Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File: frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier: WkzXgqdfZ7ePVXhD8ManCL9PsGxBHMAAEZqqe6tO6lM=
Subject key identifier: 7C:77:29:65:9C:18:77:90:90:E8:A9:ED:BC:C6:CA:23:6B:E3:49:1A
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer: /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial: 019D3941A559AC99A28B8D7F93E64F55C499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number: 0871
Signing time: Sun 29 Mar 2026 11:01:36 +0000
Manifest this update: Sun 29 Mar 2026 11:01:36 +0000
Manifest next update: Mon 30 Mar 2026 11:01:36 +0000
Files and hashes: 1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: eUxgdaQv+d1RsyQ1lzP2THuj93c8bfdNrhI7A/E2ZfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a5:59:ac:99:a2:8b:8d:7f:93:e6:4f:55:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Validity
Not Before: Mar 29 11:01:36 2026 GMT
Not After : Mar 30 11:01:36 2026 GMT
Subject: CN=7c7729659c18779090e8a9edbcc6ca236be3491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:4a:db:7d:c8:0d:43:2a:cb:73:83:c2:17:
c6:3a:69:a8:8d:21:2a:7f:17:31:5e:9e:ea:d5:bc:
7a:cd:5e:50:36:de:0d:5c:c0:35:35:a5:37:89:05:
f9:7f:03:1b:81:ff:ad:57:ed:a2:19:01:e8:65:df:
1b:0e:03:d9:dd:d5:bc:0e:94:dc:2a:91:74:fb:cc:
59:f0:e0:d9:1d:82:cc:95:28:05:04:35:e6:18:9f:
b2:de:05:5c:93:e8:13:84:a4:6e:eb:ba:9c:97:5a:
4b:e8:6e:e7:0c:20:aa:87:06:f7:ad:7e:de:db:ea:
ac:f7:a4:ab:89:e6:75:36:cf:a0:5c:aa:fd:30:0d:
7f:94:af:ac:1c:98:91:80:48:e6:45:c5:07:f5:de:
20:69:8a:cb:e8:28:85:ce:bf:4a:e5:7f:56:0a:9d:
12:5c:8a:e8:ca:2b:66:82:d8:2e:f5:ca:e6:85:16:
a5:06:bc:1f:3a:3f:e9:90:bf:06:c1:61:12:06:de:
f3:b8:a3:fe:8c:51:bb:4a:a1:7c:be:48:be:d7:00:
e2:3a:42:77:97:95:53:89:d5:bd:18:96:e3:fd:e2:
2a:f3:d0:ad:2f:eb:76:39:20:a9:7b:3d:57:db:34:
39:22:36:7d:9e:85:7d:19:f0:d2:95:d3:9c:77:f8:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:77:29:65:9C:18:77:90:90:E8:A9:ED:BC:C6:CA:23:6B:E3:49:1A
X509v3 Authority Key Identifier:
keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:50:d0:f4:17:73:67:e0:77:6b:b9:06:fa:dd:e2:4a:62:f1:
73:79:41:eb:d8:9a:c7:c4:ff:6a:cf:55:aa:d1:93:89:ea:ed:
02:a0:19:e5:c0:cf:10:16:37:86:d2:e9:57:1b:ed:9b:a7:4e:
bc:2a:32:c9:aa:19:18:e8:58:17:1c:59:88:a8:86:87:83:bb:
bf:65:33:f4:22:c6:3a:b6:1a:65:d2:84:6e:00:bf:8c:6e:db:
02:8f:ca:49:62:95:44:60:cc:60:5d:cb:95:d3:64:34:69:db:
db:64:8d:14:6d:19:90:42:01:81:d2:54:b0:00:3b:77:87:e2:
d1:4f:2a:8b:c5:38:32:ac:7e:68:e0:41:eb:68:a3:80:80:ab:
16:4a:7f:b7:46:3f:ea:04:a9:18:32:e3:d6:9d:77:ef:16:32:
c2:51:6d:f0:a2:3c:f9:08:39:15:1a:4f:6c:e8:c9:1a:94:22:
76:6b:46:40:6d:42:ff:a6:01:37:39:fe:8d:1f:9f:65:29:51:
e8:f4:a2:c3:56:d3:1d:c9:8f:1f:e6:b7:4b:2e:cd:d7:51:17:
f7:7a:f4:de:b5:b2:bc:99:25:8f:35:fc:45:5a:7e:1a:7a:eb:
3a:5b:39:15:58:d8:69:5b:61:0d:77:22:cd:43:bf:5f:51:80:
c5:84:35:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QaVZrJmii41/k+ZPVcSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjYwMzcwNDBhODYwY2Q5MWJhNzdhMzcxOGVkNTgwY2Fk
ZjVkZDgwHhcNMjYwMzI5MTEwMTM2WhcNMjYwMzMwMTEwMTM2WjAzMTEwLwYDVQQD
Eyg3Yzc3Mjk2NTljMTg3NzkwOTBlOGE5ZWRiY2M2Y2EyMzZiZTM0OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6pK233IDUMqy3ODwhfGOmmojSEq
fxcxXp7q1bx6zV5QNt4NXMA1NaU3iQX5fwMbgf+tV+2iGQHoZd8bDgPZ3dW8DpTc
KpF0+8xZ8ODZHYLMlSgFBDXmGJ+y3gVck+gThKRu67qcl1pL6G7nDCCqhwb3rX7e
2+qs96SrieZ1Ns+gXKr9MA1/lK+sHJiRgEjmRcUH9d4gaYrL6CiFzr9K5X9WCp0S
XIroyitmgtgu9crmhRalBrwfOj/pkL8GwWESBt7zuKP+jFG7SqF8vki+1wDiOkJ3
l5VTidW9GJbj/eIq89CtL+t2OSCpez1X2zQ5IjZ9noV9GfDSldOcd/jqDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHx3KWWcGHeQkOip7bzGyiNr40kaMB8GA1UdIwQY
MBaAFH62A3BAqGDNkbp3o3GO1YDK313YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTkt
Yjg4NjZlOTQxOTYzLzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTktYjg4NjZlOTQxOTYz
LzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVDQ9Bdz
Z+B3a7kG+t3iSmLxc3lB69iax8T/as9VqtGTiertAqAZ5cDPEBY3htLpVxvtm6dO
vCoyyaoZGOhYFxxZiKiGh4O7v2Uz9CLGOrYaZdKEbgC/jG7bAo/KSWKVRGDMYF3L
ldNkNGnb22SNFG0ZkEIBgdJUsAA7d4fi0U8qi8U4Mqx+aOBB62ijgICrFkp/t0Y/
6gSpGDLj1p137xYywlFt8KI8+Qg5FRpPbOjJGpQidmtGQG1C/6YBNzn+jR+fZSlR
6PSiw1bTHcmPH+a3Sy7N11EX93r03rWyvJkljzX8RVp+GnrrOls5FVjYaVthDXci
zUO/X1GAxYQ15g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:08 2026 by rpki-client