Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: xN7EcW0DR2zZ+YHk/BBBCJyRaa+Sklnj0w/DP72iwTM=
Subject key identifier: F8:08:E1:72:6A:2C:9E:1F:C6:72:12:A2:A6:7B:71:CE:66:EB:B6:EC
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 019CACB4B520D04040AA07A0C216C3ED4308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0CAB
Signing time: Mon 02 Mar 2026 04:00:49 +0000
Manifest this update: Mon 02 Mar 2026 04:00:49 +0000
Manifest next update: Tue 03 Mar 2026 04:00:49 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: /3prTubjFpVSzso0ZXPmCvnBT/yj3nqYsOOhCCv+OO0=)
2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b5:20:d0:40:40:aa:07:a0:c2:16:c3:ed:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Mar 2 04:00:49 2026 GMT
Not After : Mar 3 04:00:49 2026 GMT
Subject: CN=f808e1726a2c9e1fc67212a2a67b71ce66ebb6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:6c:6f:c4:36:72:fd:39:56:ce:21:7b:e6:
67:00:e0:9f:66:da:0b:fc:3b:53:84:34:f5:a6:70:
3b:0c:e5:03:da:57:d9:d3:20:ef:0e:24:8d:28:61:
53:48:a7:04:da:35:07:fa:12:b4:36:e2:3e:b4:ee:
07:30:d8:ad:d6:37:d1:cb:2b:df:9f:9a:75:ba:96:
64:46:e2:7d:c6:e8:f3:dc:19:09:d1:a5:82:7f:fb:
5f:a1:5c:9b:5c:7a:78:b9:fc:bb:6f:a5:50:bd:de:
7c:4c:d5:f9:a3:3a:e1:e2:94:ca:cd:ae:c0:46:9d:
a1:a7:57:fc:6e:18:7b:ef:2d:24:04:f4:af:87:2d:
f7:97:09:f1:f5:f2:c4:49:8e:13:03:52:46:59:6e:
cd:a5:0d:29:34:c3:ef:6d:63:40:0f:d4:79:6f:3a:
92:49:aa:0e:19:2a:66:5d:ef:4a:1f:d1:23:46:14:
61:b6:97:6b:2a:73:d8:2c:76:08:7b:1b:90:99:fe:
75:fe:d6:1b:9e:0d:f0:8e:e9:ab:e5:01:2d:92:06:
11:18:9d:47:e3:cc:a5:c9:6b:a8:41:5c:61:ed:72:
6a:51:02:32:7d:da:8b:fc:75:d1:2a:06:b5:36:33:
c7:08:11:32:4b:ae:29:8a:e2:e8:a3:51:28:72:48:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:E1:72:6A:2C:9E:1F:C6:72:12:A2:A6:7B:71:CE:66:EB:B6:EC
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0b:26:a1:20:82:14:d9:0d:ff:e7:d5:64:c8:da:c3:28:46:
3f:91:51:7f:28:53:15:90:32:2f:f0:7b:57:f3:24:eb:b7:93:
2e:f6:76:4c:65:bc:aa:c4:09:9b:2f:f1:02:55:86:09:05:68:
2b:dd:b6:99:e1:08:cc:63:d7:60:37:55:7f:6e:f3:2e:ab:78:
62:9b:4a:6a:f1:2a:7a:68:47:a8:59:a7:31:57:41:76:01:01:
3b:be:71:6c:ea:2f:7c:f6:0d:ba:e4:58:20:02:a4:68:9a:78:
68:c3:bf:1f:d5:df:df:c7:52:82:25:19:e0:b1:f9:eb:74:15:
8f:8c:7f:9b:0b:94:0d:53:67:d5:ce:0d:5f:f0:f3:b3:dc:1b:
6c:e1:f3:cf:26:52:a1:2c:a2:66:78:49:68:54:3b:b9:93:7b:
88:4e:be:d3:2e:a6:10:e3:b3:e3:8c:49:47:2a:c9:dd:78:d9:
94:e0:d8:d9:c7:c4:ff:e2:7d:54:a1:b6:1f:16:c7:78:2b:6c:
1e:fe:2a:dd:51:9e:86:e2:c2:cb:b9:62:bf:03:7f:a5:c9:4b:
25:81:8b:bf:83:10:25:5c:87:5b:95:45:6c:e0:de:e8:da:e8:
bb:e3:63:5f:e7:25:28:31:cb:ae:c7:c8:61:5f:e9:54:25:41:
80:7d:c4:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystLUg0EBAqgegwhbD7UMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWJhMmU2NTk3OTRiMTIyMTVkZjFmYThhYmUzZmNiZDY2
ODZkZjcwHhcNMjYwMzAyMDQwMDQ5WhcNMjYwMzAzMDQwMDQ5WjAzMTEwLwYDVQQD
EyhmODA4ZTE3MjZhMmM5ZTFmYzY3MjEyYTJhNjdiNzFjZTY2ZWJiNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsdsb8Q2cv05Vs4he+ZnAOCfZtoL
/DtThDT1pnA7DOUD2lfZ0yDvDiSNKGFTSKcE2jUH+hK0NuI+tO4HMNit1jfRyyvf
n5p1upZkRuJ9xujz3BkJ0aWCf/tfoVybXHp4ufy7b6VQvd58TNX5ozrh4pTKza7A
Rp2hp1f8bhh77y0kBPSvhy33lwnx9fLESY4TA1JGWW7NpQ0pNMPvbWNAD9R5bzqS
SaoOGSpmXe9KH9EjRhRhtpdrKnPYLHYIexuQmf51/tYbng3wjumr5QEtkgYRGJ1H
48ylyWuoQVxh7XJqUQIyfdqL/HXRKga1NjPHCBEyS64piuLoo1Eockgq0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgI4XJqLJ4fxnISoqZ7cc5m67bsMB8GA1UdIwQY
MBaAFOzrouZZeUsSIV3x+oq+P8vWaG33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2Qt
ZWJlMmRjNDAxNjE2LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2QtZWJlMmRjNDAxNjE2
LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQsmoSCC
FNkN/+fVZMjawyhGP5FRfyhTFZAyL/B7V/Mk67eTLvZ2TGW8qsQJmy/xAlWGCQVo
K922meEIzGPXYDdVf27zLqt4YptKavEqemhHqFmnMVdBdgEBO75xbOovfPYNuuRY
IAKkaJp4aMO/H9Xf38dSgiUZ4LH563QVj4x/mwuUDVNn1c4NX/Dzs9wbbOHzzyZS
oSyiZnhJaFQ7uZN7iE6+0y6mEOOz44xJRyrJ3XjZlODY2cfE/+J9VKG2HxbHeCts
Hv4q3VGehuLCy7livwN/pclLJYGLv4MQJVyHW5VFbODe6Nrou+NjX+clKDHLrsfI
YV/pVCVBgH3EFQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:27 2026 by rpki-client