Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: n4aqcC532A1QqHRxQMuBQZpJeyDlHlZQPhwGBjwv/lg=
Subject key identifier: 7A:3D:A5:2B:B6:B4:FD:41:FC:AE:CA:C8:3D:F1:96:1C:ED:ED:E9:6A
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 019CACEB81DB1B41530A1401051161F1A684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:00:41 +0000
Manifest this update: Mon 02 Mar 2026 05:00:41 +0000
Manifest next update: Tue 03 Mar 2026 05:00:41 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: FhkXHpnscEla/CrYYFEHbpDkVyRnZ1RwTwY8BMu96B0=)
2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:81:db:1b:41:53:0a:14:01:05:11:61:f1:a6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Mar 2 05:00:41 2026 GMT
Not After : Mar 3 05:00:41 2026 GMT
Subject: CN=7a3da52bb6b4fd41fcaecac83df1961cedede96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:48:aa:21:be:97:21:05:1a:04:ae:18:7e:
6f:52:e6:df:0a:b7:2b:ac:37:bf:8c:cc:67:d9:4d:
c3:3b:42:5c:5a:3e:61:69:75:33:3e:c1:4a:ed:86:
83:e0:b0:9c:16:e3:c8:1d:1d:8c:b9:18:60:8d:46:
9f:d3:e8:24:09:ea:d5:70:37:4e:86:79:08:18:b2:
c7:f9:4d:10:04:ef:ff:04:4d:47:67:75:27:5b:eb:
82:ac:3d:0c:a7:f1:19:16:e3:70:56:3e:b8:9b:d4:
18:cb:2e:14:d0:54:e0:ce:69:4c:8b:23:6d:5c:a6:
31:ed:42:9b:f2:60:d5:0e:d8:44:9d:b4:79:6a:ea:
e1:c8:b5:a6:01:65:e3:92:8d:8b:6b:09:aa:f8:1b:
09:1c:3d:24:b3:db:eb:01:93:7d:1c:dc:47:e6:4e:
6c:8e:3c:6c:09:b3:78:0b:e0:db:2d:db:1d:5b:6d:
25:9b:e8:67:7d:b8:f2:4a:0e:f0:f9:b0:cb:12:4c:
35:57:30:f7:db:fb:0f:b0:a7:8f:18:11:3d:b8:8c:
56:f4:15:5e:3a:2f:c3:29:c6:26:51:cc:cc:dc:8c:
01:09:eb:ec:ff:ab:a7:9a:4e:16:df:22:07:79:d3:
37:29:8a:77:42:97:37:11:bb:fa:73:6b:1c:5f:ea:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:A5:2B:B6:B4:FD:41:FC:AE:CA:C8:3D:F1:96:1C:ED:ED:E9:6A
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:76:4d:05:d6:fe:6b:a0:35:09:09:42:5b:60:2e:ba:c1:f9:
30:fb:4b:99:42:d7:5d:88:25:b7:22:b4:e0:26:30:8d:b3:43:
72:af:0c:4a:88:5e:c2:15:a4:a5:1a:22:d6:ec:18:70:96:e3:
e9:7a:71:87:ae:e5:25:15:ac:da:9d:e4:a5:16:af:e9:5c:c6:
3d:55:66:81:4d:f8:ef:11:1b:a5:9d:5c:6d:35:25:58:0f:21:
71:31:b6:65:cc:32:7b:76:57:6f:0b:9c:6a:ee:4b:cb:c1:95:
2d:84:d2:8d:90:62:79:c0:f3:a7:1b:d5:d5:9b:92:ae:09:29:
b8:25:e0:41:44:bd:19:0b:b0:08:60:67:df:a5:1a:2d:0b:c9:
f8:ce:02:fa:fc:b3:a7:8a:60:dc:9f:67:9d:07:9b:43:40:be:
9c:c5:ed:fc:f1:b9:30:48:d2:d0:3e:4a:36:14:69:77:99:ae:
1f:0b:c7:fc:f7:aa:cd:ed:7b:1e:e1:76:e1:28:de:91:9e:85:
79:c4:b3:f0:ff:46:80:63:b6:3a:8d:82:47:83:86:97:5b:10:
cc:4f:21:68:b3:2a:ab:16:9b:72:2f:08:48:bb:8b:03:9d:9b:
d2:9d:9e:ab:61:65:e4:29:ca:1e:ad:74:5d:86:2e:a0:8a:0f:
7b:c2:34:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys64HbG0FTChQBBRFh8aaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey
ODAzN2UwHhcNMjYwMzAyMDUwMDQxWhcNMjYwMzAzMDUwMDQxWjAzMTEwLwYDVQQD
Eyg3YTNkYTUyYmI2YjRmZDQxZmNhZWNhYzgzZGYxOTYxY2VkZWRlOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BdIqiG+lyEFGgSuGH5vUubfCrcr
rDe/jMxn2U3DO0JcWj5haXUzPsFK7YaD4LCcFuPIHR2MuRhgjUaf0+gkCerVcDdO
hnkIGLLH+U0QBO//BE1HZ3UnW+uCrD0Mp/EZFuNwVj64m9QYyy4U0FTgzmlMiyNt
XKYx7UKb8mDVDthEnbR5aurhyLWmAWXjko2Lawmq+BsJHD0ks9vrAZN9HNxH5k5s
jjxsCbN4C+DbLdsdW20lm+hnfbjySg7w+bDLEkw1VzD32/sPsKePGBE9uIxW9BVe
Oi/DKcYmUczM3IwBCevs/6unmk4W3yIHedM3KYp3Qpc3Ebv6c2scX+q/PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo9pSu2tP1B/K7KyD3xlhzt7elqMB8GA1UdIwQY
MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt
MTBmY2VkNWZkNGVlLzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl
LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHZNBdb+
a6A1CQlCW2AuusH5MPtLmULXXYgltyK04CYwjbNDcq8MSohewhWkpRoi1uwYcJbj
6Xpxh67lJRWs2p3kpRav6VzGPVVmgU347xEbpZ1cbTUlWA8hcTG2Zcwye3ZXbwuc
au5Ly8GVLYTSjZBiecDzpxvV1ZuSrgkpuCXgQUS9GQuwCGBn36UaLQvJ+M4C+vyz
p4pg3J9nnQebQ0C+nMXt/PG5MEjS0D5KNhRpd5muHwvH/Peqze17HuF24SjekZ6F
ecSz8P9GgGO2Oo2CR4OGl1sQzE8haLMqqxabci8ISLuLA52b0p2eq2Fl5CnKHq10
XYYuoIoPe8I03A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:01 2026 by rpki-client