Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: 3tKfjIG1qhRyJfGmxpDK/cJ08cPzA7IrS1S5h9wUo10=
Subject key identifier: CC:72:8B:62:11:5B:DC:A9:4C:57:DE:3B:0D:09:B4:0E:A7:29:0F:C9
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019D3A542A87DC9B8BB8D006B43BEDE2426A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 03E7
Signing time: Sun 29 Mar 2026 16:01:27 +0000
Manifest this update: Sun 29 Mar 2026 16:01:27 +0000
Manifest next update: Mon 30 Mar 2026 16:01:27 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: sOD+ueEc8tjUXZllC36QJY/90wuWQClmNNoZQ3d7Q6M=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:2a:87:dc:9b:8b:b8:d0:06:b4:3b:ed:e2:42:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Mar 29 16:01:27 2026 GMT
Not After : Mar 30 16:01:27 2026 GMT
Subject: CN=cc728b62115bdca94c57de3b0d09b40ea7290fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:69:9b:9e:3a:06:92:a1:7e:34:26:39:27:
95:43:87:9d:aa:a6:82:4b:7d:b1:96:f2:69:4b:44:
0c:37:4d:5d:58:76:80:40:3b:50:2a:0c:76:99:7e:
11:66:34:e0:f4:99:45:92:d6:3c:68:d2:6d:96:24:
c6:5c:4c:17:24:be:17:04:99:69:ab:0d:1c:71:a6:
fd:f3:a0:88:23:ea:b5:d5:aa:36:24:bf:a9:bd:dc:
69:c9:33:b6:7b:01:0d:59:6b:61:3a:f2:ae:fa:7d:
a4:cf:57:c8:27:94:c6:3c:cd:a4:70:80:c1:ce:a9:
0c:0d:0d:69:20:83:c6:09:13:cc:4f:9b:29:e1:b6:
f7:2a:31:f2:f3:2f:f0:00:50:4c:0b:52:68:33:61:
d0:e1:ff:73:d2:e0:dd:c2:72:9d:13:c2:6b:e9:7b:
73:ec:0d:92:b9:97:ac:e7:99:fb:cb:5c:f5:ea:96:
6e:c8:77:53:e8:b3:bd:09:7d:1c:f5:7d:d9:aa:09:
89:38:7f:7c:83:84:d9:ce:ca:8f:c8:0d:a8:b5:71:
19:b0:78:e8:da:1d:0f:d4:26:71:f1:c1:46:14:c5:
d8:06:ac:22:41:31:50:9f:74:c5:b7:cc:59:42:af:
3d:eb:5d:4e:24:11:4a:2f:1c:cc:6b:80:42:23:0d:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:8B:62:11:5B:DC:A9:4C:57:DE:3B:0D:09:B4:0E:A7:29:0F:C9
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:69:75:e3:92:a6:b3:81:a8:d3:90:14:a5:f7:35:ff:50:91:
7c:6d:ac:56:77:77:68:7a:2f:d0:bc:db:ab:fe:06:84:5d:45:
68:10:13:5e:6b:04:ef:92:91:fb:8b:9b:d9:23:a7:a0:2e:81:
ec:b1:80:5e:6d:62:bf:7f:1f:e4:d8:d8:b0:2c:cf:d6:32:f3:
62:68:8f:ca:2c:f2:05:70:bb:7e:10:b4:94:43:ec:87:ff:18:
1b:92:5a:5d:1a:89:ef:63:5f:4f:ec:df:05:0b:71:8a:19:1d:
98:a4:17:59:d6:19:e2:ee:15:d1:79:19:0e:30:14:7c:4e:81:
58:89:93:41:0b:fc:f5:29:fa:ab:c5:9e:06:15:18:87:a4:97:
63:65:c5:05:b0:de:01:3d:07:1d:f9:a2:98:7f:d5:19:04:49:
44:a4:58:eb:a1:b0:e2:dd:02:40:14:82:7d:da:5f:32:13:29:
5f:21:32:3c:d5:7a:97:34:7b:c4:a3:8a:a3:ec:c9:05:75:88:
26:ce:f4:08:58:42:8d:66:59:8e:97:6f:02:6b:e6:d9:f6:e7:
55:c9:7c:0d:84:26:80:b6:b8:4b:bb:39:48:d8:fe:cc:9e:b7:
4a:83:ca:f5:c2:ca:a1:1a:a3:97:39:48:1a:c2:3a:0e:3b:60:
0d:a7:31:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VCqH3JuLuNAGtDvt4kJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTI3ZDYzY2UxYzlmMzU1NzM5MGFmMjFmYzA2MTA3MmE1
MjVmNGUwHhcNMjYwMzI5MTYwMTI3WhcNMjYwMzMwMTYwMTI3WjAzMTEwLwYDVQQD
EyhjYzcyOGI2MjExNWJkY2E5NGM1N2RlM2IwZDA5YjQwZWE3MjkwZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjodpm546BpKhfjQmOSeVQ4edqqaC
S32xlvJpS0QMN01dWHaAQDtQKgx2mX4RZjTg9JlFktY8aNJtliTGXEwXJL4XBJlp
qw0ccab986CII+q11ao2JL+pvdxpyTO2ewENWWthOvKu+n2kz1fIJ5TGPM2kcIDB
zqkMDQ1pIIPGCRPMT5sp4bb3KjHy8y/wAFBMC1JoM2HQ4f9z0uDdwnKdE8Jr6Xtz
7A2SuZes55n7y1z16pZuyHdT6LO9CX0c9X3ZqgmJOH98g4TZzsqPyA2otXEZsHjo
2h0P1CZx8cFGFMXYBqwiQTFQn3TFt8xZQq89611OJBFKLxzMa4BCIw2a9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxyi2IRW9ypTFfeOw0JtA6nKQ/JMB8GA1UdIwQY
MBaAFHoSfWPOHJ81VzkK8h/AYQcqUl9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQt
OGQyNDgxNmQ5N2RlLzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82OWU1M2YtYTQ4Yy00OWIwLTkwZTQtOGQyNDgxNmQ5N2Rl
LzEvZWhKOVk4NGNuelZYT1FyeUg4QmhCeXBTWDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoml145Km
s4Go05AUpfc1/1CRfG2sVnd3aHov0Lzbq/4GhF1FaBATXmsE75KR+4ub2SOnoC6B
7LGAXm1iv38f5NjYsCzP1jLzYmiPyizyBXC7fhC0lEPsh/8YG5JaXRqJ72NfT+zf
BQtxihkdmKQXWdYZ4u4V0XkZDjAUfE6BWImTQQv89Sn6q8WeBhUYh6SXY2XFBbDe
AT0HHfmimH/VGQRJRKRY66Gw4t0CQBSCfdpfMhMpXyEyPNV6lzR7xKOKo+zJBXWI
Js70CFhCjWZZjpdvAmvm2fbnVcl8DYQmgLa4S7s5SNj+zJ63SoPK9cLKoRqjlzlI
GsI6DjtgDacxDA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:52 2026 by rpki-client