Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: SOohaLTd+oLLvdPpxxFD/xLEnai9kWCIUCadLh9vrS8=
Subject key identifier: 1F:B0:A5:CC:81:C8:51:8D:71:3D:7E:69:27:14:2C:70:FA:17:07:7C
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 019CAAC6AF9503D1371A70836722B96972B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 15A5
Signing time: Sun 01 Mar 2026 19:01:13 +0000
Manifest this update: Sun 01 Mar 2026 19:01:13 +0000
Manifest next update: Mon 02 Mar 2026 19:01:13 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: j45/2tbpgKyinNp8TPDygPUHdOuREof2BTpoLV3xwrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:af:95:03:d1:37:1a:70:83:67:22:b9:69:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Mar 1 19:01:13 2026 GMT
Not After : Mar 2 19:01:13 2026 GMT
Subject: CN=1fb0a5cc81c8518d713d7e6927142c70fa17077c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:1a:28:70:58:fc:57:2f:36:6d:cf:48:fc:
51:81:c4:74:e0:54:08:94:f9:99:1b:97:a0:42:6d:
d7:b0:f6:e2:d9:33:04:99:1a:06:a6:1c:29:7e:bb:
6f:91:55:1e:b9:c5:e3:58:25:8e:16:cd:28:e6:58:
76:d0:3c:76:46:22:a9:49:5b:cd:d9:bf:d8:4b:06:
79:09:0c:4b:c8:7d:00:b8:1a:d6:94:08:95:49:72:
30:74:97:e7:54:8d:6a:de:1e:46:8e:af:25:8a:de:
b4:a6:df:43:04:d0:81:e7:62:fc:4f:0f:fb:b6:1d:
82:86:64:5f:e8:35:9d:f7:10:da:15:fb:d6:91:6f:
db:43:64:68:89:44:06:6b:65:46:8d:e5:44:4a:a1:
af:82:0a:e3:5a:20:b4:fd:92:00:29:c5:af:eb:cc:
ac:4e:27:38:1e:62:08:e9:5f:37:4e:23:54:3f:47:
e5:da:12:f3:c8:87:1f:b2:a9:26:f7:34:eb:85:1f:
20:1a:97:bc:8e:5a:6b:09:51:b1:0b:66:8a:ab:17:
52:31:90:9d:e0:47:00:a8:da:a0:37:50:6e:ba:98:
83:bf:55:5b:eb:52:8b:ae:00:9e:a5:70:6d:65:20:
83:8d:d4:b9:2d:ab:03:13:ff:74:89:1c:04:d9:ab:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:A5:CC:81:C8:51:8D:71:3D:7E:69:27:14:2C:70:FA:17:07:7C
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:93:2e:8c:ce:d5:ad:1a:69:1b:59:5e:52:b5:c2:38:ae:
6e:74:ca:d3:10:f1:a6:0c:34:ee:74:b4:bf:17:bc:80:86:bc:
88:27:79:a1:23:00:0f:5c:24:72:c1:62:33:7a:e2:3c:d4:46:
85:8b:32:f0:ec:7b:40:3e:8a:a9:a3:c9:09:b4:7b:59:ed:ed:
ce:19:6b:a2:4b:e6:dc:7d:b8:55:55:a7:59:8d:83:12:df:c5:
dc:b2:b2:de:31:74:e6:1b:17:f8:ad:46:fa:da:46:f0:9c:b3:
e0:9d:4f:84:8b:68:b7:7a:50:c9:5b:32:a6:6d:48:01:b8:76:
c7:8d:97:ba:e2:f4:25:6a:ff:63:86:70:73:a7:f4:39:03:e7:
05:91:bf:63:1e:8e:a4:ab:e7:b3:af:ea:53:63:67:d2:aa:c1:
37:fc:73:5b:57:9d:9c:1a:9e:41:a9:65:3a:23:6c:22:8d:ad:
61:42:ce:3c:89:14:4c:71:8c:d9:f9:b4:1c:2a:85:7d:ec:9d:
46:b9:2c:d4:dd:92:ea:2c:82:61:9b:98:cf:d4:bf:73:2b:e5:
9b:97:45:b0:08:8f:e5:95:8e:b7:6a:2e:3b:b7:16:cb:9b:68:
11:45:d3:f3:89:c2:c9:de:c1:e3:a9:63:37:47:78:58:75:89:
3c:c6:7e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxq+VA9E3GnCDZyK5aXKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy
NTEzNDQwHhcNMjYwMzAxMTkwMTEzWhcNMjYwMzAyMTkwMTEzWjAzMTEwLwYDVQQD
EygxZmIwYTVjYzgxYzg1MThkNzEzZDdlNjkyNzE0MmM3MGZhMTcwNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2kaKHBY/FcvNm3PSPxRgcR04FQI
lPmZG5egQm3XsPbi2TMEmRoGphwpfrtvkVUeucXjWCWOFs0o5lh20Dx2RiKpSVvN
2b/YSwZ5CQxLyH0AuBrWlAiVSXIwdJfnVI1q3h5Gjq8lit60pt9DBNCB52L8Tw/7
th2ChmRf6DWd9xDaFfvWkW/bQ2RoiUQGa2VGjeVESqGvggrjWiC0/ZIAKcWv68ys
Tic4HmII6V83TiNUP0fl2hLzyIcfsqkm9zTrhR8gGpe8jlprCVGxC2aKqxdSMZCd
4EcAqNqgN1BuupiDv1Vb61KLrgCepXBtZSCDjdS5LasDE/90iRwE2as2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+wpcyByFGNcT1+aScULHD6Fwd8MB8GA1UdIwQY
MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt
ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5
LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9yTLozO
1a0aaRtZXlK1wjiubnTK0xDxpgw07nS0vxe8gIa8iCd5oSMAD1wkcsFiM3riPNRG
hYsy8Ox7QD6KqaPJCbR7We3tzhlrokvm3H24VVWnWY2DEt/F3LKy3jF05hsX+K1G
+tpG8Jyz4J1PhItot3pQyVsypm1IAbh2x42XuuL0JWr/Y4Zwc6f0OQPnBZG/Yx6O
pKvns6/qU2Nn0qrBN/xzW1ednBqeQallOiNsIo2tYULOPIkUTHGM2fm0HCqFfeyd
Rrks1N2S6iyCYZuYz9S/cyvlm5dFsAiP5ZWOt2ouO7cWy5toEUXT84nCyd7B46lj
N0d4WHWJPMZ+tg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:51 2026 by rpki-client