Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File: 7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier: 1OHZ4foEHMTGysYQUSoWCxL97X3UmH9R8ENiu7hmnIo=
Subject key identifier: 4D:83:E5:0C:85:CD:33:5B:48:F5:08:A7:A1:31:E1:B3:82:B5:31:7B
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 019D9AE2F9BB97A35684D54FAACFAFC7FF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number: 1028
Signing time: Fri 17 Apr 2026 10:00:59 +0000
Manifest this update: Fri 17 Apr 2026 10:00:59 +0000
Manifest next update: Sat 18 Apr 2026 10:00:59 +0000
Files and hashes: 1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: dL6dqAdvWDd8x95UGwDauq1JBF04RA5Y4gPQCu9VaX4=)
2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f9:bb:97:a3:56:84:d5:4f:aa:cf:af:c7:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Apr 17 10:00:59 2026 GMT
Not After : Apr 18 10:00:59 2026 GMT
Subject: CN=4d83e50c85cd335b48f508a7a131e1b382b5317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:57:29:0d:2c:3e:39:8f:7c:9c:d9:db:cc:
a0:4d:94:a0:bc:1e:70:1d:53:46:d5:3a:6c:05:d1:
49:66:4c:e3:d6:ab:c2:f9:77:ec:a4:1e:ef:3d:60:
3b:36:f2:86:39:9a:94:b0:04:9a:f8:07:13:1c:fa:
ff:5c:40:18:58:9e:76:0f:e4:e4:d7:11:f8:c5:b8:
17:c1:36:21:49:e8:5b:92:2f:87:81:74:b0:e2:f2:
60:47:a4:49:a6:b4:91:31:63:1c:95:aa:e4:21:ef:
0c:13:4d:a1:d1:11:1d:f9:bc:00:26:47:9e:8f:52:
2d:7e:51:71:d5:b0:7a:f9:6b:66:ec:86:8d:81:33:
c9:35:6b:d7:07:f2:f8:a0:6c:4c:26:61:ab:20:28:
f6:9a:7a:28:7f:21:ab:d3:b3:dc:83:0d:29:10:4f:
ac:4c:f8:68:e8:b3:13:4e:85:c4:c6:d9:ad:7c:03:
84:6f:37:c4:b2:8a:c7:98:0e:45:3c:9b:36:3f:9a:
1c:46:fe:3c:fe:9f:ec:af:b7:b1:27:ed:5e:63:a2:
39:6b:bd:e5:cb:63:d7:c9:df:e0:dc:71:a6:3a:07:
a9:56:25:1b:22:00:3a:7c:38:b1:36:43:9f:0b:28:
83:46:af:e4:ae:38:4f:00:88:f9:3f:47:ce:bc:9b:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:83:E5:0C:85:CD:33:5B:48:F5:08:A7:A1:31:E1:B3:82:B5:31:7B
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b8:89:ad:a8:21:7a:a2:d9:85:5d:e1:5b:21:e0:c8:45:f6:
35:85:c2:8d:c9:0f:2f:65:36:7e:74:69:59:3d:7a:b1:1a:b4:
17:aa:82:86:ef:70:b3:99:08:fa:f1:78:5f:49:89:1a:8e:30:
2d:6d:49:d1:61:ce:cd:81:90:0f:f3:c9:04:a3:ae:b8:c0:bf:
4b:bd:53:7d:ab:66:7c:93:3a:cd:79:1d:02:06:e0:8b:80:0b:
41:77:2f:ea:8c:05:da:1c:7f:89:fb:d4:1b:98:12:8a:99:82:
49:e2:fc:ad:72:fe:45:f5:21:b2:d8:b6:29:0a:11:d9:a9:50:
7d:52:c7:4d:0f:28:4e:2c:4b:77:79:64:61:87:b7:16:85:18:
81:32:2d:45:2c:0b:14:49:14:3b:a0:5e:12:e5:c8:7e:fd:f9:
7e:6c:ad:81:6e:32:23:61:ae:ca:d1:15:a1:4c:49:a1:b3:68:
80:e4:19:ff:28:4f:bf:8d:41:56:9e:9a:8a:92:de:f7:80:be:
3b:f8:de:53:c3:2e:2d:06:a2:eb:ca:8b:f3:1d:53:e0:9f:78:
c2:e0:de:f6:d8:6b:6f:ae:5d:f3:d4:2d:c7:f2:84:88:f8:5a:
27:2e:01:fa:af:76:f7:86:c9:c6:90:91:cf:36:cf:9f:d4:f9:
55:e9:b5:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4vm7l6NWhNVPqs+vx/+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjY1YjcwMDAyMGUzMGQ3M2QzYjFkZjc4MjcxZTU0M2Uz
MDhmM2EwHhcNMjYwNDE3MTAwMDU5WhcNMjYwNDE4MTAwMDU5WjAzMTEwLwYDVQQD
Eyg0ZDgzZTUwYzg1Y2QzMzViNDhmNTA4YTdhMTMxZTFiMzgyYjUzMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCpXKQ0sPjmPfJzZ28ygTZSgvB5w
HVNG1TpsBdFJZkzj1qvC+XfspB7vPWA7NvKGOZqUsASa+AcTHPr/XEAYWJ52D+Tk
1xH4xbgXwTYhSehbki+HgXSw4vJgR6RJprSRMWMclarkIe8ME02h0REd+bwAJkee
j1ItflFx1bB6+Wtm7IaNgTPJNWvXB/L4oGxMJmGrICj2mnoofyGr07Pcgw0pEE+s
TPho6LMTToXExtmtfAOEbzfEsorHmA5FPJs2P5ocRv48/p/sr7exJ+1eY6I5a73l
y2PXyd/g3HGmOgepViUbIgA6fDixNkOfCyiDRq/krjhPAIj5P0fOvJuwpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2D5QyFzTNbSPUIp6Ex4bOCtTF7MB8GA1UdIwQY
MBaAFO/2W3AAIOMNc9Ox33gnHlQ+MI86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYt
MTRiMjBkNzUzMzcyLzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yMmE0NjUtMDI1ZC00ODQxLTg4NGYtMTRiMjBkNzUzMzcy
LzEvN19aYmNBQWc0dzF6MDdIZmVDY2VWRDR3anpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASriJragh
eqLZhV3hWyHgyEX2NYXCjckPL2U2fnRpWT16sRq0F6qChu9ws5kI+vF4X0mJGo4w
LW1J0WHOzYGQD/PJBKOuuMC/S71TfatmfJM6zXkdAgbgi4ALQXcv6owF2hx/ifvU
G5gSipmCSeL8rXL+RfUhsti2KQoR2alQfVLHTQ8oTixLd3lkYYe3FoUYgTItRSwL
FEkUO6BeEuXIfv35fmytgW4yI2GuytEVoUxJobNogOQZ/yhPv41BVp6aipLe94C+
O/jeU8MuLQai68qL8x1T4J94wuDe9thrb65d89Qtx/KEiPhaJy4B+q9294bJxpCR
zzbPn9T5Vem1cg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:55 2026 by rpki-client