Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: h1xgSm/1G0EH7I6hN/k1DoGJV+ur5j4TSVhvqri5DdE=
Subject key identifier: A1:96:26:DF:C0:6E:6D:52:A5:BC:18:92:49:7A:9A:19:46:C2:1A:4B
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019D3865EE85FBCD49D3B25F5129A7953B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0C13
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: N2o7J3WODKzsZRl9MBNMNxjd0Rp/EXAsaARaB/6o5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ee:85:fb:cd:49:d3:b2:5f:51:29:a7:95:3b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=a19626dfc06e6d52a5bc1892497a9a1946c21a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:2b:30:78:2e:b6:d0:45:ba:8b:4d:79:85:
05:1b:ce:28:f4:b9:2d:3a:46:4d:44:e6:26:1a:cd:
a3:b7:09:95:07:61:4c:85:f6:93:b5:aa:fe:30:5e:
a9:82:78:50:3e:31:a3:aa:05:ec:3d:3d:9f:ef:cd:
a1:f7:1b:2b:ad:85:b8:38:a5:d5:f9:fc:5d:13:e4:
44:fa:ba:5d:a0:22:cb:87:a4:de:70:33:4c:27:6d:
bd:98:50:7a:34:34:e6:50:66:9c:f5:39:55:af:7d:
c8:67:9c:7e:03:cf:8b:cd:46:32:8b:9d:5c:4c:50:
5a:6c:57:d5:a9:16:24:02:08:3f:ac:9f:d6:86:d6:
50:73:7a:1a:c5:3e:e5:0f:3e:cc:a2:84:02:ae:2a:
73:8d:d5:f1:99:1c:bc:c9:a5:bd:be:4e:cf:78:77:
aa:32:ba:58:ee:d6:9d:c9:fd:1d:91:7f:26:f6:6e:
4c:db:5b:00:45:3e:0e:69:b4:ad:80:fd:f6:47:04:
49:9e:68:1e:3f:fd:94:2e:b5:b1:13:21:fa:14:c6:
97:ee:a3:58:d5:01:b9:93:70:3f:26:6a:b2:ac:56:
9d:a8:25:e6:50:31:71:6d:91:30:07:ed:06:eb:1a:
67:b3:e9:bc:e3:9c:f3:72:5b:c8:8a:61:d5:d5:a6:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:96:26:DF:C0:6E:6D:52:A5:BC:18:92:49:7A:9A:19:46:C2:1A:4B
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:97:67:cd:ff:f2:c3:de:45:a0:30:9d:68:76:b0:7f:c5:f7:
cf:b7:83:40:35:04:27:c0:19:a7:4c:23:8c:bd:39:82:4d:c7:
25:76:85:b0:9f:ef:fd:d4:ff:37:cb:ee:67:6e:f2:70:c2:b5:
59:b2:4d:b2:dc:d5:ef:a0:99:42:ec:bf:32:2b:a9:84:1c:40:
fc:36:7a:31:11:f6:b2:ee:82:06:0b:4e:39:9e:66:a2:77:91:
21:4b:92:00:dc:63:97:59:53:e3:4b:ec:12:5f:b6:83:3c:28:
d0:0f:51:0b:7f:da:1c:fa:75:2b:f7:e4:3e:6c:a3:e5:d4:fd:
b6:96:b2:44:80:be:bc:1e:b9:11:df:58:cc:27:9c:95:88:80:
27:c5:0c:1f:de:fe:19:83:0c:75:cb:ab:5a:5e:9c:b9:53:93:
3b:29:6f:ab:5e:a4:b2:16:9a:74:5d:e6:3d:be:5a:dc:de:65:
ba:65:81:d9:48:2f:23:87:76:74:2c:1c:1f:f6:45:dc:e0:71:
2f:12:3a:f2:cd:9a:43:7a:1b:34:fd:d0:54:47:b0:8a:06:82:
1d:8b:6d:d8:13:5d:43:d7:b2:b9:c8:1e:8f:6e:fc:07:d1:cf:
be:7f:d0:04:b1:c6:f5:38:f1:56:ae:7f:a0:27:bc:8b:ea:de:
ff:eb:56:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Ze6F+81J07JfUSmnlTs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOThkYzI1YWJkN2FiNjNlMzViNjI4ZWFhYzJhNTRkOTQ5
YTlmNDYwHhcNMjYwMzI5MDcwMTM3WhcNMjYwMzMwMDcwMTM3WjAzMTEwLwYDVQQD
EyhhMTk2MjZkZmMwNmU2ZDUyYTViYzE4OTI0OTdhOWExOTQ2YzIxYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rkrMHguttBFuotNeYUFG84o9Lkt
OkZNROYmGs2jtwmVB2FMhfaTtar+MF6pgnhQPjGjqgXsPT2f782h9xsrrYW4OKXV
+fxdE+RE+rpdoCLLh6TecDNMJ229mFB6NDTmUGac9TlVr33IZ5x+A8+LzUYyi51c
TFBabFfVqRYkAgg/rJ/WhtZQc3oaxT7lDz7MooQCripzjdXxmRy8yaW9vk7PeHeq
MrpY7tadyf0dkX8m9m5M21sART4OabStgP32RwRJnmgeP/2ULrWxEyH6FMaX7qNY
1QG5k3A/JmqyrFadqCXmUDFxbZEwB+0G6xpns+m845zzclvIimHV1aa2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGWJt/Abm1SpbwYkkl6mhlGwhpLMB8GA1UdIwQY
MBaAFOyY3CWr16tj41tijqrCpU2Ump9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEt
ZDViM2Q3ZmNjZmU0LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mMWY2MmQtMDg5ZC00YWVhLTkyMjEtZDViM2Q3ZmNjZmU0
LzEvN0pqY0phdlhxMlBqVzJLT3FzS2xUWlNhbjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5dnzf/y
w95FoDCdaHawf8X3z7eDQDUEJ8AZp0wjjL05gk3HJXaFsJ/v/dT/N8vuZ27ycMK1
WbJNstzV76CZQuy/MiuphBxA/DZ6MRH2su6CBgtOOZ5moneRIUuSANxjl1lT40vs
El+2gzwo0A9RC3/aHPp1K/fkPmyj5dT9tpayRIC+vB65Ed9YzCeclYiAJ8UMH97+
GYMMdcurWl6cuVOTOylvq16kshaadF3mPb5a3N5lumWB2UgvI4d2dCwcH/ZF3OBx
LxI68s2aQ3obNP3QVEewigaCHYtt2BNdQ9eyucgej278B9HPvn/QBLHG9TjxVq5/
oCe8i+re/+tWQw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:20 2026 by rpki-client