Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: RlLkXMlkoCHe1ZKPMOoNJKxms+k9jUlX+VD8UzD/mkI=
Subject key identifier: 70:88:B4:E4:81:AD:B6:6F:1F:0C:87:27:F8:6E:9D:FE:46:A5:7E:84
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019CAB6BDD232ED68C59FDA0A7CFC117B971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0C52
Signing time: Sun 01 Mar 2026 22:01:38 +0000
Manifest this update: Sun 01 Mar 2026 22:01:38 +0000
Manifest next update: Mon 02 Mar 2026 22:01:38 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: d8dF4Se799m2+R+lqpExtUxI0VDqF20clHUDSS445ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:dd:23:2e:d6:8c:59:fd:a0:a7:cf:c1:17:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Mar 1 22:01:38 2026 GMT
Not After : Mar 2 22:01:38 2026 GMT
Subject: CN=7088b4e481adb66f1f0c8727f86e9dfe46a57e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:1b:78:d9:8b:dc:97:1c:70:d3:d0:56:81:
84:77:2c:d7:18:71:f7:cf:af:b6:94:6e:4f:6f:f3:
81:6b:6a:b0:30:77:19:58:e2:ea:cc:bd:3b:4a:87:
da:b4:c2:9c:be:ff:99:c0:b7:66:59:40:f5:d2:dd:
fb:88:83:83:b9:d6:84:ef:d5:e6:5c:29:c5:ef:f8:
77:93:ce:a2:15:5a:b5:d2:d4:29:9b:b6:03:50:9c:
fc:45:a7:1b:0f:5f:94:c4:0d:22:4a:1a:0e:1f:c4:
d1:78:48:04:86:01:a6:26:e4:48:b9:48:e1:56:bf:
6a:9e:a0:5c:42:02:89:e2:a5:31:16:13:08:29:83:
78:1c:69:7e:4d:be:20:78:fc:0e:7b:58:e9:35:d1:
56:20:7d:aa:e0:fd:32:c5:fb:51:d0:c8:80:00:10:
9d:e7:75:bf:ad:89:73:ff:98:3d:f9:49:5a:01:c9:
39:82:93:f2:2c:d4:20:5b:38:40:b7:55:fd:52:07:
4b:f7:d0:fb:c6:5d:1e:f9:79:16:c1:d6:d5:e8:7f:
ad:ba:6b:fa:24:6d:a2:1e:31:27:94:71:c8:33:45:
fb:b0:48:58:d3:73:d0:47:dc:11:76:42:c8:fa:21:
8c:15:61:58:28:f0:6a:4a:b0:4b:cf:68:cd:89:6f:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:88:B4:E4:81:AD:B6:6F:1F:0C:87:27:F8:6E:9D:FE:46:A5:7E:84
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ea:0e:88:13:c1:f9:0e:39:8c:e7:de:5d:80:fd:de:1c:37:
e0:4f:6c:0e:33:46:68:bb:4b:b9:43:cf:32:7b:01:4c:20:c3:
78:bb:81:4b:a6:ae:fa:cb:c8:72:c7:c0:ac:14:1d:2a:47:91:
9b:11:f6:2d:95:5b:33:da:4c:d2:67:e2:2e:a3:30:c8:05:91:
6f:9d:1b:6b:78:ea:35:d7:bd:07:7f:5a:6d:eb:62:0f:26:34:
a2:65:ac:a8:18:50:87:67:28:86:ac:ce:b0:68:26:21:92:f8:
3f:cf:19:7d:e5:0f:5c:89:f1:7a:ca:f0:56:75:66:63:8c:37:
3e:a9:32:6b:70:da:6e:82:c5:b6:44:84:61:ea:d1:ad:2c:55:
6c:1d:7b:81:55:0d:81:41:65:35:70:57:05:cb:10:05:19:56:
78:6e:5b:2d:96:d6:96:33:86:46:5a:d0:24:5c:70:6b:da:11:
d4:79:03:44:98:70:d2:fc:55:81:30:2c:45:db:df:ac:4b:ed:
a7:db:fa:ed:bd:5d:10:a2:72:10:c1:69:67:f9:19:33:99:cb:
02:7e:81:94:df:bd:a8:6b:6e:5e:51:ef:e0:8b:8e:cf:7d:78:
be:63:24:05:4c:ad:c6:c8:2f:4d:b8:d0:61:43:37:e6:34:ab:
76:9e:2d:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra90jLtaMWf2gp8/BF7lxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy
MzkwODEwHhcNMjYwMzAxMjIwMTM4WhcNMjYwMzAyMjIwMTM4WjAzMTEwLwYDVQQD
Eyg3MDg4YjRlNDgxYWRiNjZmMWYwYzg3MjdmODZlOWRmZTQ2YTU3ZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1UbeNmL3JcccNPQVoGEdyzXGHH3
z6+2lG5Pb/OBa2qwMHcZWOLqzL07SofatMKcvv+ZwLdmWUD10t37iIODudaE79Xm
XCnF7/h3k86iFVq10tQpm7YDUJz8RacbD1+UxA0iShoOH8TReEgEhgGmJuRIuUjh
Vr9qnqBcQgKJ4qUxFhMIKYN4HGl+Tb4gePwOe1jpNdFWIH2q4P0yxftR0MiAABCd
53W/rYlz/5g9+UlaAck5gpPyLNQgWzhAt1X9UgdL99D7xl0e+XkWwdbV6H+tumv6
JG2iHjEnlHHIM0X7sEhY03PQR9wRdkLI+iGMFWFYKPBqSrBLz2jNiW8oxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCItOSBrbZvHwyHJ/hunf5GpX6EMB8GA1UdIwQY
MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt
ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz
LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+oOiBPB
+Q45jOfeXYD93hw34E9sDjNGaLtLuUPPMnsBTCDDeLuBS6au+svIcsfArBQdKkeR
mxH2LZVbM9pM0mfiLqMwyAWRb50ba3jqNde9B39abetiDyY0omWsqBhQh2cohqzO
sGgmIZL4P88ZfeUPXInxesrwVnVmY4w3Pqkya3DaboLFtkSEYerRrSxVbB17gVUN
gUFlNXBXBcsQBRlWeG5bLZbWljOGRlrQJFxwa9oR1HkDRJhw0vxVgTAsRdvfrEvt
p9v67b1dEKJyEMFpZ/kZM5nLAn6BlN+9qGtuXlHv4IuOz314vmMkBUytxsgvTbjQ
YUM35jSrdp4trQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:46 2026 by rpki-client