Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: jScQKvznOqlwp/wLci01NGia+Hj9CJWVjLyc/NSyazo=
Subject key identifier: F8:B9:3D:61:19:8F:F5:9F:62:86:5A:15:DB:6B:88:28:5D:DA:85:0C
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 019D9A3EF5501F1839A57464D844C688CB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 0637
Signing time: Fri 17 Apr 2026 07:01:50 +0000
Manifest this update: Fri 17 Apr 2026 07:01:50 +0000
Manifest next update: Sat 18 Apr 2026 07:01:50 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: lD1qfrzZo1jWWYa0UBbTygGHZ0/IqEKaFP01uCEpyzw=)
2: l1mFVAOuxHZKBwMbg64rZnUC-1A.roa (hash: b+iEU9Au8tIP5RGBvo59a7Rag467Ip6uQFWhSxkco+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f5:50:1f:18:39:a5:74:64:d8:44:c6:88:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Apr 17 07:01:50 2026 GMT
Not After : Apr 18 07:01:50 2026 GMT
Subject: CN=f8b93d61198ff59f62865a15db6b88285dda850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:e4:73:28:20:42:9a:02:45:4d:c6:18:2b:
08:4e:fa:42:be:26:93:df:45:f1:23:bd:51:ec:3e:
23:80:fa:a2:6b:e7:67:f2:48:5e:00:7c:74:28:14:
25:eb:d5:f5:5b:e6:61:fa:e1:ba:27:2f:6f:e3:92:
de:d2:d5:4a:92:94:4e:7d:84:df:fb:87:ab:85:26:
98:af:7b:6d:cc:1d:79:4d:92:79:bc:15:e0:71:ea:
54:44:ee:dd:2e:17:3d:d6:cd:6b:ee:ca:ad:f6:2a:
d4:11:8a:20:28:88:b7:35:78:f0:30:16:4b:5e:32:
4f:c6:59:2c:25:79:c6:41:0e:52:92:6d:ae:e1:c7:
5f:75:36:76:4e:df:92:27:77:f8:ac:89:64:79:b7:
eb:3b:5c:20:c3:13:00:00:74:b7:aa:f3:ab:d7:3b:
0e:a5:7b:78:03:e5:07:96:09:b2:34:89:bb:32:9c:
c8:fb:f7:73:a4:ca:7f:f9:90:94:67:28:a9:b7:58:
54:56:c4:ed:9a:10:38:f2:57:ad:76:fa:cf:fc:d1:
c2:b9:09:44:c8:bd:63:72:21:6e:38:4e:67:1c:96:
60:a9:25:e3:41:c7:9b:34:cb:62:d2:ec:74:94:30:
80:aa:06:33:47:36:48:2e:67:fa:3f:7d:80:87:77:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:3D:61:19:8F:F5:9F:62:86:5A:15:DB:6B:88:28:5D:DA:85:0C
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:c3:53:74:75:b6:fc:da:4e:9e:c2:6c:d9:4a:27:5a:62:
71:3b:b9:7d:25:c0:80:aa:ba:2d:57:a2:47:61:48:57:01:e2:
dd:3d:bd:28:de:5a:7a:38:ac:ef:05:8e:09:20:43:9a:22:37:
65:12:5d:88:e3:57:dd:5e:7a:88:18:84:84:1a:15:d8:80:6a:
46:a9:77:81:c2:f5:8f:bd:d9:61:f4:8b:c0:71:d1:53:ca:3f:
c7:da:e8:95:cf:8f:d8:cf:1c:40:a5:75:21:9a:00:b9:8b:b8:
66:aa:83:61:d6:02:8a:a3:76:8b:f5:3a:66:aa:c2:33:2b:c5:
a6:6e:a0:f8:0f:28:54:1d:04:22:fe:1e:0b:c9:8e:61:39:29:
86:1e:d5:13:e7:99:98:a2:e6:4b:c6:4c:35:89:56:10:6d:c9:
4b:a7:69:ed:53:db:af:47:1a:76:d9:e9:80:5f:30:92:59:9f:
4e:da:8d:18:f4:00:59:01:21:e6:02:c7:48:59:78:0b:a7:5d:
42:20:10:c0:3e:84:1e:94:3a:7a:06:96:da:55:44:69:e9:a1:
80:bb:8b:bb:9f:1a:b4:ae:64:68:15:44:17:04:b8:a8:64:c3:
fe:ed:a8:7d:c8:d6:a7:78:d5:a7:3e:a0:4c:0a:c9:c6:9f:6c:
d4:92:29:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPvVQHxg5pXRk2ETGiMtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDE1NGY5NmFkY2ViOWJjZWUwYmRjMGI4MzVhZmJlMDUw
OTc1MWEwHhcNMjYwNDE3MDcwMTUwWhcNMjYwNDE4MDcwMTUwWjAzMTEwLwYDVQQD
EyhmOGI5M2Q2MTE5OGZmNTlmNjI4NjVhMTVkYjZiODgyODVkZGE4NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfDkcyggQpoCRU3GGCsITvpCviaT
30XxI71R7D4jgPqia+dn8kheAHx0KBQl69X1W+Zh+uG6Jy9v45Le0tVKkpROfYTf
+4erhSaYr3ttzB15TZJ5vBXgcepURO7dLhc91s1r7sqt9irUEYogKIi3NXjwMBZL
XjJPxlksJXnGQQ5Skm2u4cdfdTZ2Tt+SJ3f4rIlkebfrO1wgwxMAAHS3qvOr1zsO
pXt4A+UHlgmyNIm7MpzI+/dzpMp/+ZCUZyipt1hUVsTtmhA48letdvrP/NHCuQlE
yL1jciFuOE5nHJZgqSXjQcebNMti0ux0lDCAqgYzRzZILmf6P32Ah3d0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi5PWEZj/WfYoZaFdtriChd2oUMMB8GA1UdIwQY
MBaAFO7RVPlq3OubzuC9wLg1r74FCXUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYt
NzZiN2VlZDUxZTRhLzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iNzk0MjAtODkwMS00MTY5LWI3ZjYtNzZiN2VlZDUxZTRh
LzEvN3RGVS1XcmM2NXZPNEwzQXVEV3Z2Z1VKZFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxXDU3R1
tvzaTp7CbNlKJ1picTu5fSXAgKq6LVeiR2FIVwHi3T29KN5aejis7wWOCSBDmiI3
ZRJdiONX3V56iBiEhBoV2IBqRql3gcL1j73ZYfSLwHHRU8o/x9rolc+P2M8cQKV1
IZoAuYu4ZqqDYdYCiqN2i/U6ZqrCMyvFpm6g+A8oVB0EIv4eC8mOYTkphh7VE+eZ
mKLmS8ZMNYlWEG3JS6dp7VPbr0cadtnpgF8wklmfTtqNGPQAWQEh5gLHSFl4C6dd
QiAQwD6EHpQ6egaW2lVEaemhgLuLu58atK5kaBVEFwS4qGTD/u2ofcjWp3jVpz6g
TArJxp9s1JIpew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:02 2026 by rpki-client