Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
File: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft (raw, json)
Hash identifier: OxQVfVY43J6RGEfv4HH1KtOiY/GIE/6JLzBPa/SVY8A=
Subject key identifier: 7B:64:BD:3C:15:51:E1:83:4B:06:D4:0A:A8:C3:42:9C:5E:F9:D2:CF
Authority key identifier: EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
Certificate issuer: /CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Certificate serial: 019D3865E8349DD99D6C9CBC60FEF5A61471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
Manifest number: 0BED
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: 7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl (hash: Dn3RDRVrG61t+lKXrBhUOHZwr5vQ/7b04mjOIhQ4zHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:34:9d:d9:9d:6c:9c:bc:60:fe:f5:a6:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c6d6284f1165d09ebedb44de6175fe033b774
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=7b64bd3c1551e1834b06d40aa8c3429c5ef9d2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:65:ea:f1:05:e0:ff:91:f7:33:6e:58:8b:
b9:c0:2c:54:21:65:ac:3e:59:ef:84:ce:c0:b6:bf:
58:64:11:7a:20:4a:75:72:e9:6d:bb:6b:35:45:db:
a9:23:1b:1a:6e:5a:48:a5:e4:b7:4d:69:f8:ab:16:
9a:cb:05:bd:f1:ee:ad:e5:58:8e:4d:96:1d:d0:81:
5d:c7:f4:44:95:87:7b:f6:df:68:92:0c:db:71:6b:
5a:c7:1d:16:48:9c:ca:68:ab:13:05:1e:f8:ca:55:
2a:be:01:c7:d1:8a:11:c9:14:c2:0e:ec:04:01:09:
20:98:d3:2d:7d:31:64:c8:89:e4:4b:45:d5:1f:9a:
46:a3:64:0d:90:43:a9:75:48:3c:a8:87:60:ae:9b:
3e:e6:c3:9d:6f:f8:2a:74:41:91:21:47:3a:1d:48:
35:83:33:70:3c:b7:32:75:0d:9f:74:78:d7:e6:40:
51:22:aa:a5:58:c0:b4:72:7e:40:21:ab:52:3d:3c:
8d:38:be:73:00:76:01:45:74:f3:95:20:74:98:4a:
11:91:d5:21:65:8c:01:31:56:02:ef:03:db:d9:30:
11:8e:f0:d6:47:a9:9e:d9:8b:50:66:58:be:e1:40:
b2:bf:07:55:63:a3:f9:b1:ab:fc:3d:a4:0a:9c:7f:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:BD:3C:15:51:E1:83:4B:06:D4:0A:A8:C3:42:9C:5E:F9:D2:CF
X509v3 Authority Key Identifier:
keyid:EE:2C:6D:62:84:F1:16:5D:09:EB:ED:B4:4D:E6:17:5F:E0:33:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixtYoTxFl0J6-20TeYXX-Azt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6ca8ec-6916-4384-9cf5-c4f53e17ddb0/1/7ixtYoTxFl0J6-20TeYXX-Azt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e5:4c:f0:be:ea:29:8e:b1:be:6c:0c:26:17:a7:48:49:9e:
61:da:26:70:27:28:90:5c:2d:b6:49:0a:64:94:d6:a3:b3:96:
a1:e8:17:7b:bc:79:46:20:52:29:f1:cb:8b:13:56:25:ae:7b:
b5:22:80:1b:3a:99:b7:63:0f:52:a9:fc:30:de:a8:94:e2:2c:
22:52:3b:ee:6b:bc:9d:90:12:5a:cc:f4:2a:ae:a9:b8:ac:87:
4b:74:a9:59:1a:01:19:af:ae:2b:7f:76:ff:c4:b9:2d:72:a5:
77:51:54:6e:0f:26:e6:fc:10:f8:44:5f:8f:83:2d:36:a5:bb:
ae:fe:6f:ab:1e:c6:7d:dc:22:c3:31:13:98:80:83:be:b0:67:
93:dc:43:eb:85:a4:7c:d9:49:04:d9:44:eb:e5:a4:7c:b3:78:
47:50:b2:50:71:66:1c:b7:88:d3:1e:73:09:46:62:6b:f6:62:
85:85:f2:1b:c3:f3:88:69:09:bd:15:a8:98:2c:9b:93:c0:e5:
7b:19:1d:a0:31:93:6d:71:8c:63:5d:b3:e9:53:95:bf:6e:cd:
e6:61:b9:72:dc:a1:6e:ce:d5:32:88:d1:7d:f4:41:12:01:20:
9c:49:5c:45:ff:8d:77:4d:61:62:cb:8d:ba:37:60:b5:ca:17:
ae:09:d5:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zeg0ndmdbJy8YP71phRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM2ZDYyODRmMTE2NWQwOWViZWRiNDRkZTYxNzVmZTAz
M2I3NzQwHhcNMjYwMzI5MDcwMTM1WhcNMjYwMzMwMDcwMTM1WjAzMTEwLwYDVQQD
Eyg3YjY0YmQzYzE1NTFlMTgzNGIwNmQ0MGFhOGMzNDI5YzVlZjlkMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYNl6vEF4P+R9zNuWIu5wCxUIWWs
PlnvhM7Atr9YZBF6IEp1cultu2s1RdupIxsablpIpeS3TWn4qxaaywW98e6t5ViO
TZYd0IFdx/RElYd79t9okgzbcWtaxx0WSJzKaKsTBR74ylUqvgHH0YoRyRTCDuwE
AQkgmNMtfTFkyInkS0XVH5pGo2QNkEOpdUg8qIdgrps+5sOdb/gqdEGRIUc6HUg1
gzNwPLcydQ2fdHjX5kBRIqqlWMC0cn5AIatSPTyNOL5zAHYBRXTzlSB0mEoRkdUh
ZYwBMVYC7wPb2TARjvDWR6me2YtQZli+4UCyvwdVY6P5sav8PaQKnH8TTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtkvTwVUeGDSwbUCqjDQpxe+dLPMB8GA1UdIwQY
MBaAFO4sbWKE8RZdCevttE3mF1/gM7d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUt
YzRmNTNlMTdkZGIwLzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Y2E4ZWMtNjkxNi00Mzg0LTljZjUtYzRmNTNlMTdkZGIw
LzEvN2l4dFlvVHhGbDBKNi0yMFRlWVhYLUF6dDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuVM8L7q
KY6xvmwMJhenSEmeYdomcCcokFwttkkKZJTWo7OWoegXe7x5RiBSKfHLixNWJa57
tSKAGzqZt2MPUqn8MN6olOIsIlI77mu8nZASWsz0Kq6puKyHS3SpWRoBGa+uK392
/8S5LXKld1FUbg8m5vwQ+ERfj4MtNqW7rv5vqx7GfdwiwzETmICDvrBnk9xD64Wk
fNlJBNlE6+WkfLN4R1CyUHFmHLeI0x5zCUZia/ZihYXyG8PziGkJvRWomCybk8Dl
exkdoDGTbXGMY12z6VOVv27N5mG5ctyhbs7VMojRffRBEgEgnElcRf+Nd01hYsuN
ujdgtcoXrgnVzA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:47 2026 by rpki-client