Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier: XQugiZWhj2EbYkt+iDYxz36wPGNNUa3EdO+L4qPQfwE=
Subject key identifier: 1E:A4:3A:98:69:E2:C9:89:82:A8:A0:6D:A4:38:A7:9D:C7:2B:6D:A2
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial: 019D38D30194B4AAA059F9FEF6195FF0F5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: b619T7aMmHR/E4F9bynurzOKLlq/cxWEsIrU7XAN+eg=)
2: n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa (hash: nnAzk/5RgBrrO3CmKUlZtLCI4l4l5DYZR2tkopYIdL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:01:94:b4:aa:a0:59:f9:fe:f6:19:5f:f0:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=1ea43a9869e2c98982a8a06da438a79dc72b6da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:99:7e:0b:af:53:8f:c3:47:8f:e9:ae:2f:
aa:c5:70:84:45:3b:d3:c2:ff:c6:0d:f5:34:c2:6f:
7f:6a:cc:d3:75:e0:34:a9:e9:a3:f4:c0:51:28:de:
a6:37:c0:80:08:98:63:67:6e:66:4c:bb:29:ea:90:
a1:1f:67:5a:cd:f6:61:dc:34:b9:9e:46:4c:e8:3c:
b9:38:68:8f:04:30:b7:aa:f4:ec:cc:ec:7a:d4:a3:
f7:05:98:2b:a4:b4:b1:97:0a:87:46:e4:45:a7:42:
cb:62:00:68:02:cb:12:aa:83:6b:22:67:f6:d5:1c:
e5:37:9e:a9:32:1c:d1:1c:09:53:68:bb:24:80:83:
9c:31:dd:6f:31:90:6e:81:48:dd:ac:6a:c7:2d:c3:
29:67:e5:62:a8:bc:32:73:5f:76:14:11:29:7c:18:
ba:e5:e9:88:5f:39:c5:00:b8:69:a1:90:28:59:c9:
3c:f5:14:53:6d:8d:a0:9f:3f:31:6d:78:9e:9c:f0:
12:25:37:e7:75:b3:07:87:2f:cd:0e:3c:36:8b:55:
d1:26:33:03:98:05:55:cc:57:72:68:dd:5c:b1:72:
0c:4f:12:83:a8:fe:ce:18:62:1f:a3:22:d6:af:c5:
87:45:24:2d:e6:1a:b0:45:27:fc:48:57:83:66:42:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:3A:98:69:E2:C9:89:82:A8:A0:6D:A4:38:A7:9D:C7:2B:6D:A2
X509v3 Authority Key Identifier:
keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:cf:3b:c4:2a:57:8b:0d:d9:f8:b9:a3:cc:e2:66:a5:b6:
1f:71:c0:90:d9:91:cb:ee:85:e1:c7:7a:5f:2c:32:a6:d8:c4:
de:bf:66:51:1d:d6:12:37:20:93:22:79:c0:67:a8:74:ec:a1:
d4:ae:d2:8f:97:48:81:06:bf:9c:81:8d:32:ce:38:9d:f3:1c:
31:29:69:53:10:9a:13:96:4c:a7:e3:c4:1b:98:78:6e:e6:f8:
72:e6:75:8c:ed:11:2c:72:7b:47:9f:fb:45:33:74:ec:02:9e:
93:59:b3:fe:78:5f:6c:a8:0c:9d:c6:c6:24:92:94:bd:41:c2:
74:b4:c5:04:0b:ec:3e:28:e4:3d:7f:76:84:ae:e3:4e:2d:4e:
95:94:af:07:a9:19:90:22:a6:0d:ae:aa:31:11:bc:4a:c5:44:
b8:ac:91:c0:c1:3d:1f:2e:35:7f:e0:eb:63:3f:65:80:ff:7f:
ae:ab:ac:20:4c:71:36:9c:3a:e9:c1:86:8d:d7:26:87:54:0f:
e2:7a:40:2b:89:8e:33:05:bf:ca:db:29:76:63:d7:e0:8e:c7:
3a:12:09:71:4c:02:1f:cb:f4:79:2d:b2:63:8c:1d:56:5d:91:
c8:c6:29:90:39:96:13:db:62:aa:4a:81:17:fe:62:89:17:e9:
a0:52:5b:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wGUtKqgWfn+9hlf8PXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDc1NWM1MTI3NWFiMjM0MmQ4ZjZmY2E1YjU2NjA2YWI5
YzNiNGYwHhcNMjYwMzI5MDkwMDQ1WhcNMjYwMzMwMDkwMDQ1WjAzMTEwLwYDVQQD
EygxZWE0M2E5ODY5ZTJjOTg5ODJhOGEwNmRhNDM4YTc5ZGM3MmI2ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xqZfguvU4/DR4/pri+qxXCERTvT
wv/GDfU0wm9/aszTdeA0qemj9MBRKN6mN8CACJhjZ25mTLsp6pChH2dazfZh3DS5
nkZM6Dy5OGiPBDC3qvTszOx61KP3BZgrpLSxlwqHRuRFp0LLYgBoAssSqoNrImf2
1RzlN56pMhzRHAlTaLskgIOcMd1vMZBugUjdrGrHLcMpZ+ViqLwyc192FBEpfBi6
5emIXznFALhpoZAoWck89RRTbY2gnz8xbXienPASJTfndbMHhy/NDjw2i1XRJjMD
mAVVzFdyaN1csXIMTxKDqP7OGGIfoyLWr8WHRSQt5hqwRSf8SFeDZkJMFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6kOphp4smJgqigbaQ4p53HK22iMB8GA1UdIwQY
MBaAFO7XVcUSdasjQtj2/KW1ZgarnDtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2Ut
ZWM5YjY5YjQ2Y2MwLzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85YTY4MzQtZTc2OC00MDliLWI4Y2UtZWM5YjY5YjQ2Y2Mw
LzEvN3RkVnhSSjFxeU5DMlBiOHBiVm1CcXVjTzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH/PO8Qq
V4sN2fi5o8ziZqW2H3HAkNmRy+6F4cd6XywyptjE3r9mUR3WEjcgkyJ5wGeodOyh
1K7Sj5dIgQa/nIGNMs44nfMcMSlpUxCaE5ZMp+PEG5h4bub4cuZ1jO0RLHJ7R5/7
RTN07AKek1mz/nhfbKgMncbGJJKUvUHCdLTFBAvsPijkPX92hK7jTi1OlZSvB6kZ
kCKmDa6qMRG8SsVEuKyRwME9Hy41f+DrYz9lgP9/rqusIExxNpw66cGGjdcmh1QP
4npAK4mOMwW/ytspdmPX4I7HOhIJcUwCH8v0eS2yY4wdVl2RyMYpkDmWE9tiqkqB
F/5iiRfpoFJbTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:59 2026 by rpki-client