Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
File: 7u4EYVHEyMhCg2tG6paES1iQRfM.mft (raw, json)
Hash identifier: jcgL9frrZGxA9Evf824aHbguCOJf3Vcb03OGRTbN1Vk=
Subject key identifier: 1D:95:77:7B:E5:BF:EA:01:06:94:0B:94:2A:A2:DA:AE:C5:93:22:8D
Authority key identifier: EE:EE:04:61:51:C4:C8:C8:42:83:6B:46:EA:96:84:4B:58:90:45:F3
Certificate issuer: /CN=eeee046151c4c8c842836b46ea96844b589045f3
Certificate serial: 019D38D325EF127155B7423A8FED17D50F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
Manifest number: 37
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: 7u4EYVHEyMhCg2tG6paES1iQRfM.crl (hash: G5mRo7w3i4FqnOvMO4rYezWksn/lOG0TnuaCfQ3yBLc=)
2: KlsUbg9AMOo2OJW_BHZ60riJ1qs.roa (hash: HzGNBLf/SBMeM+8Ti4aGamBNAQLw7dOBmNy1c8GLu28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:25:ef:12:71:55:b7:42:3a:8f:ed:17:d5:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeee046151c4c8c842836b46ea96844b589045f3
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=1d95777be5bfea0106940b942aa2daaec593228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:b4:12:58:09:fc:b0:f4:51:3c:f1:a7:c2:
18:d8:a4:50:93:67:1b:4a:18:9f:4c:ac:74:9d:c5:
70:70:6f:ab:15:a0:4e:5f:72:bd:c6:17:a6:9d:5d:
3d:45:3d:2a:85:cc:e3:ee:3c:58:9e:87:61:ae:90:
8f:71:63:fd:b9:5e:c4:1b:1b:80:df:83:1e:3b:1d:
c5:29:72:1a:56:cc:d0:b2:9a:56:bf:be:ec:30:4d:
5f:f5:b1:c8:a9:d5:9a:a6:fc:54:6f:d0:ae:d2:9f:
f8:b1:78:1f:0c:8a:cb:98:7f:2e:0a:5b:4b:62:02:
d5:87:9e:a9:04:25:fc:e6:7e:88:b8:39:94:8e:36:
9e:91:4f:a7:9c:18:2b:fd:a6:75:41:7e:49:39:f3:
15:ec:48:07:6c:7f:68:44:42:4a:13:06:45:43:6d:
ce:ac:63:76:07:b1:0b:4a:bd:24:27:bc:4d:72:6a:
db:63:a4:31:76:49:b1:f9:e4:f2:f6:39:af:eb:40:
7f:f9:24:20:92:8f:2a:b9:ad:df:08:0f:cb:c0:c1:
3e:2f:57:a1:73:61:c8:8a:6a:69:34:f2:de:89:8e:
8d:15:ac:59:a5:ca:83:f8:23:8b:aa:29:ea:32:99:
dc:6a:b4:ba:bc:25:63:f5:86:2d:f6:bd:27:7e:78:
e3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:95:77:7B:E5:BF:EA:01:06:94:0B:94:2A:A2:DA:AE:C5:93:22:8D
X509v3 Authority Key Identifier:
keyid:EE:EE:04:61:51:C4:C8:C8:42:83:6B:46:EA:96:84:4B:58:90:45:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u4EYVHEyMhCg2tG6paES1iQRfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/846237-7a5d-4366-9ca8-2af9cf607efc/1/7u4EYVHEyMhCg2tG6paES1iQRfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1b:68:5f:0c:47:d8:ba:d8:29:33:ae:dc:24:ac:f9:e4:f4:
cc:45:32:f4:93:6f:31:dc:06:fb:a9:93:98:83:21:a8:e6:cb:
7b:a0:38:d1:f4:a1:10:3d:d9:6c:ac:1e:ca:a9:bc:d2:6b:c2:
bc:21:c2:38:1f:21:3f:db:bc:af:f7:78:29:7d:57:93:66:72:
90:04:23:ac:f2:3a:9e:09:46:39:fe:ec:14:4a:1b:4e:62:40:
0f:80:d4:74:29:01:2d:e9:70:40:af:65:c6:ea:3b:aa:17:4c:
70:13:20:0d:94:87:d4:14:ed:7e:77:8d:59:0e:0f:74:3b:e3:
04:66:eb:c9:09:f6:f9:d5:dd:e8:d0:7c:08:fd:fa:80:7e:6d:
fe:f7:2d:c8:8f:e9:42:6f:43:68:1a:49:e6:2e:ed:78:c5:01:
00:d3:ec:ee:56:d1:4d:58:42:8c:89:fc:4e:c7:ff:bc:d6:21:
41:0b:fe:8e:5c:0f:5e:2b:b9:46:14:d7:78:5a:a9:35:ea:b1:
db:cf:67:7e:52:97:c9:c6:e9:3c:0e:1f:83:2f:b2:e4:34:a5:
c4:8c:a8:fd:45:77:fc:84:59:dc:d8:ff:00:63:92:56:20:cb:
1f:83:9f:64:2c:6e:6c:b4:88:1a:03:74:07:f7:10:5b:36:46:
88:1f:6a:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040yXvEnFVt0I6j+0X1Q8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWUwNDYxNTFjNGM4Yzg0MjgzNmI0NmVhOTY4NDRiNTg5
MDQ1ZjMwHhcNMjYwMzI5MDkwMDU0WhcNMjYwMzMwMDkwMDU0WjAzMTEwLwYDVQQD
EygxZDk1Nzc3YmU1YmZlYTAxMDY5NDBiOTQyYWEyZGFhZWM1OTMyMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS+0ElgJ/LD0UTzxp8IY2KRQk2cb
ShifTKx0ncVwcG+rFaBOX3K9xhemnV09RT0qhczj7jxYnodhrpCPcWP9uV7EGxuA
34MeOx3FKXIaVszQsppWv77sME1f9bHIqdWapvxUb9Cu0p/4sXgfDIrLmH8uCltL
YgLVh56pBCX85n6IuDmUjjaekU+nnBgr/aZ1QX5JOfMV7EgHbH9oREJKEwZFQ23O
rGN2B7ELSr0kJ7xNcmrbY6Qxdkmx+eTy9jmv60B/+SQgko8qua3fCA/LwME+L1eh
c2HIimppNPLeiY6NFaxZpcqD+COLqinqMpncarS6vCVj9YYt9r0nfnjjJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2Vd3vlv+oBBpQLlCqi2q7FkyKNMB8GA1UdIwQY
MBaAFO7uBGFRxMjIQoNrRuqWhEtYkEXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3U0RVlWSEV5TWhDZzJ0RzZwYUVTMWlRUmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84NDYyMzctN2E1ZC00MzY2LTljYTgt
MmFmOWNmNjA3ZWZjLzEvN3U0RVlWSEV5TWhDZzJ0RzZwYUVTMWlRUmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84NDYyMzctN2E1ZC00MzY2LTljYTgtMmFmOWNmNjA3ZWZj
LzEvN3U0RVlWSEV5TWhDZzJ0RzZwYUVTMWlRUmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRtoXwxH
2LrYKTOu3CSs+eT0zEUy9JNvMdwG+6mTmIMhqObLe6A40fShED3ZbKweyqm80mvC
vCHCOB8hP9u8r/d4KX1Xk2ZykAQjrPI6nglGOf7sFEobTmJAD4DUdCkBLelwQK9l
xuo7qhdMcBMgDZSH1BTtfneNWQ4PdDvjBGbryQn2+dXd6NB8CP36gH5t/vctyI/p
Qm9DaBpJ5i7teMUBANPs7lbRTVhCjIn8Tsf/vNYhQQv+jlwPXiu5RhTXeFqpNeqx
289nflKXycbpPA4fgy+y5DSlxIyo/UV3/IRZ3Nj/AGOSViDLH4OfZCxubLSIGgN0
B/cQWzZGiB9qpA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:54 2026 by rpki-client