Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier: ALNsXyBM7rDoUNN2XPk9z/wa793ayJFP6ya2qVti+mk=
Subject key identifier: 9A:19:30:4F:99:21:7C:D1:BA:4E:46:80:75:15:D5:27:67:C5:97:32
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer: /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial: 019D39AE9848F1D48FF0F84100E4A3EF87DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number: 06C9
Signing time: Sun 29 Mar 2026 13:00:36 +0000
Manifest this update: Sun 29 Mar 2026 13:00:36 +0000
Manifest next update: Mon 30 Mar 2026 13:00:36 +0000
Files and hashes: 1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: 6m1A+GNSxBsnhhLWakhJRuUjOreWkO59jUKF2PVMv6U=)
2: KKkdWKb8trEZFH4vckoUJV2EraM.roa (hash: Ag2mjewJcCUE9H557ALCBro2BDKEQqn+ZfAIETR7Z90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:98:48:f1:d4:8f:f0:f8:41:00:e4:a3:ef:87:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Validity
Not Before: Mar 29 13:00:36 2026 GMT
Not After : Mar 30 13:00:36 2026 GMT
Subject: CN=9a19304f99217cd1ba4e46807515d52767c59732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:f3:51:f8:07:e7:d5:46:d7:23:b0:8e:b4:
00:68:72:6f:a5:aa:a6:62:d4:e9:fa:ff:ef:a3:11:
41:ec:84:a0:32:c7:5e:79:ca:d1:ac:e8:c0:19:29:
a5:eb:a9:82:16:59:3c:2e:c2:d2:c6:49:9d:49:07:
28:08:71:a1:f1:97:8a:b4:5a:cc:e6:89:0c:8c:2b:
76:76:7a:0a:65:dd:cc:b7:09:fc:c7:a3:77:d1:cb:
c8:e3:b9:43:da:67:3e:59:5c:14:fc:1e:0c:3f:09:
49:bf:ae:b1:f6:17:6d:e7:49:e9:28:10:d3:e6:13:
7a:10:5e:26:23:f0:a1:b4:b3:93:79:c9:d0:07:61:
7b:8f:bf:ed:1c:a7:e2:22:04:00:a8:ca:35:48:98:
82:86:21:2c:ad:6c:8d:84:3d:d1:4c:7e:d5:13:21:
e7:0d:48:97:37:10:00:17:e5:fb:cd:5e:ed:1a:bd:
e5:36:b3:f4:48:87:23:f8:14:14:c6:e5:7e:64:2c:
3c:de:53:03:ab:e2:d0:25:a2:39:e9:44:e3:59:5b:
90:46:64:eb:8f:b5:b4:76:5f:9c:6f:34:4b:bf:8e:
16:20:57:f5:b9:1b:19:6e:f8:36:5b:81:8f:06:39:
c3:78:03:9b:43:c8:38:60:0d:af:c9:89:23:f0:5d:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:30:4F:99:21:7C:D1:BA:4E:46:80:75:15:D5:27:67:C5:97:32
X509v3 Authority Key Identifier:
keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:54:30:2d:16:c2:23:b4:be:bd:a6:cf:af:6b:e7:13:86:d6:
47:99:d9:2a:4f:46:65:51:4b:d1:8b:32:aa:29:36:3b:65:bf:
fd:c2:68:41:09:9a:69:18:fc:8a:64:9f:b8:cb:b0:e1:ca:48:
b1:85:d8:eb:7f:40:7b:07:c9:0f:53:67:f1:96:5b:a1:db:48:
d2:eb:a1:96:e4:c7:59:ce:ef:a7:73:b7:73:20:69:6b:17:c4:
c9:21:2d:48:f1:8a:4e:c2:1f:fc:ef:3d:0e:de:91:7f:2f:2f:
80:b9:30:0c:e9:a5:be:dc:f8:f8:c7:ee:65:4c:7b:d6:e1:b9:
54:0a:eb:cc:c7:7a:31:4f:4d:ea:12:fa:2d:5b:37:06:be:5b:
11:9a:0e:ab:66:15:28:e7:9d:0d:83:df:98:8b:e2:3e:9b:e5:
d7:ea:1c:46:86:4f:fa:c0:7d:f0:47:d4:32:63:af:09:e7:bd:
ca:ec:df:90:68:0e:2d:2a:3f:18:42:33:98:b3:00:cf:8c:25:
99:7f:92:8b:e8:f4:d4:65:08:50:3b:5d:06:ad:64:a9:51:0d:
0e:ec:0d:f1:52:a6:dc:9f:25:b6:03:e7:46:70:d5:92:2d:7e:
d1:43:35:69:61:4f:50:85:7f:45:59:16:b5:99:2d:a0:97:41:
a2:08:a8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rphI8dSP8PhBAOSj74fcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzcyYzJmYTIzYmU2ZmE4ZTI4YWVhNGE3MTVkNWFjMzFm
MGNjOWYwHhcNMjYwMzI5MTMwMDM2WhcNMjYwMzMwMTMwMDM2WjAzMTEwLwYDVQQD
Eyg5YTE5MzA0Zjk5MjE3Y2QxYmE0ZTQ2ODA3NTE1ZDUyNzY3YzU5NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYDzUfgH59VG1yOwjrQAaHJvpaqm
YtTp+v/voxFB7ISgMsdeecrRrOjAGSml66mCFlk8LsLSxkmdSQcoCHGh8ZeKtFrM
5okMjCt2dnoKZd3Mtwn8x6N30cvI47lD2mc+WVwU/B4MPwlJv66x9hdt50npKBDT
5hN6EF4mI/ChtLOTecnQB2F7j7/tHKfiIgQAqMo1SJiChiEsrWyNhD3RTH7VEyHn
DUiXNxAAF+X7zV7tGr3lNrP0SIcj+BQUxuV+ZCw83lMDq+LQJaI56UTjWVuQRmTr
j7W0dl+cbzRLv44WIFf1uRsZbvg2W4GPBjnDeAObQ8g4YA2vyYkj8F3++wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoZME+ZIXzRuk5GgHUV1SdnxZcyMB8GA1UdIwQY
MBaAFO13LC+iO+b6jiiupKcV1awx8MyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYt
OGZhMDk4NzQxMTNlLzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYtOGZhMDk4NzQxMTNl
LzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlQwLRbC
I7S+vabPr2vnE4bWR5nZKk9GZVFL0Ysyqik2O2W//cJoQQmaaRj8imSfuMuw4cpI
sYXY639AewfJD1Nn8ZZbodtI0uuhluTHWc7vp3O3cyBpaxfEySEtSPGKTsIf/O89
Dt6Rfy8vgLkwDOmlvtz4+MfuZUx71uG5VArrzMd6MU9N6hL6LVs3Br5bEZoOq2YV
KOedDYPfmIviPpvl1+ocRoZP+sB98EfUMmOvCee9yuzfkGgOLSo/GEIzmLMAz4wl
mX+Si+j01GUIUDtdBq1kqVENDuwN8VKm3J8ltgPnRnDVki1+0UM1aWFPUIV/RVkW
tZktoJdBogioBA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:43 2026 by rpki-client