Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: PxoPUHizyRJT4EGp3CSI+eXjoiVqOEgzXDH5cVXbzVw=
Subject key identifier: D1:A8:11:37:D9:EB:73:AC:DF:CA:9C:A2:7B:53:DE:A2:26:BE:12:2B
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 019DD08768368B3439C20861FE3EB806BCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 079B
Signing time: Mon 27 Apr 2026 20:00:28 +0000
Manifest this update: Mon 27 Apr 2026 20:00:28 +0000
Manifest next update: Tue 28 Apr 2026 20:00:28 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: wY21AMVoXM42RykE3gNwEBnjVU+RaT2aCG+spZUTIqQ=)
2: wx6fgP8IcpV9Wa7rD9wqYgF6OOw.roa (hash: 7jyVllqQZoltPjiOZEmXnLkJG64ntD8hgU4CrmVx4p4=)
3: xZpVsdR8byrDOhtkihXsBj7ahyw.roa (hash: gEVFGzQUdZIHZpLD7UNkmD2vDPUL0zRMrJ6Jin9iB4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:68:36:8b:34:39:c2:08:61:fe:3e:b8:06:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Apr 27 20:00:28 2026 GMT
Not After : Apr 28 20:00:28 2026 GMT
Subject: CN=d1a81137d9eb73acdfca9ca27b53dea226be122b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:9d:c6:b3:b1:77:fe:d5:16:90:e6:f4:0d:
75:96:a6:75:5d:50:a2:c3:f1:52:2e:f9:de:d3:a0:
44:e9:be:a2:a3:5a:79:24:8f:87:56:fb:4e:99:24:
5c:58:7e:83:a3:db:c4:82:c2:13:17:da:90:67:64:
67:e6:08:1f:5d:dd:46:51:a6:64:17:c5:b2:c8:d9:
30:55:1c:ef:6e:6a:de:dc:a8:62:d1:b0:da:5d:fa:
45:76:51:9d:42:e0:93:42:bc:f6:b4:d2:65:f2:d2:
ea:ab:a4:f5:6a:a9:22:77:7c:35:e4:c7:55:32:35:
df:4a:c8:8c:f5:cc:71:d6:50:74:29:ab:36:3c:f0:
f9:7b:aa:d6:65:3f:0f:e9:ec:b4:d0:bc:d0:18:ac:
fe:a3:4e:4b:f9:05:68:f9:1f:0e:7b:e1:5c:81:0d:
0a:18:c9:db:1a:5a:2d:d6:66:44:0c:8e:60:9b:32:
0e:c7:8b:af:f1:1a:1d:64:bd:19:86:83:b9:d4:79:
98:7f:08:fc:4a:05:16:7a:b7:f6:e1:c0:23:ca:60:
0e:2b:bb:dd:b4:59:69:08:78:77:fa:37:6a:1e:b5:
ac:e3:5f:47:e6:aa:38:73:73:62:f2:f9:9e:34:38:
93:69:ed:b7:22:5c:1f:5c:a9:92:c8:9c:76:88:27:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A8:11:37:D9:EB:73:AC:DF:CA:9C:A2:7B:53:DE:A2:26:BE:12:2B
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:84:3b:b3:2a:fe:0d:46:cf:f9:54:83:f0:b2:50:41:3f:cc:
a5:2a:cd:15:05:ab:b9:80:03:fb:5c:04:70:d9:3a:92:a7:07:
ed:bf:02:d3:cf:f0:78:f1:aa:c2:7b:85:f1:4a:82:35:18:7c:
c7:c8:7e:1a:59:26:94:b4:96:1d:e7:7d:6b:a9:35:53:8a:33:
31:89:03:47:e9:52:e7:1e:d7:7d:f6:c9:d5:3c:17:07:68:3c:
3a:83:15:af:84:81:37:8d:24:33:72:25:33:f4:b5:82:86:c1:
0c:bd:4d:00:36:ad:6e:ce:8f:bc:28:6c:d9:ef:95:d5:01:a1:
59:3f:38:e3:cc:7c:82:05:f4:6c:13:6f:e7:b2:8e:53:26:4b:
11:54:7d:dd:64:00:95:07:fd:78:92:c4:08:ec:1b:70:ec:ff:
40:88:71:83:4f:e7:6e:ea:2c:7d:6d:60:c7:6f:f1:6e:59:03:
33:8b:c8:35:8c:57:b6:39:0b:d2:54:1d:44:18:e2:f8:ba:47:
60:02:99:90:89:d2:f1:b3:fc:55:e7:f1:4a:bf:c2:d0:67:74:
48:47:9e:cc:22:5f:74:d3:8c:91:d6:f8:fd:14:ac:56:a4:8c:
a6:cd:07:b3:cb:ad:d6:d1:d7:1b:d9:ce:5e:10:aa:44:39:3f:
31:1f:b6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Qh2g2izQ5wghh/j64Bry4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjYwNDI3MjAwMDI4WhcNMjYwNDI4MjAwMDI4WjAzMTEwLwYDVQQD
EyhkMWE4MTEzN2Q5ZWI3M2FjZGZjYTljYTI3YjUzZGVhMjI2YmUxMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveedxrOxd/7VFpDm9A11lqZ1XVCi
w/FSLvne06BE6b6io1p5JI+HVvtOmSRcWH6Do9vEgsITF9qQZ2Rn5ggfXd1GUaZk
F8WyyNkwVRzvbmre3Khi0bDaXfpFdlGdQuCTQrz2tNJl8tLqq6T1aqkid3w15MdV
MjXfSsiM9cxx1lB0Kas2PPD5e6rWZT8P6ey00LzQGKz+o05L+QVo+R8Oe+FcgQ0K
GMnbGlot1mZEDI5gmzIOx4uv8RodZL0ZhoO51HmYfwj8SgUWerf24cAjymAOK7vd
tFlpCHh3+jdqHrWs419H5qo4c3Ni8vmeNDiTae23IlwfXKmSyJx2iCcjXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGoETfZ63Os38qcontT3qImvhIrMB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoQ7syr+
DUbP+VSD8LJQQT/MpSrNFQWruYAD+1wEcNk6kqcH7b8C08/wePGqwnuF8UqCNRh8
x8h+GlkmlLSWHed9a6k1U4ozMYkDR+lS5x7XffbJ1TwXB2g8OoMVr4SBN40kM3Il
M/S1gobBDL1NADatbs6PvChs2e+V1QGhWT8448x8ggX0bBNv57KOUyZLEVR93WQA
lQf9eJLECOwbcOz/QIhxg0/nbuosfW1gx2/xblkDM4vINYxXtjkL0lQdRBji+LpH
YAKZkInS8bP8VefxSr/C0Gd0SEeezCJfdNOMkdb4/RSsVqSMps0Hs8ut1tHXG9nO
XhCqRDk/MR+2MQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 06:07:09 2026 by rpki-client