Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File: 7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier: uliClkOHrLkwaxmaIfo44PgQ0O1kXWOgw5R+7X80mbM=
Subject key identifier: CF:FF:19:82:53:31:22:8B:57:F2:61:A3:46:07:1F:CD:04:3F:AE:E4
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer: /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial: 019CAD59939DE2DA399DF815666FE143BD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number: 17D7
Signing time: Mon 02 Mar 2026 07:00:54 +0000
Manifest this update: Mon 02 Mar 2026 07:00:54 +0000
Manifest next update: Tue 03 Mar 2026 07:00:54 +0000
Files and hashes: 1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: jR/+HlTwskOee2mEdF+lYeCSJMA3cr4FhTo/2Bwcdc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:93:9d:e2:da:39:9d:f8:15:66:6f:e1:43:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Validity
Not Before: Mar 2 07:00:54 2026 GMT
Not After : Mar 3 07:00:54 2026 GMT
Subject: CN=cfff19825331228b57f261a346071fcd043faee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:d0:c5:82:50:64:06:9e:9b:52:f2:a4:83:
ad:80:ab:d1:7e:c5:05:ae:dc:c1:41:e7:6c:5c:a3:
6a:94:7f:ff:67:96:d7:01:74:c3:5b:f3:f8:63:3c:
63:2d:83:ae:77:7b:09:20:30:74:62:5f:bd:73:ca:
6f:0d:85:f7:b4:53:cc:b0:76:d8:e9:17:06:a5:8f:
76:48:05:bb:ca:4a:8a:85:e4:29:5d:32:b7:b9:53:
f5:12:f6:9b:ad:74:07:6f:d6:5d:98:72:b9:d9:4d:
27:c7:ec:e1:a4:ea:d6:8a:98:06:89:be:10:8e:ba:
7e:1e:97:17:ea:d2:b4:b2:ca:83:8c:b0:89:80:a7:
0a:41:f1:51:4e:a1:1f:b0:c5:60:7d:72:20:9f:f1:
41:47:df:dd:0d:c2:4a:cd:15:84:7b:f1:dd:81:8c:
2a:c9:32:01:a9:08:79:13:c1:c2:c8:e4:60:94:db:
84:37:fb:02:a2:f5:44:53:a2:16:06:33:3d:71:b2:
5a:16:18:e5:83:67:0a:4e:54:a3:a7:67:81:30:bc:
6c:28:43:50:a8:5d:fc:a7:6d:79:f2:a4:e7:84:bf:
58:ff:a7:22:8d:39:e1:a1:56:26:06:88:87:d1:e3:
f1:fc:93:09:2b:76:d9:7e:00:42:8c:24:8d:ed:36:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:19:82:53:31:22:8B:57:F2:61:A3:46:07:1F:CD:04:3F:AE:E4
X509v3 Authority Key Identifier:
keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:35:1c:0d:8e:9a:30:48:53:59:c7:ee:e7:c8:15:c1:b4:11:
06:1d:d5:22:30:17:cc:97:11:d9:98:83:a6:ea:39:6a:dd:42:
b6:6e:d5:ff:fb:ea:74:1d:a3:8d:08:54:0c:af:d8:8e:32:3c:
35:23:0d:27:92:19:0c:77:40:0f:26:56:6b:e2:f9:24:0e:22:
7c:03:d7:6d:a2:65:a8:b6:1e:aa:33:ac:35:f5:6e:6d:6f:e0:
65:ac:95:15:41:bc:23:bb:19:da:4b:fc:bb:68:a7:c2:ba:e6:
17:85:ac:92:e6:18:67:99:9d:6d:1b:e1:08:ba:80:94:dc:a9:
38:ba:c5:70:be:f3:ec:48:9d:b8:b2:96:4d:dc:3e:45:14:a3:
6d:ae:d3:76:a4:96:d2:c1:8f:7b:da:1e:13:fe:3c:99:74:50:
33:18:3a:e2:9e:da:f7:bf:8c:c2:a7:43:47:65:b8:f6:db:28:
c6:26:f2:d8:ce:12:64:78:1b:d2:d2:e7:30:d7:90:95:63:63:
83:0e:a8:16:a9:82:37:dd:5f:cc:75:73:59:63:33:c9:74:37:
4b:a6:39:84:a7:64:d7:3d:4d:85:51:be:63:6a:9e:5e:f1:65:
3b:63:fb:b2:53:2c:b7:d4:8a:6e:f4:27:d4:67:62:d1:c5:f1:
c9:2d:91:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZOd4to5nfgVZm/hQ70uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGQyMmExZTBjNWJiMDAyODBmMTkzM2VlZWNmODFjZDhh
MGU2YjIwHhcNMjYwMzAyMDcwMDU0WhcNMjYwMzAzMDcwMDU0WjAzMTEwLwYDVQQD
EyhjZmZmMTk4MjUzMzEyMjhiNTdmMjYxYTM0NjA3MWZjZDA0M2ZhZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NHQxYJQZAaem1LypIOtgKvRfsUF
rtzBQedsXKNqlH//Z5bXAXTDW/P4YzxjLYOud3sJIDB0Yl+9c8pvDYX3tFPMsHbY
6RcGpY92SAW7ykqKheQpXTK3uVP1EvabrXQHb9ZdmHK52U0nx+zhpOrWipgGib4Q
jrp+HpcX6tK0ssqDjLCJgKcKQfFRTqEfsMVgfXIgn/FBR9/dDcJKzRWEe/HdgYwq
yTIBqQh5E8HCyORglNuEN/sCovVEU6IWBjM9cbJaFhjlg2cKTlSjp2eBMLxsKENQ
qF38p2158qTnhL9Y/6cijTnhoVYmBoiH0ePx/JMJK3bZfgBCjCSN7TZPCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM//GYJTMSKLV/Jho0YHH80EP67kMB8GA1UdIwQY
MBaAFOzdIqHgxbsAKA8ZM+7s+BzYoOayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MTc2NDgtNTVjMC00MDdhLTgxMWUt
NTk2MTY1NWMzNGQ5LzEvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83MTc2NDgtNTVjMC00MDdhLTgxMWUtNTk2MTY1NWMzNGQ5
LzEvN04waW9lREZ1d0FvRHhrejd1ejRITmlnNXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDUcDY6a
MEhTWcfu58gVwbQRBh3VIjAXzJcR2ZiDpuo5at1Ctm7V//vqdB2jjQhUDK/YjjI8
NSMNJ5IZDHdADyZWa+L5JA4ifAPXbaJlqLYeqjOsNfVubW/gZayVFUG8I7sZ2kv8
u2inwrrmF4WskuYYZ5mdbRvhCLqAlNypOLrFcL7z7EiduLKWTdw+RRSjba7TdqSW
0sGPe9oeE/48mXRQMxg64p7a97+MwqdDR2W49tsoxiby2M4SZHgb0tLnMNeQlWNj
gw6oFqmCN91fzHVzWWMzyXQ3S6Y5hKdk1z1NhVG+Y2qeXvFlO2P7slMst9SKbvQn
1Gdi0cXxyS2ROA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:56 2026 by rpki-client