Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: sTYtwn/AnkzVWhgEZjJVz5TM9W/T+i3MQHouZfHT6Mw=
Subject key identifier: 95:72:B0:55:74:A1:29:21:6B:3E:CE:CD:E7:B6:A8:9B:C7:8A:CF:97
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 019CAAFD544668BC15F5FE97C7AE1FB80C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 06D9
Signing time: Sun 01 Mar 2026 20:00:54 +0000
Manifest this update: Sun 01 Mar 2026 20:00:54 +0000
Manifest next update: Mon 02 Mar 2026 20:00:54 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: ZYkc1plVeqAwY2pl8F6mxra0cHbY2dSt31Queh1uV4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:54:46:68:bc:15:f5:fe:97:c7:ae:1f:b8:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Mar 1 20:00:54 2026 GMT
Not After : Mar 2 20:00:54 2026 GMT
Subject: CN=9572b05574a129216b3ececde7b6a89bc78acf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:19:59:a8:6e:f8:45:d4:ba:a6:e5:bf:7e:
4f:e4:70:f1:91:5b:b3:b5:0f:38:36:1a:a7:fb:79:
38:30:2b:0b:51:5a:48:61:d3:fd:82:f6:ae:ec:f0:
09:25:c1:73:20:2a:be:0f:b8:e2:32:5c:59:03:60:
7a:69:fd:c9:42:5d:ca:38:5b:02:4f:6f:1b:77:7c:
54:37:f6:7e:bc:3f:ed:15:e3:f8:fa:85:04:d5:28:
2c:11:b7:9b:cc:8e:c0:bc:10:7d:62:59:5c:02:02:
09:c9:47:e4:d7:3d:9d:00:a3:4c:c5:dc:e1:9e:8d:
fa:9b:f5:5a:c4:06:84:1b:bd:46:81:ef:1f:a2:b6:
51:ba:f5:f1:d6:9c:12:91:8d:1f:ca:5d:db:58:40:
6f:e1:8a:53:6e:ff:85:3b:53:35:00:76:9e:9b:ec:
91:a6:7c:9d:82:b4:6b:55:71:a1:8b:0d:69:67:19:
09:a0:46:33:56:d5:09:56:81:8a:85:dc:9c:9f:85:
5b:6d:df:f7:72:7f:c2:cd:f3:75:61:6b:aa:bf:2f:
76:d5:29:86:28:09:7b:2d:3a:c1:d3:45:b5:3e:d5:
7a:b7:e2:d0:90:06:2b:4d:6c:d0:00:21:61:15:dc:
48:00:ff:88:15:6c:4a:fe:4e:7a:03:e9:8b:46:74:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:72:B0:55:74:A1:29:21:6B:3E:CE:CD:E7:B6:A8:9B:C7:8A:CF:97
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4a:4b:24:de:cc:5d:0c:53:5c:b6:23:8f:68:33:7d:7e:ee:
77:66:12:a1:f2:ac:1c:d4:47:8b:3f:22:35:52:cf:59:0c:a7:
2b:50:0d:28:77:f3:e7:7f:0c:14:29:fb:ac:cb:e2:83:a0:94:
37:8c:c2:63:42:ef:fa:00:32:66:82:4a:4e:87:db:48:3d:b6:
a3:ea:e8:97:1b:e9:01:f4:df:3b:71:15:d1:9d:0b:b9:83:39:
6e:f2:b3:11:60:d2:c9:d1:e5:39:88:54:15:a4:1c:5d:96:da:
ff:89:53:f1:d1:9d:20:cd:71:c1:e9:19:96:b9:63:10:5b:fc:
1d:36:bd:8d:12:b7:e6:30:96:0d:55:3f:f1:55:e9:e0:2c:cd:
b3:dc:ff:88:08:88:e7:5f:67:e7:9f:30:8c:d2:82:65:2e:86:
91:ab:12:4f:88:9c:b8:4f:e0:d1:20:43:31:b7:55:9b:45:4a:
d9:1f:ad:6e:cf:9d:5f:25:37:63:4f:48:e4:e8:34:dd:c1:e5:
49:2e:ac:cd:cc:cc:cf:2c:41:86:78:16:60:1c:f8:3b:75:bc:
f4:5d:4d:6a:b6:b7:aa:7b:ff:d0:e9:9b:53:e3:03:6a:72:fe:
e8:27:b5:62:80:3d:09:4d:d0:37:69:a2:3d:86:47:8e:b3:78:
81:5c:93:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/VRGaLwV9f6Xx64fuAx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDBkYTFiNGUzMGZmYmIzMmE0ZTRhNGI3YWQ3MzFjMDMx
ZTQ0MjkwHhcNMjYwMzAxMjAwMDU0WhcNMjYwMzAyMjAwMDU0WjAzMTEwLwYDVQQD
Eyg5NTcyYjA1NTc0YTEyOTIxNmIzZWNlY2RlN2I2YTg5YmM3OGFjZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVQZWahu+EXUuqblv35P5HDxkVuz
tQ84Nhqn+3k4MCsLUVpIYdP9gvau7PAJJcFzICq+D7jiMlxZA2B6af3JQl3KOFsC
T28bd3xUN/Z+vD/tFeP4+oUE1SgsEbebzI7AvBB9YllcAgIJyUfk1z2dAKNMxdzh
no36m/VaxAaEG71Gge8forZRuvXx1pwSkY0fyl3bWEBv4YpTbv+FO1M1AHaem+yR
pnydgrRrVXGhiw1pZxkJoEYzVtUJVoGKhdycn4Vbbd/3cn/CzfN1YWuqvy921SmG
KAl7LTrB00W1PtV6t+LQkAYrTWzQACFhFdxIAP+IFWxK/k56A+mLRnQaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVysFV0oSkhaz7Ozee2qJvHis+XMB8GA1UdIwQY
MBaAFO5A2htOMP+7MqTkpLetcxwDHkQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEt
M2Q2NTc4MTQwZmMxLzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEtM2Q2NTc4MTQwZmMx
LzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUpLJN7M
XQxTXLYjj2gzfX7ud2YSofKsHNRHiz8iNVLPWQynK1ANKHfz538MFCn7rMvig6CU
N4zCY0Lv+gAyZoJKTofbSD22o+rolxvpAfTfO3EV0Z0LuYM5bvKzEWDSydHlOYhU
FaQcXZba/4lT8dGdIM1xwekZlrljEFv8HTa9jRK35jCWDVU/8VXp4CzNs9z/iAiI
519n558wjNKCZS6GkasST4icuE/g0SBDMbdVm0VK2R+tbs+dXyU3Y09I5Og03cHl
SS6szczMzyxBhngWYBz4O3W89F1Nara3qnv/0OmbU+MDanL+6Ce1YoA9CU3QN2mi
PYZHjrN4gVyTow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:31 2026 by rpki-client