Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: qgVhmuKsuMeVbKvqZtBoXibTZrtIKeJtTHKX3w8JHLQ=
Subject key identifier: BA:68:C7:3E:83:A8:92:EC:EE:8F:02:B5:9C:86:B8:DD:D6:E5:37:C7
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 019D3909ED28C5BF1BBFB13EB45DD374B09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 086E
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: DVsvfyBCbr3BRusU1+49dw8AlLlHlHtancL+gV+Hb8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ed:28:c5:bf:1b:bf:b1:3e:b4:5d:d3:74:b0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=ba68c73e83a892ecee8f02b59c86b8ddd6e537c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:8a:98:d7:2a:76:03:2b:a4:9f:ac:13:de:
4e:c0:41:6a:db:5e:63:c5:16:05:47:26:af:56:37:
ba:f0:bd:d0:3b:28:f5:1b:53:4b:60:1b:91:fc:b7:
72:1a:ec:d3:1c:b5:6a:05:cf:6d:5c:eb:c6:a1:f4:
43:c7:eb:c9:61:22:1a:09:d7:cc:c7:12:50:93:08:
4c:81:21:eb:fe:5c:99:1a:6b:07:e7:19:5f:ad:f5:
93:74:9e:5d:18:c4:48:75:4b:61:31:3e:93:a7:ab:
be:b3:34:cf:4c:31:38:50:c1:d2:f4:29:8c:3e:24:
23:a3:da:70:6a:39:24:93:f3:80:36:72:4a:98:1f:
d8:92:29:74:83:3a:44:9f:ec:5f:ad:69:38:9b:29:
86:ef:67:d4:24:89:7a:ea:f2:07:4a:67:4e:e6:de:
87:a7:23:7b:88:98:01:d9:fb:95:5b:3c:81:c6:7a:
cf:98:07:65:ed:eb:3e:58:0d:47:49:86:aa:ad:8f:
2e:dd:3c:3f:11:99:57:b8:b6:5b:cf:98:b3:7d:95:
02:b9:43:20:0c:88:41:94:25:96:4a:86:2e:14:07:
43:b5:4f:cd:b7:3b:47:44:60:0e:86:74:8f:db:ef:
b6:29:47:58:0b:a5:f0:ab:f6:fb:38:aa:fd:9f:9f:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:C7:3E:83:A8:92:EC:EE:8F:02:B5:9C:86:B8:DD:D6:E5:37:C7
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:11:bc:2c:70:74:fd:0f:da:e6:cd:19:ab:6f:74:fa:ac:c9:
64:17:01:08:a6:a7:1c:e7:b5:4d:45:51:e2:96:5d:39:b8:01:
a5:82:f5:56:c8:3c:4e:fa:ba:38:7a:ee:6b:41:49:5a:45:72:
e7:11:e2:0e:b8:db:b6:71:a4:2d:9f:10:c2:c0:a2:c4:08:f7:
0d:65:1a:ee:d6:af:82:86:5b:82:12:dc:5d:89:8d:2c:b6:2b:
2f:69:e3:5c:08:9c:a1:ab:85:52:0c:78:48:bb:96:4a:9f:4f:
a4:0d:5f:36:ae:17:d6:03:fa:77:49:9d:f0:3e:69:42:1f:6e:
08:21:be:77:7a:f6:8d:77:c3:c5:f1:bd:a2:e1:d4:94:3f:ab:
dc:26:8c:82:55:e1:47:3a:87:3c:79:b1:7f:b6:6b:df:e3:bd:
0f:f5:f0:9d:8c:b9:f2:29:f1:09:94:55:4a:f7:a5:e6:66:cf:
fd:99:f1:49:fd:1f:f2:28:cb:07:64:63:f0:46:cf:7d:a6:af:
e2:76:82:30:e8:7e:ba:b9:85:bf:4a:3d:90:11:01:6e:28:8a:
25:2e:8f:ee:d7:28:a4:c6:a7:b9:02:28:71:63:40:67:f9:df:
1a:f9:a0:32:b0:79:19:2d:d2:d5:dd:f0:91:15:8e:19:c6:f7:
e1:9c:f9:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ce0oxb8bv7E+tF3TdLCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjkyOTM4ZWE4Y2Y3YTNmNjA5OWNhNmQ2ZTNlNWEyN2I4
OTdjZjAwHhcNMjYwMzI5MTAwMDQ0WhcNMjYwMzMwMTAwMDQ0WjAzMTEwLwYDVQQD
EyhiYTY4YzczZTgzYTg5MmVjZWU4ZjAyYjU5Yzg2YjhkZGQ2ZTUzN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseyKmNcqdgMrpJ+sE95OwEFq215j
xRYFRyavVje68L3QOyj1G1NLYBuR/LdyGuzTHLVqBc9tXOvGofRDx+vJYSIaCdfM
xxJQkwhMgSHr/lyZGmsH5xlfrfWTdJ5dGMRIdUthMT6Tp6u+szTPTDE4UMHS9CmM
PiQjo9pwajkkk/OANnJKmB/Ykil0gzpEn+xfrWk4mymG72fUJIl66vIHSmdO5t6H
pyN7iJgB2fuVWzyBxnrPmAdl7es+WA1HSYaqrY8u3Tw/EZlXuLZbz5izfZUCuUMg
DIhBlCWWSoYuFAdDtU/NtztHRGAOhnSP2++2KUdYC6Xwq/b7OKr9n5+B0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpoxz6DqJLs7o8CtZyGuN3W5TfHMB8GA1UdIwQY
MBaAFO65KTjqjPej9gmcptbj5aJ7iXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgt
MGJmMDI4MmE2ZDY3LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgtMGJmMDI4MmE2ZDY3
LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhG8LHB0
/Q/a5s0Zq290+qzJZBcBCKanHOe1TUVR4pZdObgBpYL1Vsg8Tvq6OHrua0FJWkVy
5xHiDrjbtnGkLZ8QwsCixAj3DWUa7tavgoZbghLcXYmNLLYrL2njXAicoauFUgx4
SLuWSp9PpA1fNq4X1gP6d0md8D5pQh9uCCG+d3r2jXfDxfG9ouHUlD+r3CaMglXh
RzqHPHmxf7Zr3+O9D/XwnYy58inxCZRVSvel5mbP/ZnxSf0f8ijLB2Rj8EbPfaav
4naCMOh+urmFv0o9kBEBbiiKJS6P7tcopManuQIocWNAZ/nfGvmgMrB5GS3S1d3w
kRWOGcb34Zz5iw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:00 2026 by rpki-client