Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: LVF3Z+x/obu8YNHcI4BkP2zSHkJr0W6NJX8jEroPdws=
Subject key identifier: AE:93:91:57:32:B0:A9:02:E0:4D:BC:0D:B6:CB:AE:F5:B4:8B:5E:AF
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 019CE410D8089BDC340C1972544174142310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0C72
Signing time: Thu 12 Mar 2026 22:00:34 +0000
Manifest this update: Thu 12 Mar 2026 22:00:34 +0000
Manifest next update: Fri 13 Mar 2026 22:00:34 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: UkcnmSiTHhlk9pEbz422RL7ycsaRs8e/7DPKL+nCQ+Y=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:d8:08:9b:dc:34:0c:19:72:54:41:74:14:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Mar 12 22:00:34 2026 GMT
Not After : Mar 13 22:00:34 2026 GMT
Subject: CN=ae93915732b0a902e04dbc0db6cbaef5b48b5eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:d7:20:70:0d:b1:88:03:aa:d5:fe:99:96:
b2:7a:ec:43:c7:c4:df:0a:1d:33:51:91:7b:da:31:
d0:e1:64:e1:32:91:36:a9:38:ce:8c:f7:0c:41:c7:
46:e4:44:03:34:26:8a:09:b9:55:ff:a8:57:41:02:
6c:92:ad:b6:95:44:a0:f5:22:28:22:ed:55:3e:b5:
f6:24:33:8f:11:2c:00:47:c4:d7:e1:85:ac:67:cb:
5c:98:5b:14:28:79:f2:ed:ea:22:aa:9d:63:d4:90:
7c:b8:72:b8:92:33:a0:3d:ea:b8:8d:db:0b:e0:20:
10:da:a7:49:a1:8e:6d:de:5c:10:3f:8c:6a:54:b4:
01:38:64:6a:88:aa:c6:c1:b2:00:ea:e7:93:7e:ee:
8b:8f:c2:22:14:7a:11:28:9b:65:5f:c1:63:b5:43:
1d:e6:79:81:fa:a3:29:e2:51:29:ee:7f:f9:20:39:
92:d9:7b:05:d1:2e:3e:bb:0f:f8:48:95:6f:dc:b6:
4e:ed:a2:66:9c:c1:24:13:c4:0e:2f:72:a2:75:4b:
ef:e9:7b:d9:bd:cc:b8:67:5f:03:70:07:1d:8e:e1:
ff:44:23:94:b2:1d:86:a5:c4:82:83:6d:65:bb:6b:
08:f1:ca:74:81:6f:10:da:6e:97:2c:35:75:73:f0:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:91:57:32:B0:A9:02:E0:4D:BC:0D:B6:CB:AE:F5:B4:8B:5E:AF
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6b:ad:46:e4:2d:86:a2:92:6e:f9:0a:c1:c3:63:f0:8a:61:
2d:d5:93:af:5e:c5:5e:dc:48:ed:f4:06:d2:1c:1d:d2:8c:6c:
3f:90:9f:70:f9:94:11:db:37:47:6d:78:5e:69:ae:4d:1d:e6:
0e:d0:3f:bb:2a:d9:41:01:66:d1:83:5e:5d:cf:ad:a1:84:ac:
5f:58:13:f9:fe:cc:3e:bb:81:90:6f:5e:d2:b2:ab:a4:ad:44:
84:45:90:dc:06:30:b0:cc:de:8f:5a:5c:4f:62:98:df:69:cb:
4f:c3:a3:df:e1:f5:3f:99:84:85:da:ce:88:07:e3:dd:b6:76:
4b:91:b9:ab:f1:44:f5:07:2e:9c:d8:94:50:9c:96:57:e8:44:
e8:e4:cc:ef:80:29:e5:6c:14:30:31:ba:3f:f4:85:9f:a5:77:
13:d8:38:c3:cc:8f:52:a9:72:d1:ac:48:5e:7c:e6:82:3b:ec:
fa:84:55:68:fa:06:65:e2:05:d3:6b:e5:8d:6b:1d:81:f8:77:
0f:e0:4b:c4:ce:68:a4:27:d1:42:89:7b:a2:a5:a5:e5:61:14:
54:fa:35:8c:e7:fa:81:96:95:25:a0:89:9d:fd:fe:06:b4:45:
7b:be:91:2d:81:b2:bd:59:de:c9:71:93:b6:14:be:32:ba:8d:
a5:b4:cf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkENgIm9w0DBlyVEF0FCMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm
ZThlYWEwHhcNMjYwMzEyMjIwMDM0WhcNMjYwMzEzMjIwMDM0WjAzMTEwLwYDVQQD
EyhhZTkzOTE1NzMyYjBhOTAyZTA0ZGJjMGRiNmNiYWVmNWI0OGI1ZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhnXIHANsYgDqtX+mZayeuxDx8Tf
Ch0zUZF72jHQ4WThMpE2qTjOjPcMQcdG5EQDNCaKCblV/6hXQQJskq22lUSg9SIo
Iu1VPrX2JDOPESwAR8TX4YWsZ8tcmFsUKHny7eoiqp1j1JB8uHK4kjOgPeq4jdsL
4CAQ2qdJoY5t3lwQP4xqVLQBOGRqiKrGwbIA6ueTfu6Lj8IiFHoRKJtlX8FjtUMd
5nmB+qMp4lEp7n/5IDmS2XsF0S4+uw/4SJVv3LZO7aJmnMEkE8QOL3KidUvv6XvZ
vcy4Z18DcAcdjuH/RCOUsh2GpcSCg21lu2sI8cp0gW8Q2m6XLDV1c/DujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6TkVcysKkC4E28DbbLrvW0i16vMB8GA1UdIwQY
MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt
Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj
LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGutRuQt
hqKSbvkKwcNj8IphLdWTr17FXtxI7fQG0hwd0oxsP5CfcPmUEds3R214XmmuTR3m
DtA/uyrZQQFm0YNeXc+toYSsX1gT+f7MPruBkG9e0rKrpK1EhEWQ3AYwsMzej1pc
T2KY32nLT8Oj3+H1P5mEhdrOiAfj3bZ2S5G5q/FE9QcunNiUUJyWV+hE6OTM74Ap
5WwUMDG6P/SFn6V3E9g4w8yPUqly0axIXnzmgjvs+oRVaPoGZeIF02vljWsdgfh3
D+BLxM5opCfRQol7oqWl5WEUVPo1jOf6gZaVJaCJnf3+BrRFe76RLYGyvVneyXGT
thS+MrqNpbTPXg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 23:56:24 2026 by rpki-client