7wsdv
R0uQl9/tRptKmo37vD1oiYc/nKCON0FK9ciYxzFeAvWCXc6JpWFCOphFYnfxofrO
Cr3U20J8iTMsY90r6i4cPIHNQxxHHAqSUmfMOpuDn4nfdp/vi8Ye5W+xHhCl0HWz
ogmDfWBC46iJldGVjtSPT2C/Swu0sz1zU0g8XI41lAGo9sKXJQo7beJGv8XtQbBo
1VpoZUnkPTox6SBgfhYgw9El01HtqUj37SRUeHortXDYIzYjiVs723EP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHEtutR3T2rE/b9APdTiH8NEpVJMB8GA1UdIwQY
MBaAFOwJ8OiGY/g6W2+E8f7mtCw1wPjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQt
MzZiNTY4MGFjMzY4LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQtMzZiNTY4MGFjMzY4
LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeloRqMQ
W6UgFX5nJE4XlcQTAK+RS6zcCnzdv++LrZpuF4jn7uWqcQG9K1eJZANNZFvi50G+
tW9F7++waHFiBKMRNjBqUTtPXZDxz3gNiwWM43CLY56KpmTGIjtws71WxWtOX7c+
7xmxuhhJcp/P6BlYA+gQu1RNDCzCNTVpfT0ULbJ1XTxGpWPYoAnGHaNURI2t/dAX
RA4241fMinhhD3QuNtROhd0Ysic2R9DB+HuF1irQd37dep7saBO92m7TPo8IYQBg
IfStEPQHBOx+SnSXHhlVfx+ekKqZI8Q/2B6Ya963oB5R45EeEW5TsJ/sObkEVJtQ
Na8fN7VkBRUuAw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:37 2026 by rpki-client