
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: 2paKq694fMGUh0ff28tCeMLvaunU+89TimZL7nxG2ks=
Subject key identifier: 3D:E2:D1:D2:08:AC:2B:D9:B0:97:F6:22:5A:D7:7A:FB:D4:23:98:9F
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 019CAB6B399E0C99D75E139F1455B5A87119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 158B
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: gAjC9F+i4HCTG7ZfNMbAow/4pHfK+1gYOfiH9dLRQ/k=)
2: Ro8iEiW7rbl5__Js738-X47zd7o.roa (hash: +phYjFZmxaM+pbKEjfOqXvZnYdeDvt8m3Nbx57x5ex4=)
3: xzeSROAZ4o5YtWLRSODt0z_nT28.roa (hash: ewTMl0RKi+Myrcx5oJN4DOCA09oZLzVzmbs3wk5czR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:39:9e:0c:99:d7:5e:13:9f:14:55:b5:a8:71:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=3de2d1d208ac2bd9b097f6225ad77afbd423989f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:e2:ee:97:e5:7c:25:11:1d:d8:25:d9:ec:
e0:4e:eb:55:a5:2e:30:c2:88:b3:26:47:85:ec:7b:
e3:b8:15:d8:58:eb:02:ad:e1:7e:d0:8e:a4:42:e3:
7a:f2:53:61:e4:1e:eb:3e:43:7e:9b:ba:8f:37:88:
bd:20:10:49:be:e5:b5:76:f1:a9:a2:dd:63:02:57:
01:b4:8d:3e:f4:dd:5c:05:83:76:61:0b:20:bb:8b:
60:07:a0:3c:8b:47:27:f4:26:b9:1f:b4:cc:ca:77:
81:cc:7b:94:b0:91:9e:ea:0a:29:ca:14:91:ae:ff:
4f:ab:d8:4f:e1:0a:db:24:95:cf:da:ba:54:7c:c8:
8b:8d:6d:75:fb:2a:6d:1e:c7:61:6f:9a:34:15:5d:
61:0d:0d:3d:76:eb:04:36:16:58:ea:eb:3b:b0:61:
7c:0c:1c:d3:b7:26:ff:b6:ad:16:e1:a4:61:90:8e:
3d:36:9d:2c:2d:4c:09:99:2d:4c:ff:5f:52:ff:9e:
3f:0c:b0:15:51:e5:ec:35:ec:86:d6:18:8f:73:19:
81:55:1c:96:f2:50:21:1e:f6:e7:b6:d6:6b:df:04:
dd:95:20:bc:26:7f:89:40:b5:ab:23:db:03:f9:cb:
a6:bb:98:dd:b2:be:15:e9:88:9c:81:32:ce:6d:13:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:D1:D2:08:AC:2B:D9:B0:97:F6:22:5A:D7:7A:FB:D4:23:98:9F
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9d:98:d9:54:17:a4:31:dd:c7:76:bd:7f:99:fd:dc:b5:8f:
1c:f7:6d:7e:89:a3:16:53:7a:e2:fa:73:1a:13:9e:f4:60:55:
63:87:4f:75:c9:ce:78:47:e9:5b:6a:8e:ff:99:a7:64:9f:f8:
bf:f8:d6:79:7d:90:7f:00:85:aa:ba:f3:01:e5:e6:1f:59:f3:
ae:59:d1:d6:f2:b2:74:ac:6e:8e:79:90:ed:9b:cb:aa:c7:de:
cd:ae:72:a5:af:7e:de:4b:88:8f:d0:1c:08:01:a1:73:ca:60:
69:32:7a:8b:90:d6:92:d5:0b:8a:88:28:b9:84:82:72:aa:d9:
aa:93:4d:be:f2:6a:93:7e:c8:30:b4:82:9e:ca:ec:41:72:4b:
8e:8d:64:7f:3b:2a:4b:14:6c:85:35:3e:e2:42:91:ed:7f:49:
92:be:c6:d7:43:32:c9:1f:76:85:33:55:1d:ae:bd:41:24:08:
d4:25:f4:74:a1:c4:c7:27:62:f6:18:22:7b:e6:7f:19:88:9c:
10:48:d0:7a:e0:16:dc:15:32:62:3f:fe:e7:4f:ab:39:74:90:
80:f1:1f:99:c0:49:f9:03:5d:d4:50:e9:24:c1:43:8a:5f:23:
ce:42:92:d9:a0:5e:41:24:72:18:d8:de:54:08:8a:f3:fd:40:
aa:07:72:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrazmeDJnXXhOfFFW1qHEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZWUyNWE3OGE4MTZiZGUzNjJjNDBjODZlMzliOTQ3ZDBl
ZTJmZjMwHhcNMjYwMzAxMjIwMDU2WhcNMjYwMzAyMjIwMDU2WjAzMTEwLwYDVQQD
EygzZGUyZDFkMjA4YWMyYmQ5YjA5N2Y2MjI1YWQ3N2FmYmQ0MjM5ODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTvi7pflfCURHdgl2ezgTutVpS4w
woizJkeF7HvjuBXYWOsCreF+0I6kQuN68lNh5B7rPkN+m7qPN4i9IBBJvuW1dvGp
ot1jAlcBtI0+9N1cBYN2YQsgu4tgB6A8i0cn9Ca5H7TMyneBzHuUsJGe6gopyhSR
rv9Pq9hP4QrbJJXP2rpUfMiLjW11+yptHsdhb5o0FV1hDQ09dusENhZY6us7sGF8
DBzTtyb/tq0W4aRhkI49Np0sLUwJmS1M/19S/54/DLAVUeXsNeyG1hiPcxmBVRyW
8lAhHvbnttZr3wTdlSC8Jn+JQLWrI9sD+cumu5jdsr4V6YicgTLObRMhOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3i0dIIrCvZsJf2IlrXevvUI5ifMB8GA1UdIwQY
MBaAFO3uJaeKgWveNixAyG45uUfQ7i/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYt
NTQzNDFjZDEzYTlkLzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yYzU3ZTUtNDAyYi00ODk2LTkyOWYtNTQzNDFjZDEzYTlk
LzEvN2U0bHA0cUJhOTQyTEVESWJqbTVSOUR1TF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp2Y2VQX
pDHdx3a9f5n93LWPHPdtfomjFlN64vpzGhOe9GBVY4dPdcnOeEfpW2qO/5mnZJ/4
v/jWeX2QfwCFqrrzAeXmH1nzrlnR1vKydKxujnmQ7ZvLqsfeza5ypa9+3kuIj9Ac
CAGhc8pgaTJ6i5DWktULiogouYSCcqrZqpNNvvJqk37IMLSCnsrsQXJLjo1kfzsq
SxRshTU+4kKR7X9Jkr7G10MyyR92hTNVHa69QSQI1CX0dKHExydi9hgie+Z/GYic
EEjQeuAW3BUyYj/+50+rOXSQgPEfmcBJ+QNd1FDpJMFDil8jzkKS2aBeQSRyGNje
VAiK8/1AqgdySw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:54 2026 by rpki-client