Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
File: PO7GxHlRspnHCAZYPXkdUM2BbF8.mft (raw, json)
Hash identifier: 96Q2IjEkZuI50VucQ3ZX77MTu6rpYweGRT+PIoEiZ0Y=
Subject key identifier: E7:C4:09:F1:49:E9:FC:B7:3D:7C:4C:83:A7:4B:21:08:EF:F4:5F:88
Authority key identifier: 3C:EE:C6:C4:79:51:B2:99:C7:08:06:58:3D:79:1D:50:CD:81:6C:5F
Certificate issuer: /CN=3ceec6c47951b299c70806583d791d50cd816c5f
Certificate serial: 019FA03A797A7E6E49BE5B89E4E707C15F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
Manifest number: 061D
Signing time: Sun 26 Jul 2026 21:00:14 +0000
Manifest this update: Sun 26 Jul 2026 21:00:14 +0000
Manifest next update: Mon 27 Jul 2026 21:00:14 +0000
Files and hashes: 1: PO7GxHlRspnHCAZYPXkdUM2BbF8.crl (hash: 4sfYiAhkqIJNzFwLaa5J7/fGL+YLiOFCEQnM2IBdhig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:79:7a:7e:6e:49:be:5b:89:e4:e7:07:c1:5f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceec6c47951b299c70806583d791d50cd816c5f
Validity
Not Before: Jul 26 21:00:14 2026 GMT
Not After : Jul 27 21:00:14 2026 GMT
Subject: CN=e7c409f149e9fcb73d7c4c83a74b2108eff45f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:c6:23:68:ba:ea:0c:26:ca:4e:1a:55:52:
6b:25:c1:aa:92:87:1d:26:7a:b2:81:2d:fa:3c:ea:
ff:e6:2a:f1:e2:c3:54:d7:00:64:81:32:53:aa:50:
1a:b3:9e:3e:5f:4f:7d:e2:38:5e:a7:b8:dd:ca:52:
1a:12:ba:fb:cb:a0:64:89:90:e0:b3:a3:d2:bc:3e:
ad:00:4d:ac:94:fc:48:9d:00:9e:1c:14:8d:72:ef:
9c:40:66:05:7a:dd:e8:6a:4d:3b:50:b2:88:c5:3c:
3a:54:e0:9d:bb:96:66:20:c2:45:7a:0d:09:25:41:
17:3b:26:87:49:7b:29:2d:78:16:45:4f:28:ab:40:
15:1b:c4:d5:ac:ef:f2:8a:34:32:85:d9:ff:b6:5d:
1c:59:fa:2f:a3:e1:a1:0d:ac:bf:ce:ad:b9:0f:17:
d2:5d:bb:2a:bd:95:7a:0f:65:b9:d5:f6:55:3e:c0:
d3:fc:f3:ae:2d:c6:1a:09:14:61:ef:a7:0a:f3:c4:
64:55:d5:e7:cd:0d:98:09:ba:24:cb:8d:d0:8f:c6:
08:11:bb:f6:18:4d:d9:c5:f0:bb:47:b6:26:c3:f7:
9a:81:38:a6:12:80:49:5c:ba:b9:99:c4:37:b5:e1:
01:8a:79:24:62:48:12:75:9f:01:a6:c0:c8:26:bb:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:09:F1:49:E9:FC:B7:3D:7C:4C:83:A7:4B:21:08:EF:F4:5F:88
X509v3 Authority Key Identifier:
keyid:3C:EE:C6:C4:79:51:B2:99:C7:08:06:58:3D:79:1D:50:CD:81:6C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:28:0e:b1:7b:37:c1:01:7b:e3:ac:22:48:73:90:50:4f:1c:
04:dd:51:15:16:d9:f5:53:54:d2:41:d9:39:c7:35:ff:f5:15:
53:20:4d:c3:70:86:0c:61:4f:16:0f:c2:e4:9e:09:86:88:5a:
b3:4b:6f:31:32:ac:8b:20:b4:21:94:db:fd:c2:9a:bf:93:52:
70:bf:f6:d4:d2:0b:50:a3:36:81:e6:39:0b:5c:e6:83:c0:f7:
f3:76:27:09:e5:ba:03:03:ca:1b:93:55:cd:35:72:2e:6f:d5:
36:a2:af:e2:93:90:81:bd:cc:59:73:d0:48:06:a8:f7:19:32:
96:5f:b4:59:cc:de:c2:e5:86:d0:8e:80:77:2c:eb:47:12:b7:
ee:77:cf:b2:02:76:25:a6:48:7f:eb:c1:e1:8f:48:fd:25:25:
7d:6f:fb:44:25:de:73:e6:19:5d:03:d2:2a:f7:6a:e7:87:ef:
57:25:2a:0f:7e:35:fb:62:9f:22:7c:67:91:b0:7f:76:46:e8:
1a:73:c7:9e:73:bd:5b:f2:b0:f5:57:b4:39:20:f9:89:9d:99:
04:71:34:a9:4d:7c:dd:ad:7b:e0:ec:10:ee:cc:3a:4f:e5:f4:
04:9c:c0:68:63:d2:9e:36:7f:c1:7a:08:b8:4a:89:b4:e1:e2:
69:a3:5a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOnl6fm5JvluJ5OcHwV8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWVjNmM0Nzk1MWIyOTljNzA4MDY1ODNkNzkxZDUwY2Q4
MTZjNWYwHhcNMjYwNzI2MjEwMDE0WhcNMjYwNzI3MjEwMDE0WjAzMTEwLwYDVQQD
EyhlN2M0MDlmMTQ5ZTlmY2I3M2Q3YzRjODNhNzRiMjEwOGVmZjQ1Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifGI2i66gwmyk4aVVJrJcGqkocd
JnqygS36POr/5irx4sNU1wBkgTJTqlAas54+X0994jhep7jdylIaErr7y6BkiZDg
s6PSvD6tAE2slPxInQCeHBSNcu+cQGYFet3oak07ULKIxTw6VOCdu5ZmIMJFeg0J
JUEXOyaHSXspLXgWRU8oq0AVG8TVrO/yijQyhdn/tl0cWfovo+GhDay/zq25DxfS
XbsqvZV6D2W51fZVPsDT/POuLcYaCRRh76cK88RkVdXnzQ2YCboky43Qj8YIEbv2
GE3ZxfC7R7Ymw/eagTimEoBJXLq5mcQ3teEBinkkYkgSdZ8BpsDIJrth8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfECfFJ6fy3PXxMg6dLIQjv9F+IMB8GA1UdIwQY
MBaAFDzuxsR5UbKZxwgGWD15HVDNgWxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE83R3hIbFJzcG5IQ0FaWVBYa2RVTTJCYkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iMzMwYzctZmRhYy00MDBhLTk2N2It
YTcyZWFkMjk1MzI1LzEvUE83R3hIbFJzcG5IQ0FaWVBYa2RVTTJCYkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iMzMwYzctZmRhYy00MDBhLTk2N2ItYTcyZWFkMjk1MzI1
LzEvUE83R3hIbFJzcG5IQ0FaWVBYa2RVTTJCYkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANygOsXs3
wQF746wiSHOQUE8cBN1RFRbZ9VNU0kHZOcc1//UVUyBNw3CGDGFPFg/C5J4Jhoha
s0tvMTKsiyC0IZTb/cKav5NScL/21NILUKM2geY5C1zmg8D383YnCeW6AwPKG5NV
zTVyLm/VNqKv4pOQgb3MWXPQSAao9xkyll+0WczewuWG0I6AdyzrRxK37nfPsgJ2
JaZIf+vB4Y9I/SUlfW/7RCXec+YZXQPSKvdq54fvVyUqD341+2KfInxnkbB/dkbo
GnPHnnO9W/Kw9Ve0OSD5iZ2ZBHE0qU183a174OwQ7sw6T+X0BJzAaGPSnjZ/wXoI
uEqJtOHiaaNaDQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:27:44 2026 by rpki-client