Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: ft2tIAK04lk636IGB5W+VNzVlfeeMHsDB8hImCXHQtI=
Subject key identifier: E9:6F:AB:F3:9F:E5:97:B4:9A:43:35:E4:02:6F:9A:33:F5:41:35:1E
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019D98F4E6004DFC20DFB886CA72C01CB194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 0522
Signing time: Fri 17 Apr 2026 01:01:19 +0000
Manifest this update: Fri 17 Apr 2026 01:01:19 +0000
Manifest next update: Sat 18 Apr 2026 01:01:19 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: 4ANiHOGg60lSVXpzOhxD7EvuEjhNmcibvEJLBAstxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e6:00:4d:fc:20:df:b8:86:ca:72:c0:1c:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Apr 17 01:01:19 2026 GMT
Not After : Apr 18 01:01:19 2026 GMT
Subject: CN=e96fabf39fe597b49a4335e4026f9a33f541351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:5f:d7:5d:e4:47:b0:fa:ca:9c:02:43:65:
9f:a4:8a:cc:46:03:d8:3c:72:ab:1e:3f:85:2e:4e:
f4:c6:a0:69:55:58:55:43:b1:83:c2:35:8a:e5:40:
61:04:70:df:c9:5a:f5:04:38:98:d9:27:c2:dd:43:
2e:32:70:8c:ce:b6:09:22:2b:7d:e6:e4:4f:87:6d:
c8:9b:d4:46:94:4f:a8:c4:51:4d:f5:ed:7b:1a:f9:
f8:70:77:b8:a3:5c:a5:c7:86:a0:b6:21:2c:ad:5b:
02:16:7a:9f:bd:a7:6b:e6:39:02:57:44:cb:35:ab:
e0:0f:b2:cb:37:b5:ab:fe:fd:70:67:24:78:95:ab:
6a:42:a7:64:a8:0f:6e:8b:b1:dd:fc:50:d1:c8:95:
83:4c:3b:4b:21:2a:be:e9:6f:bc:66:f2:0f:61:a6:
6f:19:61:58:00:65:47:4d:0e:10:10:94:9c:02:72:
6a:f4:0b:97:5a:5c:d9:7d:98:df:b1:62:f2:bf:de:
57:74:98:48:23:74:01:3e:ff:71:48:8f:72:9a:cd:
2e:f8:5c:2f:f7:2e:2c:fb:cc:68:9b:bc:73:c0:25:
37:bf:2c:e7:93:e2:47:6d:0c:de:a0:51:da:df:3e:
b7:7f:40:a6:7e:33:da:8c:18:2b:31:19:a0:b7:3d:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6F:AB:F3:9F:E5:97:B4:9A:43:35:E4:02:6F:9A:33:F5:41:35:1E
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:99:97:ff:b6:ac:31:bc:e1:0c:32:8c:fc:15:93:32:e1:f8:
11:fc:32:de:7e:e1:9d:61:7a:66:3e:a3:f7:ab:87:be:4b:14:
8c:a4:28:9d:92:bb:77:b3:13:bc:6a:f7:92:01:cb:1f:b4:b7:
62:1f:23:5a:b9:3a:fd:78:56:0f:b0:57:31:88:fc:54:b5:a5:
b0:ec:dc:12:e4:94:fb:20:43:2a:70:41:f5:08:24:d2:7d:69:
f0:fd:b5:db:03:0b:dc:17:d5:1d:67:b5:cb:9a:09:e2:0a:c3:
d6:d6:7c:4d:0d:2a:34:61:5e:2c:9b:e1:e2:b2:c5:64:f4:58:
dd:ca:c7:ba:48:87:93:c8:d7:11:68:75:83:ac:dd:2e:ff:83:
9f:b3:7b:a9:e4:b2:e9:f1:5b:74:cc:50:79:d3:b1:10:51:00:
6a:20:93:94:72:9e:e3:b1:53:15:c2:42:c1:75:c7:8e:0a:21:
76:dc:37:b7:90:25:1c:d5:46:02:01:9f:d2:9d:91:9c:89:82:
62:7e:c9:7e:bc:e1:05:86:3b:c5:bc:aa:19:93:38:65:20:57:
67:d2:40:84:6b:3f:fa:03:28:96:ed:d5:7a:b3:a8:4e:24:8b:
4c:fa:2a:b3:3d:06:15:77:82:e0:fa:fc:91:e8:eb:56:1e:83:
91:13:e0:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9OYATfwg37iGynLAHLGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzQ5MDg1NDU2M2QzMjIyMmU5YWNlNWFkOGE2NDllOWI0
YTE3MjkwHhcNMjYwNDE3MDEwMTE5WhcNMjYwNDE4MDEwMTE5WjAzMTEwLwYDVQQD
EyhlOTZmYWJmMzlmZTU5N2I0OWE0MzM1ZTQwMjZmOWEzM2Y1NDEzNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Ff113kR7D6ypwCQ2WfpIrMRgPY
PHKrHj+FLk70xqBpVVhVQ7GDwjWK5UBhBHDfyVr1BDiY2SfC3UMuMnCMzrYJIit9
5uRPh23Im9RGlE+oxFFN9e17Gvn4cHe4o1ylx4agtiEsrVsCFnqfvadr5jkCV0TL
NavgD7LLN7Wr/v1wZyR4latqQqdkqA9ui7Hd/FDRyJWDTDtLISq+6W+8ZvIPYaZv
GWFYAGVHTQ4QEJScAnJq9AuXWlzZfZjfsWLyv95XdJhII3QBPv9xSI9yms0u+Fwv
9y4s+8xom7xzwCU3vyznk+JHbQzeoFHa3z63f0CmfjPajBgrMRmgtz2PZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlvq/Of5Ze0mkM15AJvmjP1QTUeMB8GA1UdIwQY
MBaAFO40kIVFY9MiIums5a2KZJ6bShcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMt
NDVjNTNiN2VmOWZhLzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMtNDVjNTNiN2VmOWZh
LzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpmX/7as
MbzhDDKM/BWTMuH4Efwy3n7hnWF6Zj6j96uHvksUjKQonZK7d7MTvGr3kgHLH7S3
Yh8jWrk6/XhWD7BXMYj8VLWlsOzcEuSU+yBDKnBB9Qgk0n1p8P212wML3BfVHWe1
y5oJ4grD1tZ8TQ0qNGFeLJvh4rLFZPRY3crHukiHk8jXEWh1g6zdLv+Dn7N7qeSy
6fFbdMxQedOxEFEAaiCTlHKe47FTFcJCwXXHjgohdtw3t5AlHNVGAgGf0p2RnImC
Yn7JfrzhBYY7xbyqGZM4ZSBXZ9JAhGs/+gMolu3VerOoTiSLTPoqsz0GFXeC4Pr8
kejrVh6DkRPgHg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:06 2026 by rpki-client