Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: 8RgCyKE4KLMZHwy2P6K8NSdxoWS6eDuD35WYQouj1IM=
Subject key identifier: A7:A7:2C:E2:57:0D:7F:F8:81:DE:35:52:93:94:70:29:E1:15:A3:8E
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019CAEA3A8857A1BF9CD168BE28A45785206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 06FE
Signing time: Mon 02 Mar 2026 13:01:26 +0000
Manifest this update: Mon 02 Mar 2026 13:01:26 +0000
Manifest next update: Tue 03 Mar 2026 13:01:26 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: Y8xB2xSvped9DbZMKqvWL/0lxhCnbLyQ7cPD21z+uFY=)
2: QanxQFNXzm9WZ4FLagQm8rqjYVg.roa (hash: z/pk9haxpoiUwaj9wllu1rSy4e1+a+aVccYlUM/WIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:a8:85:7a:1b:f9:cd:16:8b:e2:8a:45:78:52:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Mar 2 13:01:26 2026 GMT
Not After : Mar 3 13:01:26 2026 GMT
Subject: CN=a7a72ce2570d7ff881de355293947029e115a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:e4:72:2b:c9:05:70:b3:e8:b1:0d:66:d4:
0c:d0:78:12:52:e6:48:c0:7a:2a:ec:a0:45:7d:2e:
28:5d:52:c3:31:0a:40:aa:0e:54:7c:e5:11:70:16:
57:64:ba:9d:b9:bd:c7:90:d7:cb:d2:e7:04:06:0a:
aa:ea:c6:32:0b:e7:65:5d:e9:e9:77:ce:c2:2c:ca:
88:83:77:36:fd:58:1d:f8:11:fa:2f:77:a3:9f:98:
c2:35:c1:9f:b5:ee:6b:5f:ad:bb:12:d3:fe:71:ff:
f2:09:bc:bd:ed:8e:f7:3d:cd:b2:30:53:bd:b1:24:
be:d2:39:cb:67:14:ac:e7:16:b4:b0:be:4e:84:1f:
20:9a:d4:8f:b1:26:9b:d3:13:2b:cd:86:00:dd:9c:
25:e6:c4:fa:cd:4d:ab:2d:2e:40:5e:11:5b:70:c4:
9b:05:44:5b:14:49:1a:c7:b6:a0:2c:98:93:36:43:
17:1a:7a:60:15:c6:7b:b9:3f:00:c2:7b:0f:1f:b3:
46:37:75:fc:a6:ed:c6:4d:5a:89:23:0f:12:42:db:
5a:68:df:72:bb:a7:d0:93:88:ea:1e:6b:5b:13:db:
1a:55:f8:0c:29:29:62:77:9e:02:35:84:02:e3:8d:
bd:1d:39:96:1e:4a:d0:00:bb:62:36:f4:41:48:77:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A7:2C:E2:57:0D:7F:F8:81:DE:35:52:93:94:70:29:E1:15:A3:8E
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6e:d4:ec:d7:e1:d4:8e:3a:65:98:33:2c:68:4f:32:69:6d:
6e:29:df:81:6e:6a:9b:49:eb:3e:63:99:fe:4e:7f:09:4c:95:
3e:03:e3:c6:0b:34:aa:dc:61:55:1a:07:3b:23:d4:cd:7a:88:
52:21:54:94:7a:a8:2e:ac:d4:e2:1f:1f:c8:bf:83:4f:26:58:
0d:c6:cf:b9:c1:3e:af:a5:0f:d6:53:08:3e:20:72:e3:2c:40:
03:e8:d4:ff:a8:03:28:67:cd:6f:69:24:25:72:50:17:95:f7:
5e:e4:f9:2e:3f:71:9f:f6:22:7a:51:04:3b:79:3c:b7:81:ba:
60:3b:be:68:4b:e9:06:d2:a0:0c:67:88:01:5e:1c:91:b4:6a:
1a:49:d2:c8:67:06:e2:29:95:05:67:6a:2d:51:81:97:0a:af:
3d:1d:cd:51:56:64:17:0f:04:6f:3f:03:1e:d9:79:dc:38:fb:
3b:25:8e:24:24:26:26:4b:76:cc:4a:40:9d:a1:fd:4d:d8:6c:
2b:e2:d5:03:78:4c:a2:71:a9:eb:2c:32:a8:82:2b:18:07:48:
06:2f:1f:bd:65:b7:3d:ed:b7:51:05:fb:2e:de:b1:48:e8:2c:
2c:1c:a0:ca:16:b3:37:7f:c7:40:b7:69:aa:7c:67:86:29:50:
6f:0c:08:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo6iFehv5zRaL4opFeFIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQyYjI4NzFjMDZlNWUyMWRmY2QwMTYwMzA3NTgxNmJk
MTQ0ODkwHhcNMjYwMzAyMTMwMTI2WhcNMjYwMzAzMTMwMTI2WjAzMTEwLwYDVQQD
EyhhN2E3MmNlMjU3MGQ3ZmY4ODFkZTM1NTI5Mzk0NzAyOWUxMTVhMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr7kcivJBXCz6LENZtQM0HgSUuZI
wHoq7KBFfS4oXVLDMQpAqg5UfOURcBZXZLqdub3HkNfL0ucEBgqq6sYyC+dlXenp
d87CLMqIg3c2/Vgd+BH6L3ejn5jCNcGfte5rX627EtP+cf/yCby97Y73Pc2yMFO9
sSS+0jnLZxSs5xa0sL5OhB8gmtSPsSab0xMrzYYA3Zwl5sT6zU2rLS5AXhFbcMSb
BURbFEkax7agLJiTNkMXGnpgFcZ7uT8AwnsPH7NGN3X8pu3GTVqJIw8SQttaaN9y
u6fQk4jqHmtbE9saVfgMKSlid54CNYQC4429HTmWHkrQALtiNvRBSHfTcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKenLOJXDX/4gd41UpOUcCnhFaOOMB8GA1UdIwQY
MBaAFO29KyhxwG5eId/NAWAwdYFr0USJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTkt
ZGU2YTljMDE3ZjdiLzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wZTRkZDMtOWRlNy00MzZlLWFiYTktZGU2YTljMDE3Zjdi
LzEvN2IwcktISEFibDRoMzgwQllEQjFnV3ZSUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvW7U7Nfh
1I46ZZgzLGhPMmltbinfgW5qm0nrPmOZ/k5/CUyVPgPjxgs0qtxhVRoHOyPUzXqI
UiFUlHqoLqzU4h8fyL+DTyZYDcbPucE+r6UP1lMIPiBy4yxAA+jU/6gDKGfNb2kk
JXJQF5X3XuT5Lj9xn/YielEEO3k8t4G6YDu+aEvpBtKgDGeIAV4ckbRqGknSyGcG
4imVBWdqLVGBlwqvPR3NUVZkFw8Ebz8DHtl53Dj7OyWOJCQmJkt2zEpAnaH9Tdhs
K+LVA3hMonGp6ywyqIIrGAdIBi8fvWW3Pe23UQX7Lt6xSOgsLBygyhazN3/HQLdp
qnxnhilQbwwIlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:15 2026 by rpki-client