Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
File: 7rv5EjKoEhLjtEz74e4pjGKaZk8.mft (raw, json)
Hash identifier: 0YxWSpJvfePZ6TeqYG0szLOk8v0tyqXqrd8/FUayYCo=
Subject key identifier: 9F:45:AF:D1:9B:8C:C7:B0:9A:7B:B4:26:15:9A:22:C2:A6:0E:55:9E
Authority key identifier: EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F
Certificate issuer: /CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
Certificate serial: 019D3A54A4B748B4926BE746A3906F4F5C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
Manifest number: BA
Signing time: Sun 29 Mar 2026 16:01:58 +0000
Manifest this update: Sun 29 Mar 2026 16:01:58 +0000
Manifest next update: Mon 30 Mar 2026 16:01:58 +0000
Files and hashes: 1: 7rv5EjKoEhLjtEz74e4pjGKaZk8.crl (hash: /8F4ilS0P6rM7ojATZrA2sTGOZ853J7BYFpVsMtQqHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:a4:b7:48:b4:92:6b:e7:46:a3:90:6f:4f:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf91232a81212e3b44cfbe1ee298c629a664f
Validity
Not Before: Mar 29 16:01:58 2026 GMT
Not After : Mar 30 16:01:58 2026 GMT
Subject: CN=9f45afd19b8cc7b09a7bb426159a22c2a60e559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:a7:fa:d8:af:cc:05:16:0a:cf:bd:70:0b:
15:82:e7:9d:31:d4:de:8d:bc:6a:09:42:7f:2b:04:
69:b9:78:1f:0d:ff:6a:7e:3f:ac:8e:6d:cb:73:d6:
f4:1f:fc:17:7f:39:d0:56:cd:c3:96:ae:62:a0:f0:
95:fb:5f:3b:70:4d:26:3f:0b:fc:5a:74:11:f4:6d:
15:7f:d1:fc:eb:f2:83:32:36:f6:ca:2f:6a:2d:4c:
aa:a2:09:9f:ae:85:0f:68:db:2b:f5:7e:bd:0b:46:
81:fd:89:09:37:73:d7:f7:79:a3:89:e6:b9:42:51:
d7:c1:8a:e0:0a:04:6e:e8:83:3a:e6:cf:a8:2b:4a:
7e:00:2b:b2:98:df:79:e2:a5:c2:7f:11:c4:fb:8a:
aa:9e:a8:fb:0c:94:51:8b:26:0d:d4:da:76:8c:85:
f3:d0:56:49:99:d0:17:51:91:7c:88:d8:ca:04:f6:
48:ec:a1:24:cb:f2:b8:a7:8f:5d:21:26:b5:4e:7a:
65:f8:d3:4d:3d:d8:2c:c6:df:ba:08:41:99:be:ee:
93:bb:6c:7c:a3:e4:a6:86:9c:b4:45:3a:13:6c:d6:
32:44:f9:c0:70:2f:c1:bd:2a:fe:56:2d:c8:da:9b:
e0:65:e1:c3:82:da:aa:0e:2b:85:a1:f6:29:1d:34:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:AF:D1:9B:8C:C7:B0:9A:7B:B4:26:15:9A:22:C2:A6:0E:55:9E
X509v3 Authority Key Identifier:
keyid:EE:BB:F9:12:32:A8:12:12:E3:B4:4C:FB:E1:EE:29:8C:62:9A:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rv5EjKoEhLjtEz74e4pjGKaZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/31c3dc-4842-4cff-a0a1-6ceea51e07c5/1/7rv5EjKoEhLjtEz74e4pjGKaZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b6:5f:99:8d:8b:ff:53:19:08:79:93:68:2f:e3:4e:fe:ce:
f0:e9:be:e6:b7:89:1b:09:bc:58:6c:1c:d0:4d:5b:ae:e0:b2:
47:e7:23:b9:fb:27:4c:bd:f3:ad:d3:c4:76:4b:bd:16:eb:e2:
48:c6:42:96:fe:d1:96:da:36:a4:dd:1d:d8:6f:f7:79:fd:4d:
a4:73:4d:61:f2:0a:c0:b0:cd:f6:10:fc:0a:11:a3:57:e0:a6:
ea:0d:6b:9a:d3:6e:83:4d:6c:43:dc:a2:9a:1e:09:01:9e:92:
93:8a:d3:7a:3d:97:de:f3:fc:93:37:fc:b9:e8:10:b3:37:cd:
b1:ec:02:91:56:fa:ec:aa:1b:1a:52:4b:4e:10:2c:95:a3:ae:
4a:fa:ec:3c:7b:4e:c8:cf:a9:c8:ee:ce:07:3b:d3:8a:d8:c9:
14:b1:fe:08:bb:f7:14:6f:59:99:89:68:a6:90:e8:5f:7b:fc:
f7:78:27:cf:ae:1f:71:66:30:60:6c:21:58:40:7b:4f:da:f1:
ad:39:dd:9b:c2:e4:a3:89:45:d3:01:ae:4c:e6:ee:8b:fc:c1:
cb:a0:a1:5e:5c:08:c7:97:3e:ba:d0:97:60:8c:94:ef:e9:18:
3a:23:ca:01:3c:ef:12:ea:a8:93:6d:d6:5b:5d:72:ec:93:04:
ec:5b:98:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VKS3SLSSa+dGo5BvT1xVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmOTEyMzJhODEyMTJlM2I0NGNmYmUxZWUyOThjNjI5
YTY2NGYwHhcNMjYwMzI5MTYwMTU4WhcNMjYwMzMwMTYwMTU4WjAzMTEwLwYDVQQD
Eyg5ZjQ1YWZkMTliOGNjN2IwOWE3YmI0MjYxNTlhMjJjMmE2MGU1NTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE6n+tivzAUWCs+9cAsVguedMdTe
jbxqCUJ/KwRpuXgfDf9qfj+sjm3Lc9b0H/wXfznQVs3Dlq5ioPCV+187cE0mPwv8
WnQR9G0Vf9H86/KDMjb2yi9qLUyqogmfroUPaNsr9X69C0aB/YkJN3PX93mjiea5
QlHXwYrgCgRu6IM65s+oK0p+ACuymN954qXCfxHE+4qqnqj7DJRRiyYN1Np2jIXz
0FZJmdAXUZF8iNjKBPZI7KEky/K4p49dISa1Tnpl+NNNPdgsxt+6CEGZvu6Tu2x8
o+Smhpy0RToTbNYyRPnAcC/BvSr+Vi3I2pvgZeHDgtqqDiuFofYpHTQr4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9Fr9GbjMewmnu0JhWaIsKmDlWeMB8GA1UdIwQY
MBaAFO67+RIyqBIS47RM++HuKYximmZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2NUVqS29FaExqdEV6NzRlNHBqR0thWms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zMWMzZGMtNDg0Mi00Y2ZmLWEwYTEt
NmNlZWE1MWUwN2M1LzEvN3J2NUVqS29FaExqdEV6NzRlNHBqR0thWms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zMWMzZGMtNDg0Mi00Y2ZmLWEwYTEtNmNlZWE1MWUwN2M1
LzEvN3J2NUVqS29FaExqdEV6NzRlNHBqR0thWms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELZfmY2L
/1MZCHmTaC/jTv7O8Om+5reJGwm8WGwc0E1bruCyR+cjufsnTL3zrdPEdku9Fuvi
SMZClv7Rlto2pN0d2G/3ef1NpHNNYfIKwLDN9hD8ChGjV+Cm6g1rmtNug01sQ9yi
mh4JAZ6Sk4rTej2X3vP8kzf8uegQszfNsewCkVb67KobGlJLThAslaOuSvrsPHtO
yM+pyO7OBzvTitjJFLH+CLv3FG9ZmYloppDoX3v893gnz64fcWYwYGwhWEB7T9rx
rTndm8Lko4lF0wGuTObui/zBy6ChXlwIx5c+utCXYIyU7+kYOiPKATzvEuqok23W
W11y7JME7FuYxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:03 2026 by rpki-client