Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: WUwFxZkMBCMo2+zsU3aXiOc9+UvagT26z7Huf40+lr8=
Subject key identifier: B2:31:9A:CA:D3:70:F0:97:F3:14:5E:1A:27:1C:CF:E7:01:20:83:C5
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 019CE55A5FA9C9BEB195C78713162C6202C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0F45
Signing time: Fri 13 Mar 2026 04:00:31 +0000
Manifest this update: Fri 13 Mar 2026 04:00:31 +0000
Manifest next update: Sat 14 Mar 2026 04:00:31 +0000
Files and hashes: 1: 1-kxWXv05LSEshrBJnjD59T0FQ7Q.roa (hash: rHapWpK9pigcf/GGIQp1nmEJbzSoQssokoPt9LrVksY=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: HwMK1d462cphTm4VS6qSBCX9cEDci+gGFXJYV7VqSKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:5f:a9:c9:be:b1:95:c7:87:13:16:2c:62:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Mar 13 04:00:31 2026 GMT
Not After : Mar 14 04:00:31 2026 GMT
Subject: CN=b2319acad370f097f3145e1a271ccfe7012083c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:14:0d:38:c0:84:d8:c5:fb:27:51:6a:60:
ac:a9:22:b6:11:85:97:a1:fd:58:dc:74:f6:9e:6b:
66:97:ec:02:a6:70:35:cc:78:58:a5:a2:1d:99:43:
0b:87:f4:86:13:e6:92:40:d3:16:54:45:17:f6:84:
8c:11:a4:f4:dc:3f:0f:be:1e:c9:ac:50:3e:16:1b:
df:2a:a1:74:c9:a4:a6:88:0b:c6:2d:bc:6a:22:e4:
7b:23:38:da:32:c6:27:64:4a:51:ac:79:fe:72:77:
ae:52:fb:c2:0e:e1:5e:04:55:c0:1f:bb:b1:4c:92:
8f:14:00:71:96:c1:8e:0c:e8:89:31:21:5b:b9:6b:
d7:64:81:f1:0c:f3:64:8a:47:e7:a3:ca:e5:52:5f:
c2:e2:1f:10:ec:b3:7b:6d:0d:a4:40:42:38:60:68:
5c:0f:ba:74:ba:b3:4b:62:7b:99:e3:6d:e5:81:a5:
c1:69:0b:17:34:9a:52:bb:13:b2:75:0b:48:d2:64:
dd:5d:91:3e:ad:c6:eb:6f:df:b3:e7:7a:9b:f7:52:
65:cd:9b:8b:f3:9d:18:61:19:cd:ef:fd:01:86:0f:
e9:e3:3b:34:ee:6e:3c:d2:a0:8e:33:2a:fa:42:ee:
d6:c8:a5:f7:30:c4:47:65:9b:52:a6:31:76:c8:93:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:9A:CA:D3:70:F0:97:F3:14:5E:1A:27:1C:CF:E7:01:20:83:C5
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:08:40:e9:39:cc:e2:9b:fb:74:0e:d0:06:67:6e:fc:f5:
b8:3f:f7:1a:f8:00:79:4e:ff:39:71:88:96:cc:87:fe:ca:da:
bb:5c:a9:c2:de:4e:53:ca:14:88:0f:d3:b1:c3:4f:3c:01:ce:
e2:52:58:bb:8c:53:94:b5:a2:3e:c8:7e:3f:4f:15:1e:06:6a:
78:d1:32:2f:5d:17:1c:00:32:45:69:50:e5:17:86:c2:69:b2:
b0:78:59:8e:06:df:51:99:b3:d3:ca:9d:f9:ee:db:93:fe:e5:
95:c1:6c:91:6a:50:ac:89:86:a1:db:b8:c1:bd:88:28:ca:c9:
fa:8f:9e:e7:67:58:b7:ea:ae:d3:df:37:19:a9:ca:ef:0a:bd:
54:3c:9f:61:7b:15:85:f8:d9:f4:eb:60:1b:7a:70:86:ad:d9:
e6:74:4b:ed:51:4e:d9:ed:5e:b1:88:a0:f6:2c:b2:64:c9:75:
ce:83:ec:8c:80:6d:6a:b4:bf:b9:91:f6:11:7f:59:34:40:54:
bd:df:a7:4b:7c:20:f0:52:fe:40:8f:f3:6e:6b:1a:31:1b:b6:
96:99:0f:d2:ed:d3:50:53:de:76:0e:0a:97:49:9c:88:9e:74:
68:43:66:36:2e:6a:a1:d5:67:23:2a:ca:ea:6e:f1:af:64:bc:
03:41:02:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlWl+pyb6xlceHExYsYgLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhN2VjZTk0ZGU1ZGY2YTFhMzRjOThlYzY2ZDNkOTY4ZTVi
MjliMjEwHhcNMjYwMzEzMDQwMDMxWhcNMjYwMzE0MDQwMDMxWjAzMTEwLwYDVQQD
EyhiMjMxOWFjYWQzNzBmMDk3ZjMxNDVlMWEyNzFjY2ZlNzAxMjA4M2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFIUDTjAhNjF+ydRamCsqSK2EYWX
of1Y3HT2nmtml+wCpnA1zHhYpaIdmUMLh/SGE+aSQNMWVEUX9oSMEaT03D8Pvh7J
rFA+FhvfKqF0yaSmiAvGLbxqIuR7IzjaMsYnZEpRrHn+cneuUvvCDuFeBFXAH7ux
TJKPFABxlsGODOiJMSFbuWvXZIHxDPNkikfno8rlUl/C4h8Q7LN7bQ2kQEI4YGhc
D7p0urNLYnuZ423lgaXBaQsXNJpSuxOydQtI0mTdXZE+rcbrb9+z53qb91JlzZuL
850YYRnN7/0Bhg/p4zs07m480qCOMyr6Qu7WyKX3MMRHZZtSpjF2yJNk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIxmsrTcPCX8xReGiccz+cBIIPFMB8GA1UdIwQY
MBaAFHp+zpTeXfaho0yY7GbT2WjlspshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEt
ZmFlNWZlOTAwY2JkLzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2Jk
LzEvZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmEIQOk5
zOKb+3QO0AZnbvz1uD/3GvgAeU7/OXGIlsyH/srau1ypwt5OU8oUiA/TscNPPAHO
4lJYu4xTlLWiPsh+P08VHgZqeNEyL10XHAAyRWlQ5ReGwmmysHhZjgbfUZmz08qd
+e7bk/7llcFskWpQrImGodu4wb2IKMrJ+o+e52dYt+qu0983GanK7wq9VDyfYXsV
hfjZ9OtgG3pwhq3Z5nRL7VFO2e1esYig9iyyZMl1zoPsjIBtarS/uZH2EX9ZNEBU
vd+nS3wg8FL+QI/zbmsaMRu2lpkP0u3TUFPedg4Kl0mciJ50aENmNi5qodVnIyrK
6m7xr2S8A0ECOg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:20 2026 by rpki-client