Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier: HJKmA3G2AbVmPqLNn+q7D8XmBKJkJr9Gk8UwFYebJJw=
Subject key identifier: 77:D6:C1:8C:DB:14:B2:27:CE:AA:84:B3:BC:B3:B4:48:6E:7F:9B:C6
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer: /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial: 019D38658165EE5E68B556660A95548B33A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number: 0215
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: nhlZL/xV//JzjLxKMicDKBYXOZun32rcZ01LYzXRGxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:81:65:ee:5e:68:b5:56:66:0a:95:54:8b:33:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda8529160585381f07801656ffc4c551298449f
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=77d6c18cdb14b227ceaa84b3bcb3b4486e7f9bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:f6:01:67:10:8e:fd:99:65:9e:06:e7:08:
cb:4d:50:c7:9e:0d:e2:ea:e1:98:d5:7e:bf:0f:a3:
f1:53:0a:b1:53:1e:ea:c6:76:6c:53:97:80:d2:55:
c6:37:ba:21:4d:22:9f:c8:55:9b:da:a1:ac:73:69:
de:58:40:d5:4c:99:b3:1e:d5:87:90:f1:46:b8:72:
a1:92:aa:5e:fa:83:35:95:24:93:58:3e:f1:49:42:
a2:36:0f:6d:05:9c:22:37:af:90:21:3e:20:63:0a:
bf:b4:0a:33:48:66:ea:e5:c9:92:2b:af:aa:99:9f:
8d:57:3c:35:8a:6c:49:c7:02:e9:e8:0c:92:b8:4b:
b4:b3:b0:c2:98:c3:02:e7:36:c6:22:8f:14:29:42:
2a:70:ee:5f:51:2c:07:95:6f:b6:03:f9:90:99:48:
5d:4a:d5:13:6a:06:26:5a:0a:c4:1e:ca:23:00:90:
48:e9:90:cc:8b:11:eb:ae:43:e1:b2:90:e1:ef:43:
32:e1:5d:7b:36:98:e7:75:79:0c:a4:91:5e:ab:0a:
ca:42:b2:84:74:82:78:70:b6:aa:52:21:1e:91:5b:
c2:e1:02:92:9d:9d:b8:7b:2f:88:d6:50:07:68:ab:
94:c1:35:8b:ee:8e:4e:72:6d:6f:91:27:57:02:48:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:C1:8C:DB:14:B2:27:CE:AA:84:B3:BC:B3:B4:48:6E:7F:9B:C6
X509v3 Authority Key Identifier:
keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:36:e0:0a:0e:7e:16:21:66:7c:89:0b:83:17:0b:b8:2e:e7:
a3:e6:55:9e:c1:5b:63:ef:f2:30:da:34:a7:14:30:7d:13:a1:
eb:38:42:f1:dc:a5:a0:6f:aa:8b:6c:45:fb:ce:3e:dc:37:3b:
3a:01:8d:9f:46:a5:d6:70:15:8e:bc:cb:8c:68:5f:ca:d8:a9:
a8:5e:60:20:6f:f9:96:e4:38:ed:99:ab:a5:f0:46:f1:c6:ea:
77:8e:61:4b:af:af:4f:f0:34:dd:4f:c1:7b:b0:93:38:f0:e1:
81:b3:23:71:5d:ee:69:5c:25:77:d0:bc:0d:f3:09:68:36:ae:
ac:72:7f:e3:8f:88:cd:c4:50:82:90:47:4c:16:ec:5b:2e:52:
51:6d:b4:c2:06:8d:e5:89:3f:14:10:6b:b1:bc:43:46:6f:50:
2a:4b:d7:ec:c7:89:f0:3d:78:73:29:c8:ea:6f:70:29:19:04:
e5:e7:51:0e:e1:bb:5c:80:4f:52:e5:1a:17:09:76:0a:76:04:
6a:61:f9:33:91:4b:de:63:b2:b8:9a:34:88:2f:c6:00:39:1c:
7e:54:89:2c:c8:f2:c9:37:86:12:79:91:ba:70:0c:33:17:01:
3e:db:86:bc:6b:46:05:b7:ed:e1:f5:37:8c:6a:c4:c3:b7:4c:
44:f2:af:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYFl7l5otVZmCpVUizOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYTg1MjkxNjA1ODUzODFmMDc4MDE2NTZmZmM0YzU1MTI5
ODQ0OWYwHhcNMjYwMzI5MDcwMTA5WhcNMjYwMzMwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg3N2Q2YzE4Y2RiMTRiMjI3Y2VhYTg0YjNiY2IzYjQ0ODZlN2Y5YmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3P2AWcQjv2ZZZ4G5wjLTVDHng3i
6uGY1X6/D6PxUwqxUx7qxnZsU5eA0lXGN7ohTSKfyFWb2qGsc2neWEDVTJmzHtWH
kPFGuHKhkqpe+oM1lSSTWD7xSUKiNg9tBZwiN6+QIT4gYwq/tAozSGbq5cmSK6+q
mZ+NVzw1imxJxwLp6AySuEu0s7DCmMMC5zbGIo8UKUIqcO5fUSwHlW+2A/mQmUhd
StUTagYmWgrEHsojAJBI6ZDMixHrrkPhspDh70My4V17NpjndXkMpJFeqwrKQrKE
dIJ4cLaqUiEekVvC4QKSnZ24ey+I1lAHaKuUwTWL7o5Ocm1vkSdXAkiwQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfWwYzbFLInzqqEs7yztEhuf5vGMB8GA1UdIwQY
MBaAFO2oUpFgWFOB8HgBZW/8TFUSmESfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FoU2tXQllVNEh3ZUFGbGJfeE1WUktZUko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zZWQ4OWYtZTY0NS00ZjNjLWJhMmMt
Nzg5ZmQ0YmE4YzIyLzEvN2FoU2tXQllVNEh3ZUFGbGJfeE1WUktZUko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zZWQ4OWYtZTY0NS00ZjNjLWJhMmMtNzg5ZmQ0YmE4YzIy
LzEvN2FoU2tXQllVNEh3ZUFGbGJfeE1WUktZUko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDbgCg5+
FiFmfIkLgxcLuC7no+ZVnsFbY+/yMNo0pxQwfROh6zhC8dyloG+qi2xF+84+3Dc7
OgGNn0al1nAVjrzLjGhfytipqF5gIG/5luQ47ZmrpfBG8cbqd45hS6+vT/A03U/B
e7CTOPDhgbMjcV3uaVwld9C8DfMJaDaurHJ/44+IzcRQgpBHTBbsWy5SUW20wgaN
5Yk/FBBrsbxDRm9QKkvX7MeJ8D14cynI6m9wKRkE5edRDuG7XIBPUuUaFwl2CnYE
amH5M5FL3mOyuJo0iC/GADkcflSJLMjyyTeGEnmRunAMMxcBPtuGvGtGBbft4fU3
jGrEw7dMRPKvTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:38 2026 by rpki-client