Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: QYdotco84tbI4jC3qjHpLGiqzEPWJGXWWxfpnWYIMTM=
Subject key identifier: A2:3C:26:37:18:BF:2D:76:8C:C5:05:6A:EA:9A:E2:49:32:16:C4:F5
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 019D37F6E52247582509E851B330C29CCD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0F50
Signing time: Sun 29 Mar 2026 05:00:20 +0000
Manifest this update: Sun 29 Mar 2026 05:00:20 +0000
Manifest next update: Mon 30 Mar 2026 05:00:20 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: RASVKhyOSbpjpuq3SuWclTjYh8q8CkBASuPrSAZsAxM=)
2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e5:22:47:58:25:09:e8:51:b3:30:c2:9c:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Mar 29 05:00:20 2026 GMT
Not After : Mar 30 05:00:20 2026 GMT
Subject: CN=a23c263718bf2d768cc5056aea9ae2493216c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e1:b1:d2:62:3b:3d:f2:3f:de:43:ea:66:b7:
26:b7:87:55:1c:c8:11:c5:c6:74:38:86:7a:46:22:
84:88:43:04:60:63:e6:1b:ae:f0:af:de:30:a2:7c:
18:e2:8b:e3:b0:ff:29:96:2d:b0:a8:e2:0f:a1:58:
39:fb:70:20:e4:b5:ee:09:9b:0a:e2:07:ef:8a:08:
00:e5:3c:3b:ea:0e:a9:f9:47:e4:66:46:40:5a:30:
1e:8d:be:22:78:22:cf:ce:f2:a7:d7:ac:d5:a8:b6:
48:fe:39:bf:d3:8d:ca:74:c0:db:54:a2:c8:73:ac:
65:26:3c:93:7c:ee:49:89:1a:dc:8f:ea:51:34:a7:
12:28:bc:63:a0:5e:47:20:ac:a4:cd:65:37:d5:7d:
3a:25:53:cf:59:c7:36:8e:13:fe:8c:a3:53:03:78:
31:46:72:29:1e:9a:ad:f8:67:f3:e8:2c:55:f4:92:
2d:1d:90:11:98:4b:72:17:e6:1a:98:b4:a7:16:22:
1b:3d:31:2c:82:63:40:08:9f:67:eb:41:75:98:18:
50:4c:f1:0b:f6:df:e0:f2:3a:14:8a:0e:3d:c2:e0:
1e:56:82:08:57:1c:2a:5d:45:72:21:23:ce:d2:11:
bc:2a:0c:da:96:1d:19:06:87:1e:a8:c4:93:24:1d:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:26:37:18:BF:2D:76:8C:C5:05:6A:EA:9A:E2:49:32:16:C4:F5
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0e:8b:e3:67:26:bf:0c:d6:3e:b0:3d:71:7a:9e:b2:48:03:
b8:b8:1c:ca:49:cd:20:5a:11:ce:30:d1:8c:b3:7b:cf:21:f0:
02:1b:92:c5:6d:40:79:31:86:ac:32:44:c7:30:bd:03:91:10:
9b:17:18:95:39:c0:2c:25:50:21:a1:52:d3:7d:a9:2c:2e:98:
30:38:11:69:f2:19:7b:87:92:83:6d:ff:61:f9:1b:6a:60:ac:
a1:d2:d6:1f:16:58:2b:92:68:be:e2:5c:5b:09:0b:e0:c9:59:
1b:1f:ae:31:40:ba:22:c6:e1:af:c1:f4:de:18:9d:5c:d1:d1:
e0:a5:ec:1e:52:2e:83:3d:be:73:9f:6c:d9:a8:ec:e7:fa:9d:
78:94:2c:ea:df:12:8c:3f:ee:07:9a:b0:e7:11:58:64:7c:81:
f9:70:c6:bd:78:91:cb:73:47:23:bf:14:ba:75:44:5e:ce:80:
59:f3:69:69:bf:3d:d2:c7:eb:0e:f3:ba:3b:91:ab:76:67:d0:
e8:45:d6:b4:b5:28:fa:dc:da:d1:3b:41:2b:fd:e5:cd:cb:38:
2c:57:84:dc:bb:de:95:59:57:b6:5a:2f:cd:98:55:e1:3c:54:
18:6f:67:a0:b2:4d:6d:e1:8c:a3:ef:99:0d:7c:cc:a5:3e:4a:
b1:68:db:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039uUiR1glCehRszDCnM2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5
YTYyNWQwHhcNMjYwMzI5MDUwMDIwWhcNMjYwMzMwMDUwMDIwWjAzMTEwLwYDVQQD
EyhhMjNjMjYzNzE4YmYyZDc2OGNjNTA1NmFlYTlhZTI0OTMyMTZjNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+Gx0mI7PfI/3kPqZrcmt4dVHMgR
xcZ0OIZ6RiKEiEMEYGPmG67wr94wonwY4ovjsP8pli2wqOIPoVg5+3Ag5LXuCZsK
4gfviggA5Tw76g6p+UfkZkZAWjAejb4ieCLPzvKn16zVqLZI/jm/043KdMDbVKLI
c6xlJjyTfO5JiRrcj+pRNKcSKLxjoF5HIKykzWU31X06JVPPWcc2jhP+jKNTA3gx
RnIpHpqt+Gfz6CxV9JItHZARmEtyF+YamLSnFiIbPTEsgmNACJ9n60F1mBhQTPEL
9t/g8joUig49wuAeVoIIVxwqXUVyISPO0hG8Kgzalh0ZBoceqMSTJB0AhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI8JjcYvy12jMUFauqa4kkyFsT1MB8GA1UdIwQY
MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt
OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5
LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJw6L42cm
vwzWPrA9cXqeskgDuLgcyknNIFoRzjDRjLN7zyHwAhuSxW1AeTGGrDJExzC9A5EQ
mxcYlTnALCVQIaFS032pLC6YMDgRafIZe4eSg23/YfkbamCsodLWHxZYK5JovuJc
WwkL4MlZGx+uMUC6Isbhr8H03hidXNHR4KXsHlIugz2+c59s2ajs5/qdeJQs6t8S
jD/uB5qw5xFYZHyB+XDGvXiRy3NHI78UunVEXs6AWfNpab890sfrDvO6O5GrdmfQ
6EXWtLUo+tza0TtBK/3lzcs4LFeE3LvelVlXtlovzZhV4TxUGG9noLJNbeGMo++Z
DXzMpT5KsWjb2g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:14 2026 by rpki-client