Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: 58hnFxlZIcTlL56dnR7Z/Y01WcLbbCdADkHF5mNuyX0=
Subject key identifier: 90:5D:D0:40:FB:C7:5E:AE:D2:06:DA:59:27:5E:64:72:20:9C:EA:E9
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019D382E3F17F4A969599A94EF327AD0B2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 046C
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: 200hGiiiZsPIFyhRS3fgiw7TDL0.roa (hash: RXdmnfglVdphnX74nph9B1kezoQQBk9ZlsO2RYNXwvo=)
2: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: VbGPeSiW8todM4QrhLBMEOWzu4Yv+5rwgpCXV3aov2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3f:17:f4:a9:69:59:9a:94:ef:32:7a:d0:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=905dd040fbc75eaed206da59275e6472209ceae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:fc:85:c9:e8:c0:3e:3e:ac:9b:64:de:98:
5e:04:53:61:ea:e5:32:c1:05:67:18:0d:34:2a:12:
9e:ba:3d:81:fe:2e:56:73:96:df:01:56:0b:54:97:
1c:f7:9f:34:e9:af:16:91:db:33:8e:6d:f5:c6:9a:
eb:95:4b:06:02:a9:66:1f:d4:aa:cf:6c:3e:db:d4:
65:e6:64:be:a5:6c:c2:98:c4:75:79:41:ed:15:04:
5d:c2:88:e9:27:ee:f2:f8:6f:0c:f9:81:d7:51:c1:
47:44:98:5c:6e:42:05:de:dc:15:14:33:85:d3:d9:
99:76:8f:b3:c1:ac:6f:2d:15:4e:04:b2:39:8f:2a:
e7:08:6d:2d:35:e3:26:6a:23:32:5a:71:8e:00:7d:
82:21:13:60:71:35:93:ca:3b:0d:18:52:56:5c:6b:
21:99:35:6b:02:84:d9:d7:71:61:1e:69:94:29:13:
fc:6b:43:77:80:00:e7:59:66:95:7d:36:7c:2e:be:
e4:7b:16:17:68:05:da:07:17:33:90:70:0f:6f:bd:
a1:8f:1b:46:57:32:37:b0:46:56:ad:c8:63:41:5f:
f5:ec:b4:60:62:62:df:e6:54:56:20:09:14:a0:3d:
12:19:6f:c5:fd:d7:a2:00:e2:55:0d:61:92:97:0e:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:D0:40:FB:C7:5E:AE:D2:06:DA:59:27:5E:64:72:20:9C:EA:E9
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:34:ea:25:a5:81:2c:5f:da:22:08:8d:63:12:8b:17:a7:3a:
1c:7b:2c:20:cf:a3:4a:5e:78:e6:a7:ba:25:4e:41:a0:c9:7f:
88:47:c1:f2:99:c1:92:18:1d:da:c5:d1:c2:0e:82:7f:53:07:
09:07:0a:b5:c1:cf:bf:5a:4b:02:84:44:80:0f:8e:87:41:20:
10:95:92:d7:c8:9f:7b:6b:ca:ca:fb:2e:1c:60:69:a7:8b:54:
ed:b0:39:55:25:ea:29:f3:83:0e:57:98:b9:9c:37:a1:0d:c3:
ba:fd:99:22:18:dc:5f:af:b7:74:39:3c:c5:ef:6d:0c:28:f3:
fa:fc:d5:84:6d:fe:1c:85:86:61:55:82:fd:88:67:6b:1b:2f:
19:7c:66:4b:ac:bf:a0:41:b7:a3:66:c7:6d:42:73:98:3c:de:
e1:c8:39:93:c1:f1:dd:e1:7a:03:f0:f1:24:58:c2:3a:3a:e3:
a0:87:20:30:d9:c5:7d:6c:41:0c:88:2f:57:35:d7:0e:4e:43:
c9:3a:ab:99:cf:8a:b4:0f:47:9b:a8:da:82:68:a1:ae:7d:27:
81:13:88:2f:af:5a:f1:ef:64:b3:07:85:63:fa:75:b3:7d:16:
73:5e:58:fd:46:ca:16:06:4d:12:aa:88:48:09:1e:be:c0:31:
7b:ff:9c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lj8X9KlpWZqU7zJ60LL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1
NTg2Y2EwHhcNMjYwMzI5MDYwMDQ3WhcNMjYwMzMwMDYwMDQ3WjAzMTEwLwYDVQQD
Eyg5MDVkZDA0MGZiYzc1ZWFlZDIwNmRhNTkyNzVlNjQ3MjIwOWNlYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0X8hcnowD4+rJtk3pheBFNh6uUy
wQVnGA00KhKeuj2B/i5Wc5bfAVYLVJcc95806a8Wkdszjm31xprrlUsGAqlmH9Sq
z2w+29Rl5mS+pWzCmMR1eUHtFQRdwojpJ+7y+G8M+YHXUcFHRJhcbkIF3twVFDOF
09mZdo+zwaxvLRVOBLI5jyrnCG0tNeMmaiMyWnGOAH2CIRNgcTWTyjsNGFJWXGsh
mTVrAoTZ13FhHmmUKRP8a0N3gADnWWaVfTZ8Lr7kexYXaAXaBxczkHAPb72hjxtG
VzI3sEZWrchjQV/17LRgYmLf5lRWIAkUoD0SGW/F/deiAOJVDWGSlw7stQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBd0ED7x16u0gbaWSdeZHIgnOrpMB8GA1UdIwQY
MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct
NTZjMzYyNGI4YjFiLzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi
LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjTqJaWB
LF/aIgiNYxKLF6c6HHssIM+jSl545qe6JU5BoMl/iEfB8pnBkhgd2sXRwg6Cf1MH
CQcKtcHPv1pLAoREgA+Oh0EgEJWS18ife2vKyvsuHGBpp4tU7bA5VSXqKfODDleY
uZw3oQ3Duv2ZIhjcX6+3dDk8xe9tDCjz+vzVhG3+HIWGYVWC/YhnaxsvGXxmS6y/
oEG3o2bHbUJzmDze4cg5k8Hx3eF6A/DxJFjCOjrjoIcgMNnFfWxBDIgvVzXXDk5D
yTqrmc+KtA9Hm6jagmihrn0ngROIL69a8e9ksweFY/p1s30Wc15Y/UbKFgZNEqqI
SAkevsAxe/+cFg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client