Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
File: 7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft (raw, json)
Hash identifier: TDHShp6mnnm1gsiRBCyR53vrRBFBfiFzp8mlUjWjldc=
Subject key identifier: C6:A8:6B:B7:B4:8F:6D:FD:70:4B:0C:86:3C:B0:0D:1F:88:E8:A0:EA
Authority key identifier: EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88
Certificate issuer: /CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
Certificate serial: 019D36E46E073FB70083FA01179A92B80B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
Manifest number: 67
Signing time: Sun 29 Mar 2026 00:00:33 +0000
Manifest this update: Sun 29 Mar 2026 00:00:33 +0000
Manifest next update: Mon 30 Mar 2026 00:00:33 +0000
Files and hashes: 1: 7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl (hash: WKUwCCu42efE1Fc2F1p9136tZo0urri6kI/MqgOzmwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:6e:07:3f:b7:00:83:fa:01:17:9a:92:b8:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
Validity
Not Before: Mar 29 00:00:33 2026 GMT
Not After : Mar 30 00:00:33 2026 GMT
Subject: CN=c6a86bb7b48f6dfd704b0c863cb00d1f88e8a0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:77:91:50:70:dc:ee:39:66:e0:bf:7d:2e:
b2:df:1f:c9:3a:fb:ed:a9:c7:cf:26:c3:fe:22:6a:
51:b3:36:b3:06:23:19:21:83:b5:97:6c:13:1f:6f:
8a:8c:48:47:9e:1f:3d:f5:9d:95:e5:3e:e3:9d:c4:
99:85:63:61:7f:99:a4:46:ab:1e:51:da:8c:93:b9:
27:24:78:b7:6a:40:49:da:05:15:4d:80:84:ed:d3:
b2:26:e4:e9:54:c8:89:3e:ec:27:05:85:e7:dd:92:
28:33:c7:2e:f5:76:55:91:b1:f4:f7:fb:fd:09:42:
5e:0a:0e:4b:f5:b4:4b:43:db:92:49:9e:c0:74:88:
fe:95:6a:29:8f:3b:50:46:ce:e5:f6:a2:68:d1:0c:
4b:8b:e3:43:73:bb:42:61:0d:b1:d9:2d:e3:da:86:
7d:e4:a1:17:1c:39:2b:23:4f:a6:df:e5:11:34:23:
c8:bf:f3:db:3c:67:43:92:5b:c8:b3:53:2a:63:f1:
4a:f6:7e:f4:99:4e:4b:a5:27:00:af:72:f3:b4:57:
be:06:eb:e9:87:10:4d:49:7f:7c:64:ed:31:a8:0b:
a9:25:3c:32:f6:39:b7:5c:36:dd:70:17:e6:87:7c:
0b:07:38:8c:c7:ec:51:3e:f2:8d:0b:3b:34:04:d7:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A8:6B:B7:B4:8F:6D:FD:70:4B:0C:86:3C:B0:0D:1F:88:E8:A0:EA
X509v3 Authority Key Identifier:
keyid:EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b5:ef:a8:84:df:c1:b7:99:95:15:6c:51:6b:a6:05:fe:1f:
95:b3:2d:d3:ac:a4:ef:69:5b:f4:92:ab:50:f9:c6:92:c1:20:
eb:dd:4d:b8:17:40:75:07:a5:6c:96:07:b0:14:45:17:24:16:
6c:b3:ea:3c:2a:07:db:e6:33:7c:2e:09:6b:70:c8:7d:ea:b6:
56:ff:3f:3b:69:fd:d2:a5:65:4a:bc:dc:db:de:c5:39:03:c4:
4d:5a:f2:c1:9e:1e:98:f7:b6:0a:6f:3e:50:7d:bf:95:35:6a:
4c:51:34:37:e5:5c:e2:10:97:35:99:9d:81:a1:6c:46:da:d2:
83:eb:14:77:d3:b1:04:78:36:fb:e8:ae:0a:91:6b:d7:b1:b1:
fe:84:e7:5d:03:f7:5b:6d:05:6a:d7:37:47:17:a0:b0:9b:30:
c8:ed:6e:16:de:f3:81:40:7b:49:7f:3f:26:0d:16:a2:3f:7c:
3e:bc:78:1e:4d:9d:45:f3:b2:d0:b2:d4:f6:2c:75:e0:90:cb:
f7:8b:d0:7f:d1:87:f2:9c:5e:d6:2a:fc:0d:03:a5:06:3c:bd:
37:19:52:91:26:e4:f6:e1:2d:b2:53:49:b2:9a:86:6e:84:f4:
b7:c5:dc:b1:6d:df:12:b4:84:26:d8:0e:2c:ee:a7:1a:00:f9:
a6:b8:f8:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025G4HP7cAg/oBF5qSuAuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYTcwOWZlYWEwYTlmYTA4ODZkN2FiMTIwNjhhYTdmZGE5
NzlmODgwHhcNMjYwMzI5MDAwMDMzWhcNMjYwMzMwMDAwMDMzWjAzMTEwLwYDVQQD
EyhjNmE4NmJiN2I0OGY2ZGZkNzA0YjBjODYzY2IwMGQxZjg4ZThhMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyd3kVBw3O45ZuC/fS6y3x/JOvvt
qcfPJsP+ImpRszazBiMZIYO1l2wTH2+KjEhHnh899Z2V5T7jncSZhWNhf5mkRqse
UdqMk7knJHi3akBJ2gUVTYCE7dOyJuTpVMiJPuwnBYXn3ZIoM8cu9XZVkbH09/v9
CUJeCg5L9bRLQ9uSSZ7AdIj+lWopjztQRs7l9qJo0QxLi+NDc7tCYQ2x2S3j2oZ9
5KEXHDkrI0+m3+URNCPIv/PbPGdDklvIs1MqY/FK9n70mU5LpScAr3LztFe+Buvp
hxBNSX98ZO0xqAupJTwy9jm3XDbdcBfmh3wLBziMx+xRPvKNCzs0BNfO0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaoa7e0j239cEsMhjywDR+I6KDqMB8GA1UdIwQY
MBaAFO6nCf6qCp+giG16sSBoqn/al5+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FjSl9xb0tuNkNJYlhxeElHaXFmOXFYbjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kY2UwMGQtNzJjNi00ODE0LWI1ODct
Y2UyNzY4NGEwZTVhLzEvN3FjSl9xb0tuNkNJYlhxeElHaXFmOXFYbjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kY2UwMGQtNzJjNi00ODE0LWI1ODctY2UyNzY4NGEwZTVh
LzEvN3FjSl9xb0tuNkNJYlhxeElHaXFmOXFYbjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrXvqITf
wbeZlRVsUWumBf4flbMt06yk72lb9JKrUPnGksEg691NuBdAdQelbJYHsBRFFyQW
bLPqPCoH2+YzfC4Ja3DIfeq2Vv8/O2n90qVlSrzc297FOQPETVrywZ4emPe2Cm8+
UH2/lTVqTFE0N+Vc4hCXNZmdgaFsRtrSg+sUd9OxBHg2++iuCpFr17Gx/oTnXQP3
W20Fatc3RxegsJswyO1uFt7zgUB7SX8/Jg0Woj98Prx4Hk2dRfOy0LLU9ix14JDL
94vQf9GH8pxe1ir8DQOlBjy9NxlSkSbk9uEtslNJspqGboT0t8XcsW3fErSEJtgO
LO6nGgD5prj4mQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:08 2026 by rpki-client