Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json)
Hash identifier: CCuYPZyv1/jeOH/uxVhPWbtQBW/Vrre6YVYc2sASuck=
Subject key identifier: C9:CB:77:29:75:53:5B:DC:D0:E1:D6:D5:29:8D:3F:01:0D:9F:49:A7
Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Certificate serial: 019CF72A3DE8AD07D16D16C4AEF6380D6DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
Manifest number: 01D5
Signing time: Mon 16 Mar 2026 15:01:06 +0000
Manifest this update: Mon 16 Mar 2026 15:01:06 +0000
Manifest next update: Tue 17 Mar 2026 15:01:06 +0000
Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: rkY/iMR2XD3LK4trUreyuO3l8reX2lI/GY4HlzGa6u0=)
2: qwQxCub0ZLxdSIPTyyt0hid0rjE.roa (hash: 45em9x7vt23Yzt9V9VCNiHhaJfkIP4nZW7OBnn0WqDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:2a:3d:e8:ad:07:d1:6d:16:c4:ae:f6:38:0d:6d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Validity
Not Before: Mar 16 15:01:06 2026 GMT
Not After : Mar 17 15:01:06 2026 GMT
Subject: CN=c9cb772975535bdcd0e1d6d5298d3f010d9f49a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:46:2a:48:5d:9c:f3:13:a8:e7:66:5c:d1:
97:be:2a:64:2f:90:27:d9:11:ba:f0:45:44:92:a1:
80:55:35:8c:eb:1e:6a:d4:0a:f8:42:2e:30:2e:8e:
89:b1:d8:7a:1b:9b:6a:09:b3:11:b0:03:ee:54:c1:
7e:4b:83:9e:4e:e7:ad:b6:1d:70:b9:f1:74:99:a4:
42:26:c1:18:f3:19:c9:d8:f1:76:c2:fc:2d:b7:8f:
86:08:db:06:8c:05:9f:00:e4:da:fe:f2:6e:50:20:
d2:5a:8d:fc:70:e0:2f:eb:c7:a6:43:a2:32:8d:22:
d6:37:74:5d:c9:82:ef:09:ea:5b:27:1b:24:c9:eb:
b0:6d:3b:af:16:34:da:37:bf:24:27:d5:37:54:27:
b3:81:d2:c0:76:c4:aa:ed:ba:56:64:51:34:76:30:
a4:27:a6:0c:9f:ee:69:d7:25:e9:fa:2b:6f:55:82:
b3:9d:b1:4a:95:85:b8:6e:8d:d7:24:39:0d:c2:91:
58:71:f9:70:89:91:28:87:80:81:e2:7c:a6:3f:ec:
c0:64:68:79:58:ba:9d:5f:a7:d2:8a:4d:fa:9f:e2:
81:05:dc:bd:72:d8:70:ef:bc:23:13:5c:ee:cf:1e:
ed:2a:bc:c0:5e:e2:2e:be:b8:c0:6d:cd:30:e3:01:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:77:29:75:53:5B:DC:D0:E1:D6:D5:29:8D:3F:01:0D:9F:49:A7
X509v3 Authority Key Identifier:
keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:92:ca:8c:f9:81:7b:5f:2f:16:da:49:f1:33:0e:7e:90:9a:
ef:ee:b4:9d:05:50:49:7b:21:73:9a:14:48:ca:fc:c2:5e:35:
a9:37:4d:11:7b:96:4b:19:74:16:94:7b:6d:6f:0e:27:bd:00:
ab:6a:cc:0e:03:68:59:7c:45:57:dc:78:6e:a3:59:f8:22:22:
83:90:65:ef:21:73:2d:5e:15:da:f8:db:60:d2:1a:d7:57:92:
de:d3:e8:25:f6:ee:7f:59:3f:b5:85:2d:28:0b:9a:42:56:4b:
e7:36:59:0f:c5:32:f5:6d:37:68:66:a9:aa:50:94:d1:74:45:
17:f6:33:15:de:f2:bf:46:1b:60:f3:68:ae:47:57:2e:3b:3c:
af:c8:fc:2e:6c:30:c6:d8:11:20:3a:6a:e2:64:4c:72:40:4b:
c4:fb:d3:70:bb:fe:14:43:9c:51:ab:eb:b5:e4:68:09:2f:b5:
a3:51:dd:39:c3:d7:0a:c3:64:5f:8f:28:59:fc:1d:f3:17:58:
b7:9a:c4:1d:3d:ab:fb:a6:ef:33:5d:3c:95:8e:70:8f:34:5d:
be:f0:02:23:69:2b:45:75:92:6c:39:a9:f8:70:ad:4e:c3:a8:
5b:68:bc:b7:5b:3e:a1:81:50:25:ec:43:1f:91:4d:04:5e:f8:
91:21:2c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz3Kj3orQfRbRbErvY4DW2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjM0MjgzNzNkY2U4YTVmOTdmNDVlZmM2YzI4YjlmYmU3
Y2Q1NGQwHhcNMjYwMzE2MTUwMTA2WhcNMjYwMzE3MTUwMTA2WjAzMTEwLwYDVQQD
EyhjOWNiNzcyOTc1NTM1YmRjZDBlMWQ2ZDUyOThkM2YwMTBkOWY0OWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN5GKkhdnPMTqOdmXNGXvipkL5An
2RG68EVEkqGAVTWM6x5q1Ar4Qi4wLo6Jsdh6G5tqCbMRsAPuVMF+S4OeTuetth1w
ufF0maRCJsEY8xnJ2PF2wvwtt4+GCNsGjAWfAOTa/vJuUCDSWo38cOAv68emQ6Iy
jSLWN3RdyYLvCepbJxskyeuwbTuvFjTaN78kJ9U3VCezgdLAdsSq7bpWZFE0djCk
J6YMn+5p1yXp+itvVYKznbFKlYW4bo3XJDkNwpFYcflwiZEoh4CB4nymP+zAZGh5
WLqdX6fSik36n+KBBdy9cthw77wjE1zuzx7tKrzAXuIuvrjAbc0w4wED6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnLdyl1U1vc0OHW1SmNPwENn0mnMB8GA1UdIwQY
MBaAFO4jQoNz3Oil+X9F78bCi5++fNVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUt
M2Y3N2ZkNDI3OTlhLzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZmE4NTQtMDU5Ny00YzBkLWIwYjUtM2Y3N2ZkNDI3OTlh
LzEvN2lOQ2czUGM2S1g1ZjBYdnhzS0xuNzU4MVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJLKjPmB
e18vFtpJ8TMOfpCa7+60nQVQSXshc5oUSMr8wl41qTdNEXuWSxl0FpR7bW8OJ70A
q2rMDgNoWXxFV9x4bqNZ+CIig5Bl7yFzLV4V2vjbYNIa11eS3tPoJfbuf1k/tYUt
KAuaQlZL5zZZD8Uy9W03aGapqlCU0XRFF/YzFd7yv0YbYPNorkdXLjs8r8j8Lmww
xtgRIDpq4mRMckBLxPvTcLv+FEOcUavrteRoCS+1o1HdOcPXCsNkX48oWfwd8xdY
t5rEHT2r+6bvM108lY5wjzRdvvACI2krRXWSbDmp+HCtTsOoW2i8t1s+oYFQJexD
H5FNBF74kSEs7Q==
-----END CERTIFICATE-----
Generated at Mon Mar 16 20:35:06 2026 by rpki-client