Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: MnBAPAgArlPdZF51MEkwKIR0rj/CWMtZyE4UR+Sv8qE=
Subject key identifier: 68:8C:8E:64:23:93:CE:21:FF:45:14:E2:2D:26:56:CF:55:C1:36:E2
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 019D9AAB95B5F2E85BA02E4F1DFFF74DF269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 0662
Signing time: Fri 17 Apr 2026 09:00:29 +0000
Manifest this update: Fri 17 Apr 2026 09:00:29 +0000
Manifest next update: Sat 18 Apr 2026 09:00:29 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: Gdy0CoOnzJLFxUJjyzOBBsfRJlUNrDbwZmH30WOO78I=)
2: t5LOWwENqQioKciGyoMxLyNCNN8.roa (hash: zlv1UWEx5L67DFS1Ff+3kq6sBK6VPzVmabPisFcvJBk=)
3: wiLmfdGgzijMr6H7FRSYjpbRctE.roa (hash: Z51vNTE/VSPJwzjerq5rKZBcW7aBhn2nt4GaxW27CY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:95:b5:f2:e8:5b:a0:2e:4f:1d:ff:f7:4d:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Apr 17 09:00:29 2026 GMT
Not After : Apr 18 09:00:29 2026 GMT
Subject: CN=688c8e642393ce21ff4514e22d2656cf55c136e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:74:39:1b:3b:e0:08:c8:48:c8:c9:ed:04:
01:9c:cf:f9:21:e1:0e:ea:e3:99:20:c8:f0:22:21:
10:53:eb:3a:13:05:ad:7c:85:68:d1:9f:e1:fc:30:
6a:3a:01:10:a3:55:02:81:55:e7:22:34:c9:cf:b5:
c6:45:aa:62:94:4a:0a:77:2f:ff:d7:59:26:34:55:
b4:6c:32:1e:0b:a6:76:be:cc:99:b1:5c:32:aa:c2:
95:74:e9:b7:92:b2:3e:ec:0e:e0:2f:04:f8:34:b9:
6a:c1:77:f2:22:f3:02:01:05:8e:fc:d8:cd:ef:08:
f1:00:8f:cb:8a:31:6e:87:5f:9e:a9:e8:90:c1:93:
8b:16:78:6e:da:85:2d:63:e9:46:d3:10:60:62:f7:
d6:c9:10:a2:68:c1:c2:4c:d4:08:f8:c1:18:20:32:
7e:62:6a:25:a7:3b:cd:f4:48:0d:f0:a2:ad:e6:5f:
cf:44:19:f0:d2:17:1a:13:0f:5f:90:7f:6a:66:4b:
72:fb:19:dd:f4:b5:5d:a9:5e:0a:3d:8e:b9:30:49:
8e:76:20:02:eb:f9:26:bb:9e:f7:2e:de:68:f4:8d:
3d:7c:bb:de:2f:f3:8f:94:e4:d2:07:13:0b:a8:8d:
04:da:25:6c:27:da:01:c8:6c:7a:6a:92:d8:b9:cc:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:8E:64:23:93:CE:21:FF:45:14:E2:2D:26:56:CF:55:C1:36:E2
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c0:d9:35:78:45:29:ee:44:2d:e0:10:43:d5:15:53:cd:53:
e1:d0:85:98:65:5d:cb:9e:1a:c4:a4:00:c7:e5:59:28:15:e0:
c2:d0:17:d9:52:70:da:a4:a5:51:7a:b3:f3:5b:1b:84:23:60:
03:d8:86:ee:49:78:43:62:f9:6c:7c:84:54:e1:a1:13:6f:fd:
f8:77:4c:6b:28:ba:27:b1:a1:6d:a8:0d:b5:0e:d8:27:54:0b:
55:5b:62:43:2e:39:8c:8b:fe:d1:2b:cd:3a:ea:42:0c:7a:aa:
40:2b:95:90:07:c6:2b:ac:8e:9c:35:1c:93:d1:ee:81:7f:12:
9b:ec:73:0b:5a:95:c2:9c:b9:b8:95:f7:73:e0:b9:f9:6d:e8:
c2:7f:6d:6b:08:4a:a3:29:bd:ed:ea:a4:4d:19:a7:88:de:84:
c3:28:7f:8b:66:d2:e1:46:c7:25:12:f1:c3:d4:9d:31:55:58:
c3:bd:9c:dc:1b:71:99:22:65:c3:bb:ed:35:f3:3b:aa:b3:25:
00:65:8d:52:46:45:32:3a:2b:d7:7f:5a:5d:af:e9:91:9a:ce:
56:b4:a6:e3:d0:f7:01:35:df:14:3c:e8:c2:24:10:26:b4:29:
b4:6c:2f:ec:72:d2:92:1e:b8:e9:dd:ff:41:2b:1c:94:5c:6b:
54:5d:7a:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq5W18uhboC5PHf/3TfJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmU3M2FiMjczMGYzNGU5NGYxMjBlOWJmYzU1YWY0NDA1
MzY5ZjYwHhcNMjYwNDE3MDkwMDI5WhcNMjYwNDE4MDkwMDI5WjAzMTEwLwYDVQQD
Eyg2ODhjOGU2NDIzOTNjZTIxZmY0NTE0ZTIyZDI2NTZjZjU1YzEzNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Sx0ORs74AjISMjJ7QQBnM/5IeEO
6uOZIMjwIiEQU+s6EwWtfIVo0Z/h/DBqOgEQo1UCgVXnIjTJz7XGRapilEoKdy//
11kmNFW0bDIeC6Z2vsyZsVwyqsKVdOm3krI+7A7gLwT4NLlqwXfyIvMCAQWO/NjN
7wjxAI/LijFuh1+eqeiQwZOLFnhu2oUtY+lG0xBgYvfWyRCiaMHCTNQI+MEYIDJ+
YmolpzvN9EgN8KKt5l/PRBnw0hcaEw9fkH9qZkty+xnd9LVdqV4KPY65MEmOdiAC
6/kmu573Lt5o9I09fLveL/OPlOTSBxMLqI0E2iVsJ9oByGx6apLYucwsDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiMjmQjk84h/0UU4i0mVs9VwTbiMB8GA1UdIwQY
MBaAFO2+c6snMPNOlPEg6b/FWvRAU2n2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDIt
MmY5MDU5YzRmM2E1LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xMjdmYjMtN2Q4Ny00NjhiLTk0ZDItMmY5MDU5YzRmM2E1
LzEvN2I1enF5Y3c4MDZVOFNEcHY4VmE5RUJUYWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMDZNXhF
Ke5ELeAQQ9UVU81T4dCFmGVdy54axKQAx+VZKBXgwtAX2VJw2qSlUXqz81sbhCNg
A9iG7kl4Q2L5bHyEVOGhE2/9+HdMayi6J7GhbagNtQ7YJ1QLVVtiQy45jIv+0SvN
OupCDHqqQCuVkAfGK6yOnDUck9HugX8Sm+xzC1qVwpy5uJX3c+C5+W3own9tawhK
oym97eqkTRmniN6Ewyh/i2bS4UbHJRLxw9SdMVVYw72c3BtxmSJlw7vtNfM7qrMl
AGWNUkZFMjor139aXa/pkZrOVrSm49D3ATXfFDzowiQQJrQptGwv7HLSkh646d3/
QSsclFxrVF16vA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:31 2026 by rpki-client