Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: 750ezFfp5SMdR+una0dbe8GNRKNbyE3CP2TtEKraw2k=
Subject key identifier: 10:31:D5:EB:FA:2C:9B:65:9D:3B:56:6A:C2:39:11:3A:55:F1:51:A4
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 019CAB6B0E10A73682474E3EC8EB630C4F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:00:45 +0000
Manifest this update: Sun 01 Mar 2026 22:00:45 +0000
Manifest next update: Mon 02 Mar 2026 22:00:45 +0000
Files and hashes: 1: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: PjYQuEQgB2qLtNFDPMpVWgkjSJSyw3pSdpanAsj1oXc=)
2: C7fQ7Ve9jd1KjW3OO8oxR9QhSyI.roa (hash: R/aIjhVfQy4DuH2HYkC6Yf9teDlMa+Wx7kzzvb2vFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0e:10:a7:36:82:47:4e:3e:c8:eb:63:0c:4f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Mar 1 22:00:45 2026 GMT
Not After : Mar 2 22:00:45 2026 GMT
Subject: CN=1031d5ebfa2c9b659d3b566ac239113a55f151a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:e6:e2:4c:b9:8a:49:45:63:7d:6c:74:82:
f6:4e:68:50:3e:92:91:95:20:c2:fd:4f:3c:0e:7f:
c6:3b:e6:1b:f9:b4:16:a2:70:81:e1:8f:90:31:fa:
4c:f3:f5:f5:1b:81:8a:24:df:ab:f2:d3:a2:88:81:
76:2b:4c:0e:cf:5b:33:9c:09:a9:f7:17:44:99:18:
3b:eb:19:06:cd:42:13:7d:3b:d9:2b:fc:92:ab:21:
2d:dc:c5:7f:08:a6:8e:a4:f3:c6:69:94:ad:5c:9b:
ab:a4:d6:43:68:59:77:99:8a:c7:dc:a2:3c:3d:1e:
b5:e5:73:dd:22:78:6c:c4:cb:ac:c1:44:09:9b:e4:
91:ec:c0:83:40:06:6f:a5:3d:de:a2:45:57:1b:c2:
41:64:01:f7:ef:bb:ec:88:4f:7f:a4:c4:54:95:49:
5e:3e:71:4a:60:52:31:fe:fd:7a:05:aa:5b:6c:e7:
25:d1:9c:5d:db:13:d0:32:69:91:23:a5:31:ff:37:
13:0b:ac:17:a2:73:43:0e:64:2f:4b:c6:66:b4:db:
49:88:2d:32:3f:35:ac:82:04:5f:01:f5:42:9a:6d:
8f:c1:69:81:63:bc:63:37:54:d2:75:5b:bd:81:03:
09:8f:64:df:a1:5d:e5:bb:db:ba:50:34:a9:9c:75:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:31:D5:EB:FA:2C:9B:65:9D:3B:56:6A:C2:39:11:3A:55:F1:51:A4
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c4:f4:6d:a1:5c:58:4b:c9:3a:f2:60:91:59:fc:05:56:9b:
39:cb:e5:97:1d:87:3e:60:d1:dd:c2:40:a7:76:ac:76:d4:04:
4f:8c:3e:27:a3:c5:fa:9c:9c:f2:dd:d3:7a:52:88:4d:b3:aa:
cb:01:ea:c7:5c:2d:89:0c:20:71:64:75:68:61:f5:c7:94:ff:
b4:99:66:ce:ed:86:a2:a2:20:4e:7e:dd:a1:27:85:30:f7:6a:
a0:3f:a7:59:2a:b0:59:28:5e:ab:36:ec:3d:92:22:bf:99:32:
46:5f:4a:21:5b:7d:fb:24:f5:d8:52:36:10:0c:00:94:b9:38:
ad:74:4d:82:f8:37:4b:16:4e:4f:ab:b1:8c:a8:9a:47:ba:5c:
8a:03:f0:15:6e:b0:10:3f:92:19:6f:b9:f5:80:c5:82:45:10:
ac:f3:ec:f7:71:38:fe:d4:1d:19:9a:24:ed:35:b8:8b:ec:bf:
d7:02:a2:a8:e4:fe:0f:58:5d:91:60:f1:c3:b1:8a:ef:ca:d9:
35:26:88:74:7e:62:f7:25:71:61:6c:1f:46:22:44:cf:d4:5c:
fa:69:fe:9a:df:96:83:01:47:b6:13:66:e8:e3:99:91:87:33:
91:14:01:e5:c1:27:55:1b:5b:02:d0:14:0d:89:09:5b:3e:b3:
c6:8c:34:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyraw4QpzaCR04+yOtjDE8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYTMzYzk2ZjAyYTlmMGJlZjI1Y2QzODA2YTI0NjdjYTE2
NTYzN2IwHhcNMjYwMzAxMjIwMDQ1WhcNMjYwMzAyMjIwMDQ1WjAzMTEwLwYDVQQD
EygxMDMxZDVlYmZhMmM5YjY1OWQzYjU2NmFjMjM5MTEzYTU1ZjE1MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bzm4ky5iklFY31sdIL2TmhQPpKR
lSDC/U88Dn/GO+Yb+bQWonCB4Y+QMfpM8/X1G4GKJN+r8tOiiIF2K0wOz1sznAmp
9xdEmRg76xkGzUITfTvZK/ySqyEt3MV/CKaOpPPGaZStXJurpNZDaFl3mYrH3KI8
PR615XPdInhsxMuswUQJm+SR7MCDQAZvpT3eokVXG8JBZAH377vsiE9/pMRUlUle
PnFKYFIx/v16BapbbOcl0Zxd2xPQMmmRI6Ux/zcTC6wXonNDDmQvS8ZmtNtJiC0y
PzWsggRfAfVCmm2PwWmBY7xjN1TSdVu9gQMJj2TfoV3lu9u6UDSpnHX2FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAx1ev6LJtlnTtWasI5ETpV8VGkMB8GA1UdIwQY
MBaAFOyjPJbwKp8L7yXNOAaiRnyhZWN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUt
MjVlZjI5OTBmMTY2LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi80OWFlNDItMGU5YS00ZTI0LWJhMTUtMjVlZjI5OTBmMTY2
LzEvN0tNOGx2QXFud3Z2SmMwNEJxSkdmS0ZsWTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcT0baFc
WEvJOvJgkVn8BVabOcvllx2HPmDR3cJAp3asdtQET4w+J6PF+pyc8t3TelKITbOq
ywHqx1wtiQwgcWR1aGH1x5T/tJlmzu2GoqIgTn7doSeFMPdqoD+nWSqwWSheqzbs
PZIiv5kyRl9KIVt9+yT12FI2EAwAlLk4rXRNgvg3SxZOT6uxjKiaR7pcigPwFW6w
ED+SGW+59YDFgkUQrPPs93E4/tQdGZok7TW4i+y/1wKiqOT+D1hdkWDxw7GK78rZ
NSaIdH5i9yVxYWwfRiJEz9Rc+mn+mt+WgwFHthNm6OOZkYczkRQB5cEnVRtbAtAU
DYkJWz6zxow0vg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:21 2026 by rpki-client