Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: Qshm+WtanZ6jf1k7kCWfntk+9HP0kQQSiUQobuLzyA4=
Subject key identifier: A5:E3:B9:49:94:B1:B6:63:D6:2B:A5:96:62:03:F4:35:D8:A7:29:3A
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 019D382E4BE83C1A50E476B02DE534DB6549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1495
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: _wLbQqpNFVUZXfwkKPHS2EvNsME.roa (hash: b13XNsSSVdJxlN2jmJcwJ/ExmpGXyR6dAM9BzylibwA=)
2: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: jEY7eZp06cANV7VXCoNKI6yTuBmfgdLs84+Ryj74I5c=)
3: k3fmZjh5Nd4d9i-yTk1YzO9a-ow.roa (hash: mS6dHnW2WbLdF67XEsAw2GyVUdDMoZ8sBWqhN+eeuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4b:e8:3c:1a:50:e4:76:b0:2d:e5:34:db:65:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=a5e3b94994b1b663d62ba5966203f435d8a7293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:e0:a4:12:0a:68:91:5a:9a:a1:f8:dd:4d:
0f:e8:73:38:b3:dc:c6:68:05:32:cb:c2:3d:78:42:
d1:e9:56:7e:1a:4b:e0:15:44:df:e9:da:a3:7e:68:
45:08:49:33:74:e8:f6:d9:8e:62:1d:27:79:69:26:
df:ef:2f:e1:ae:4f:3f:5b:35:73:d8:5b:50:71:14:
74:f3:2d:20:49:d1:c8:d3:d3:0f:da:aa:03:d5:e1:
b0:ba:fe:af:12:0b:d0:e2:11:f0:cb:4b:d8:26:07:
72:89:5e:12:ac:36:8a:76:c0:f8:01:c0:75:62:14:
f4:9a:91:dd:8e:b8:89:0c:ec:3c:10:f4:9a:b4:cc:
12:c2:d5:ea:bc:f7:19:43:89:a1:c7:68:57:b0:c8:
4c:c0:6b:b6:c7:0b:d9:09:88:bb:16:3b:77:77:6c:
7b:1e:57:d3:25:88:4d:ca:75:a8:26:d8:9a:66:51:
ad:7d:ff:74:40:c2:fa:7d:78:b4:f5:1b:f7:8e:6c:
48:67:60:c3:75:29:07:ab:93:83:1e:fd:e1:c5:f4:
5c:cf:83:b1:37:ab:4c:4c:ca:27:fc:e6:9d:76:04:
40:2f:0e:5e:af:9f:d0:ad:bc:19:c3:26:1a:4b:c8:
70:6d:85:0b:31:58:24:d8:19:ec:f6:26:82:6d:44:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:B9:49:94:B1:B6:63:D6:2B:A5:96:62:03:F4:35:D8:A7:29:3A
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:38:c8:e0:2e:fb:62:4f:89:00:0c:d2:d5:3a:9e:82:15:5e:
e9:8e:5c:ae:a6:45:90:0a:cd:f2:10:13:5a:74:c7:6c:19:02:
2b:d8:f2:98:14:8c:26:b9:91:c5:0e:77:08:05:af:f7:25:5d:
64:45:4f:74:c7:e2:0c:3d:4a:03:0e:c2:d6:76:a8:da:32:43:
85:9c:1e:77:65:ad:ca:15:26:41:4d:8e:fa:42:3a:ba:94:b8:
55:46:7e:b2:27:aa:4b:73:68:f5:b8:6a:75:25:7a:a0:14:91:
a7:b0:c9:fc:3c:17:6f:e7:99:7e:aa:fd:48:11:74:d7:e6:18:
03:86:39:ee:5c:0d:70:5c:23:ba:03:b1:d1:b3:03:db:bc:a9:
df:e5:6d:96:47:c5:00:7c:07:f5:75:2e:d8:bd:ce:23:d7:63:
5d:e6:09:39:18:7f:7e:12:99:4a:77:53:0f:cb:f6:51:1c:d2:
2a:8f:fa:53:0b:ec:02:f0:0c:4b:84:35:cb:b6:00:c3:43:ea:
9c:c9:dc:62:1f:48:98:65:12:5f:8d:29:6e:6e:51:61:8d:08:
3d:b9:6c:35:7f:aa:11:13:c2:f2:74:b4:77:f6:14:ea:fa:35:
6f:1c:9d:47:8b:39:e6:74:be:b5:8a:90:9b:10:bf:c1:a6:f9:
0c:a0:b1:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkvoPBpQ5HawLeU022VJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZThiYmY4NjQzYWJkNjJmZjNmNDJiZWM0YzBiMmRiOTc3
NTk2ZDcwHhcNMjYwMzI5MDYwMDUxWhcNMjYwMzMwMDYwMDUxWjAzMTEwLwYDVQQD
EyhhNWUzYjk0OTk0YjFiNjYzZDYyYmE1OTY2MjAzZjQzNWQ4YTcyOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGbgpBIKaJFamqH43U0P6HM4s9zG
aAUyy8I9eELR6VZ+GkvgFUTf6dqjfmhFCEkzdOj22Y5iHSd5aSbf7y/hrk8/WzVz
2FtQcRR08y0gSdHI09MP2qoD1eGwuv6vEgvQ4hHwy0vYJgdyiV4SrDaKdsD4AcB1
YhT0mpHdjriJDOw8EPSatMwSwtXqvPcZQ4mhx2hXsMhMwGu2xwvZCYi7Fjt3d2x7
HlfTJYhNynWoJtiaZlGtff90QML6fXi09Rv3jmxIZ2DDdSkHq5ODHv3hxfRcz4Ox
N6tMTMon/OaddgRALw5er5/QrbwZwyYaS8hwbYULMVgk2Bns9iaCbUTJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXjuUmUsbZj1iullmID9DXYpyk6MB8GA1UdIwQY
MBaAFHfou/hkOr1i/z9CvsTAstuXdZbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjkt
NDRjY2QxYjUxZjEwLzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iODcwZTctN2YxZS00OWNlLWIxZjktNDRjY2QxYjUxZjEw
LzEvZC1pNy1HUTZ2V0xfUDBLLXhNQ3kyNWQxbHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjjI4C77
Yk+JAAzS1TqeghVe6Y5crqZFkArN8hATWnTHbBkCK9jymBSMJrmRxQ53CAWv9yVd
ZEVPdMfiDD1KAw7C1nao2jJDhZwed2WtyhUmQU2O+kI6upS4VUZ+sieqS3No9bhq
dSV6oBSRp7DJ/DwXb+eZfqr9SBF01+YYA4Y57lwNcFwjugOx0bMD27yp3+VtlkfF
AHwH9XUu2L3OI9djXeYJORh/fhKZSndTD8v2URzSKo/6UwvsAvAMS4Q1y7YAw0Pq
nMncYh9ImGUSX40pbm5RYY0IPblsNX+qERPC8nS0d/YU6vo1bxydR4s55nS+tYqQ
mxC/wab5DKCx8g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:38 2026 by rpki-client