Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
File: 7JJpGF9j3DNWA39xPOigkJ_wciU.mft (raw, json)
Hash identifier: yUJKyivlhGikCqoW6pKYca8/Az0rZCmAbtjEnYUB/iw=
Subject key identifier: A0:0B:27:BA:1E:83:25:F1:F7:2D:C6:60:14:61:39:8D:7E:4E:22:8D
Authority key identifier: EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
Certificate issuer: /CN=ec9269185f63dc3356037f713ce8a0909ff07225
Certificate serial: 019D382EBA68D143EF0503CA5CC84AC10AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
Manifest number: 0D87
Signing time: Sun 29 Mar 2026 06:01:19 +0000
Manifest this update: Sun 29 Mar 2026 06:01:19 +0000
Manifest next update: Mon 30 Mar 2026 06:01:19 +0000
Files and hashes: 1: 7JJpGF9j3DNWA39xPOigkJ_wciU.crl (hash: yYKbsN4Pzo7oUm3gVgcUoRv4PjbLVXAfAc4Z+fLMkzE=)
2: svvoqJIRYC-HEv4mFDJ4yabrIfA.roa (hash: DylecbDSgd1YsXawir60/ZUXc9wMtcV4PzlLtSqtsUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ba:68:d1:43:ef:05:03:ca:5c:c8:4a:c1:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9269185f63dc3356037f713ce8a0909ff07225
Validity
Not Before: Mar 29 06:01:19 2026 GMT
Not After : Mar 30 06:01:19 2026 GMT
Subject: CN=a00b27ba1e8325f1f72dc6601461398d7e4e228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:d5:49:b9:1b:5f:ce:f2:26:58:25:46:6c:
41:12:96:ef:bc:2c:56:64:f9:95:89:23:26:45:39:
01:9d:19:9c:a3:3e:d6:36:11:64:9e:1d:9b:e3:9f:
26:75:01:d6:7d:8e:f6:6a:63:28:a4:a8:11:85:01:
0c:c9:ac:cc:c3:a7:50:5b:c3:b5:5b:a1:eb:c6:d7:
0d:ed:b8:ed:3d:0b:31:24:c2:12:39:fe:07:28:4c:
6e:21:60:11:10:ab:d0:d4:03:e1:04:81:7e:85:af:
43:34:31:c1:ad:22:06:0a:cd:56:15:6b:a7:db:21:
2d:11:df:3e:66:ab:4f:a4:24:4b:94:d5:e4:a6:6b:
9f:4c:47:f3:2b:87:41:51:72:b4:8e:f6:1f:33:2e:
71:3c:92:e2:15:d6:41:04:c9:93:fb:3e:7d:13:74:
fe:dc:cc:00:c6:60:96:b5:a9:ac:96:a3:aa:f6:48:
6d:a6:78:92:0e:5c:cc:4e:11:37:38:c2:6c:60:7b:
7b:3f:3c:7a:e7:37:4e:45:9c:dd:ef:e8:05:ed:70:
85:4c:5e:39:b1:44:f2:f2:3d:1b:dc:af:47:96:1c:
d1:99:1f:43:41:90:1a:c6:64:f4:0f:d7:74:b0:9c:
ca:a8:9c:87:2d:4b:17:a7:86:8d:87:a6:be:63:5b:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:27:BA:1E:83:25:F1:F7:2D:C6:60:14:61:39:8D:7E:4E:22:8D
X509v3 Authority Key Identifier:
keyid:EC:92:69:18:5F:63:DC:33:56:03:7F:71:3C:E8:A0:90:9F:F0:72:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JJpGF9j3DNWA39xPOigkJ_wciU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d50905-007a-4074-9a05-a6c8bd8742a4/1/7JJpGF9j3DNWA39xPOigkJ_wciU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0b:e0:9a:d7:51:c3:06:43:ce:42:35:90:47:1c:18:41:60:
6b:9b:4d:22:69:f6:96:51:f8:db:4d:4d:c5:e2:0a:e0:21:96:
ab:91:4b:b5:ec:82:3b:77:a0:f1:bf:27:c4:31:e0:73:26:64:
cc:da:44:da:42:f3:c6:77:2b:7c:e3:e7:fb:06:52:4c:48:b1:
00:34:8c:ef:0c:8d:75:32:5c:99:21:8c:1d:ea:36:7a:de:d3:
dd:a2:4f:0d:44:76:b8:e7:61:7a:2f:14:b4:81:a1:61:bb:1f:
a9:01:2a:40:fc:88:37:47:b7:bd:90:08:f2:60:33:6c:a5:cf:
72:61:28:68:3b:8d:b7:e2:88:ef:4a:fb:8c:6d:13:1c:85:a0:
99:4b:68:5f:d4:6f:cf:9d:62:39:c0:66:c4:a9:b0:bf:ee:aa:
b5:41:7c:90:60:24:d8:1b:fa:8b:f0:0a:63:9f:66:4c:1a:8a:
9b:42:9f:41:a8:49:bc:a8:37:52:bd:7a:58:67:7b:43:25:97:
ed:0c:58:31:a4:3c:ce:b3:77:53:ee:b7:b0:ba:b2:b0:6a:16:
5e:1b:24:29:15:61:b3:e8:08:69:50:21:fb:0a:d9:6b:2a:fe:
9b:bc:78:65:a7:0f:80:2b:f2:1d:f4:2f:0e:f2:c4:dc:45:6f:
c2:9c:de:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lrpo0UPvBQPKXMhKwQrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTI2OTE4NWY2M2RjMzM1NjAzN2Y3MTNjZThhMDkwOWZm
MDcyMjUwHhcNMjYwMzI5MDYwMTE5WhcNMjYwMzMwMDYwMTE5WjAzMTEwLwYDVQQD
EyhhMDBiMjdiYTFlODMyNWYxZjcyZGM2NjAxNDYxMzk4ZDdlNGUyMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI7VSbkbX87yJlglRmxBEpbvvCxW
ZPmViSMmRTkBnRmcoz7WNhFknh2b458mdQHWfY72amMopKgRhQEMyazMw6dQW8O1
W6HrxtcN7bjtPQsxJMISOf4HKExuIWAREKvQ1APhBIF+ha9DNDHBrSIGCs1WFWun
2yEtEd8+ZqtPpCRLlNXkpmufTEfzK4dBUXK0jvYfMy5xPJLiFdZBBMmT+z59E3T+
3MwAxmCWtamslqOq9khtpniSDlzMThE3OMJsYHt7Pzx65zdORZzd7+gF7XCFTF45
sUTy8j0b3K9HlhzRmR9DQZAaxmT0D9d0sJzKqJyHLUsXp4aNh6a+Y1tqHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKALJ7oegyXx9y3GYBRhOY1+TiKNMB8GA1UdIwQY
MBaAFOySaRhfY9wzVgN/cTzooJCf8HIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUt
YTZjOGJkODc0MmE0LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNTA5MDUtMDA3YS00MDc0LTlhMDUtYTZjOGJkODc0MmE0
LzEvN0pKcEdGOWozRE5XQTM5eFBPaWdrSl93Y2lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAvgmtdR
wwZDzkI1kEccGEFga5tNImn2llH4201NxeIK4CGWq5FLteyCO3eg8b8nxDHgcyZk
zNpE2kLzxncrfOPn+wZSTEixADSM7wyNdTJcmSGMHeo2et7T3aJPDUR2uOdhei8U
tIGhYbsfqQEqQPyIN0e3vZAI8mAzbKXPcmEoaDuNt+KI70r7jG0THIWgmUtoX9Rv
z51iOcBmxKmwv+6qtUF8kGAk2Bv6i/AKY59mTBqKm0KfQahJvKg3Ur16WGd7QyWX
7QxYMaQ8zrN3U+63sLqysGoWXhskKRVhs+gIaVAh+wrZayr+m7x4ZacPgCvyHfQv
DvLE3EVvwpzeNA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:23 2026 by rpki-client