Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier: bYLYJj4sX3vpQ6kHEQrOkg4kUj0OgUDKgEW/dJeD5rU=
Subject key identifier: 03:C4:B2:C0:C8:B4:FE:E1:7F:23:1E:ED:66:B5:48:6A:7D:F5:8F:0A
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer: /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial: 01A000CAA13F83A9AA473B5907D14BB9BDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 15:01:14 +0000
Manifest this update: Fri 14 Aug 2026 15:01:14 +0000
Manifest next update: Sat 15 Aug 2026 15:01:14 +0000
Files and hashes: 1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: JEfWE26VAfODloPT4fAIXQx4kz6632CUicmjsY5lCCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:a1:3f:83:a9:aa:47:3b:59:07:d1:4b:b9:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Validity
Not Before: Aug 14 15:01:14 2026 GMT
Not After : Aug 15 15:01:14 2026 GMT
Subject: CN=03c4b2c0c8b4fee17f231eed66b5486a7df58f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:55:c9:15:f6:6b:64:d6:37:78:48:9f:a9:
dc:da:3b:af:0d:1e:b4:3e:33:33:97:29:ed:ad:e0:
cc:0e:03:08:bd:35:9c:d4:14:09:81:26:78:05:92:
e6:fe:da:c8:7d:a3:89:f3:e2:57:11:21:a9:03:da:
04:ca:d7:54:06:9a:4c:84:25:c4:6c:fd:f0:39:91:
64:03:cc:de:35:b8:fa:4f:ec:74:54:36:f7:10:cd:
24:18:1d:67:38:b4:75:5b:e9:98:94:04:c0:e6:f9:
c8:9f:9a:f4:73:ec:4d:95:ff:32:f9:22:97:a0:96:
b9:4d:a8:24:b9:1b:55:16:73:65:78:a4:a8:3e:f8:
5b:74:0c:5b:d6:4f:25:9a:16:76:88:d9:04:e2:11:
ce:b4:cb:b7:06:8c:64:40:fa:5e:9f:f1:f8:24:12:
35:0f:11:f6:4d:ba:c2:03:8d:c5:f6:68:fa:cb:8a:
e7:56:40:61:6f:21:52:c7:f2:8a:7c:34:25:d0:8f:
d9:e2:88:8f:77:9d:eb:84:e5:5b:1f:dc:2a:5f:b3:
95:45:11:df:2a:b8:32:67:d5:7f:75:f0:5a:6f:61:
95:de:a3:3f:3a:5c:e3:54:b5:d0:ca:78:30:c4:99:
9d:7b:13:70:93:03:ea:69:e7:05:62:84:75:48:7c:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:B2:C0:C8:B4:FE:E1:7F:23:1E:ED:66:B5:48:6A:7D:F5:8F:0A
X509v3 Authority Key Identifier:
keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:64:b6:fe:05:20:4a:bd:bf:d5:ec:e2:8c:51:97:eb:34:1c:
d6:eb:06:21:66:fe:04:3e:9e:f6:b2:a8:2c:75:3a:af:e6:a1:
88:23:28:91:40:a5:45:b7:b8:db:c0:88:dc:65:d6:c6:01:5e:
de:4b:ac:25:f7:a0:64:e7:53:96:ac:5f:e9:1c:59:a1:68:31:
13:a6:16:70:d2:a3:1f:9b:1f:c0:ad:6a:c3:16:94:40:de:f2:
35:46:6a:d0:75:09:48:c5:48:b2:fb:e4:f3:bb:d7:bf:3b:80:
72:39:c9:bd:db:70:34:a9:91:76:6a:6c:30:7a:79:2b:a8:c1:
95:8d:f8:e3:9e:1f:7d:d4:d9:43:ce:a9:55:28:b4:ff:9b:fd:
64:be:b8:a8:81:65:df:3d:44:bd:a3:07:6e:ce:95:f7:1c:e5:
02:f7:de:fd:29:c4:45:18:bd:1f:be:09:83:23:9a:8c:84:bb:
74:3d:fd:6f:06:bd:97:b6:0b:03:14:a8:5c:e7:08:49:bc:91:
ac:bd:fa:1f:c2:a0:bd:b4:fc:41:dd:3f:24:97:94:0b:ba:a7:
a5:06:37:29:a6:e5:a6:7c:dc:c5:40:7e:ab:e1:47:27:5c:f7:
4d:09:7d:f7:9a:c6:52:e0:f3:06:3e:f3:7d:30:d0:2d:a4:c5:
9c:57:ce:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyqE/g6mqRztZB9FLub2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzQwNzAyMjQ3YTJmZWFjY2RlYmUxM2E5ODQyY2ZmZDNi
NDBjOTYwHhcNMjYwODE0MTUwMTE0WhcNMjYwODE1MTUwMTE0WjAzMTEwLwYDVQQD
EygwM2M0YjJjMGM4YjRmZWUxN2YyMzFlZWQ2NmI1NDg2YTdkZjU4ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dxVyRX2a2TWN3hIn6nc2juvDR60
PjMzlyntreDMDgMIvTWc1BQJgSZ4BZLm/trIfaOJ8+JXESGpA9oEytdUBppMhCXE
bP3wOZFkA8zeNbj6T+x0VDb3EM0kGB1nOLR1W+mYlATA5vnIn5r0c+xNlf8y+SKX
oJa5TagkuRtVFnNleKSoPvhbdAxb1k8lmhZ2iNkE4hHOtMu3BoxkQPpen/H4JBI1
DxH2TbrCA43F9mj6y4rnVkBhbyFSx/KKfDQl0I/Z4oiPd53rhOVbH9wqX7OVRRHf
KrgyZ9V/dfBab2GV3qM/OlzjVLXQyngwxJmdexNwkwPqaecFYoR1SHx0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPEssDItP7hfyMe7Wa1SGp99Y8KMB8GA1UdIwQY
MBaAFO10BwIkei/qzN6+E6mELP/TtAyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYt
NWNkYzNmNGI2MmJlLzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYtNWNkYzNmNGI2MmJl
LzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWS2/gUg
Sr2/1ezijFGX6zQc1usGIWb+BD6e9rKoLHU6r+ahiCMokUClRbe428CI3GXWxgFe
3kusJfegZOdTlqxf6RxZoWgxE6YWcNKjH5sfwK1qwxaUQN7yNUZq0HUJSMVIsvvk
87vXvzuAcjnJvdtwNKmRdmpsMHp5K6jBlY34454ffdTZQ86pVSi0/5v9ZL64qIFl
3z1EvaMHbs6V9xzlAvfe/SnERRi9H74JgyOajIS7dD39bwa9l7YLAxSoXOcISbyR
rL36H8KgvbT8Qd0/JJeUC7qnpQY3KablpnzcxUB+q+FHJ1z3TQl995rGUuDzBj7z
fTDQLaTFnFfOEQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:13 2026 by rpki-client