Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: f6ghkeTv5ADLwgvM+my2wiK+gZ5GX4AzSxlpG8XD/WY=
Subject key identifier: E8:A4:EA:72:99:DC:FA:32:44:C6:E3:04:C7:27:48:33:80:4E:7F:76
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019D9AE3722E5178AFBC8E7CB833D33E8E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0B35
Signing time: Fri 17 Apr 2026 10:01:30 +0000
Manifest this update: Fri 17 Apr 2026 10:01:30 +0000
Manifest next update: Sat 18 Apr 2026 10:01:30 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: LU/+8Ar0CGPJ3GpFgMs2DzPAJ6l91+PVKlgUT+vnCQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:72:2e:51:78:af:bc:8e:7c:b8:33:d3:3e:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Apr 17 10:01:30 2026 GMT
Not After : Apr 18 10:01:30 2026 GMT
Subject: CN=e8a4ea7299dcfa3244c6e304c7274833804e7f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:2a:69:8a:ea:93:6e:bc:d7:0f:2f:97:5e:
a3:9b:03:4b:96:87:68:10:3a:78:04:ab:ca:8f:15:
c5:09:cb:42:60:93:4c:ba:d2:fc:7c:14:12:90:95:
8d:87:6f:de:30:50:40:9f:9d:53:9f:b0:0e:37:87:
78:44:98:79:e8:f0:31:57:bc:b9:65:7c:ce:60:7e:
82:60:76:d8:05:19:59:e9:bb:59:bf:fa:53:6e:81:
17:0d:12:8f:02:ee:73:14:24:15:63:bd:bb:92:77:
f7:6c:ca:a7:f4:88:3b:1c:da:fe:3b:a6:66:16:36:
5e:21:98:8b:d4:6c:9d:63:16:4b:f0:e7:92:81:21:
c5:fc:c6:6a:19:54:a6:da:ae:f4:56:05:c7:99:4c:
98:bc:0f:2a:fa:31:2b:e1:0c:c8:f3:6c:f6:14:74:
13:a1:03:b2:96:a9:c1:2c:8e:25:c2:0e:1e:07:38:
e6:97:67:f6:8c:73:c8:e4:11:f9:9b:4b:5b:e5:7c:
01:2b:1f:df:22:fa:89:9d:51:ae:e3:9b:d7:08:98:
38:41:c8:54:83:cc:1c:50:7d:35:14:11:4e:0f:bb:
5e:33:ff:e5:e7:f6:96:6e:ae:75:75:3b:10:61:1c:
88:ba:8c:31:fd:c6:72:11:a8:a2:e7:d9:20:4d:dc:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:EA:72:99:DC:FA:32:44:C6:E3:04:C7:27:48:33:80:4E:7F:76
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2f:ab:4e:83:6e:86:7d:ff:1a:9e:0d:8d:bd:ee:e8:10:17:
10:e7:b9:61:ef:c3:3e:87:1d:70:e4:39:b6:1f:58:db:ae:8a:
cb:1e:82:b9:98:6b:7c:3f:5e:cf:7d:45:13:ec:d9:de:79:50:
f2:41:19:40:97:25:39:ea:37:03:5e:44:3f:6f:0c:80:80:d3:
84:1e:5a:07:25:d0:1e:39:21:17:d3:76:af:7f:16:01:10:a4:
9e:53:f1:36:f0:e0:ec:3d:95:39:72:8b:01:a0:c0:1f:06:3c:
fb:b0:3d:6d:29:05:3a:50:8c:5f:51:30:a6:ad:e6:11:6d:bb:
b8:c7:39:56:d2:a6:ed:47:76:a2:21:a3:7a:27:7c:1c:fa:cf:
43:83:fe:88:7a:b9:68:a7:0b:9b:a3:fb:94:c4:ec:4a:4c:66:
e7:30:3d:54:ad:7b:ca:b1:c3:18:76:4e:f5:0c:34:77:f5:d0:
ee:28:95:cd:d3:c2:5c:34:e5:62:d6:b1:c8:ae:0e:e6:11:6e:
3c:67:b6:46:6b:e0:05:f3:38:96:cf:dc:43:28:d1:d6:6e:65:
67:3d:97:20:91:10:14:67:21:17:d9:79:69:e9:7a:a5:07:01:
ae:31:8d:0f:b6:ec:30:57:4d:5c:72:e2:95:3e:38:8e:40:4d:
ad:3c:5b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a43IuUXivvI58uDPTPo4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjYwNDE3MTAwMTMwWhcNMjYwNDE4MTAwMTMwWjAzMTEwLwYDVQQD
EyhlOGE0ZWE3Mjk5ZGNmYTMyNDRjNmUzMDRjNzI3NDgzMzgwNGU3Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy44qaYrqk2681w8vl16jmwNLlodo
EDp4BKvKjxXFCctCYJNMutL8fBQSkJWNh2/eMFBAn51Tn7AON4d4RJh56PAxV7y5
ZXzOYH6CYHbYBRlZ6btZv/pTboEXDRKPAu5zFCQVY727knf3bMqn9Ig7HNr+O6Zm
FjZeIZiL1GydYxZL8OeSgSHF/MZqGVSm2q70VgXHmUyYvA8q+jEr4QzI82z2FHQT
oQOylqnBLI4lwg4eBzjml2f2jHPI5BH5m0tb5XwBKx/fIvqJnVGu45vXCJg4QchU
g8wcUH01FBFOD7teM//l5/aWbq51dTsQYRyIuowx/cZyEaii59kgTdzKvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOik6nKZ3PoyRMbjBMcnSDOATn92MB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi+rToNu
hn3/Gp4Njb3u6BAXEOe5Ye/DPocdcOQ5th9Y266Kyx6CuZhrfD9ez31FE+zZ3nlQ
8kEZQJclOeo3A15EP28MgIDThB5aByXQHjkhF9N2r38WARCknlPxNvDg7D2VOXKL
AaDAHwY8+7A9bSkFOlCMX1Ewpq3mEW27uMc5VtKm7Ud2oiGjeid8HPrPQ4P+iHq5
aKcLm6P7lMTsSkxm5zA9VK17yrHDGHZO9Qw0d/XQ7iiVzdPCXDTlYtaxyK4O5hFu
PGe2RmvgBfM4ls/cQyjR1m5lZz2XIJEQFGchF9l5ael6pQcBrjGND7bsMFdNXHLi
lT44jkBNrTxb9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:08 2026 by rpki-client