Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
File: vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json)
Hash identifier: nQLzKpz2G1zwWcMR0xrG0Y/gmxqsI1zaNK2SXhlUsZU=
Subject key identifier: E1:41:EE:50:FF:1C:71:41:35:86:8E:F5:40:7D:C3:F0:5E:36:14:B4
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial: 019CAC46F55FC9236E51363ABE4F40A581D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
Manifest number: 072A
Signing time: Mon 02 Mar 2026 02:00:57 +0000
Manifest this update: Mon 02 Mar 2026 02:00:57 +0000
Manifest next update: Tue 03 Mar 2026 02:00:57 +0000
Files and hashes: 1: 5trZT8H8b8qEyleVSfGYnOWywrY.roa (hash: eOu11Ek0FyJBzZ2HRO2uveVNcG5F2I/J6cQ5U17P66g=)
2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: u6vsEttxydlGPdfVXDMF5/Jv56SGucirKEt2wzb3WME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f5:5f:c9:23:6e:51:36:3a:be:4f:40:a5:81:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Validity
Not Before: Mar 2 02:00:57 2026 GMT
Not After : Mar 3 02:00:57 2026 GMT
Subject: CN=e141ee50ff1c714135868ef5407dc3f05e3614b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:ef:dc:8b:17:e2:a4:ca:0d:6b:e7:57:fe:
97:1b:ee:a4:49:0e:8b:3b:d4:22:0e:fa:89:19:6c:
21:e0:bc:f9:b6:39:0c:33:6e:a3:67:d1:11:85:6a:
85:16:8d:f3:ef:9d:aa:8c:42:97:8b:34:fe:eb:a8:
09:1f:a8:fa:43:f4:7f:96:af:c7:c9:8b:8d:8e:f7:
8f:c9:e8:c0:cc:26:5e:cd:fc:73:29:ca:94:84:d8:
3f:50:d3:4e:8f:28:19:fa:7d:08:c3:72:51:a5:e4:
3e:8e:18:57:0b:0a:a5:6b:f2:a5:7f:53:46:96:9e:
64:26:bb:6f:c4:8f:bf:b2:e0:63:e9:3b:b7:4e:72:
b0:81:b4:5a:12:9c:d7:52:65:59:0f:75:13:b3:c1:
6b:71:83:60:d8:85:63:7e:d7:1a:3f:5c:51:17:c4:
91:f3:c4:d4:95:59:af:fc:4b:c2:03:29:db:3c:a8:
70:a4:55:03:8c:19:7c:bc:b2:1a:36:e1:86:4a:7e:
14:b4:6f:c2:e0:45:99:09:ca:34:ca:a0:93:70:66:
db:78:b7:ed:aa:db:c5:8e:a3:ab:21:9f:0d:7b:53:
05:18:8e:f9:bc:b1:48:91:93:31:4e:b1:ca:84:e8:
70:95:db:14:16:da:bf:86:4e:54:3f:91:d7:8c:06:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:41:EE:50:FF:1C:71:41:35:86:8E:F5:40:7D:C3:F0:5E:36:14:B4
X509v3 Authority Key Identifier:
keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:98:bc:58:be:91:f1:3e:a3:ba:75:9f:46:94:66:db:75:ab:
bb:37:2e:11:32:10:b2:18:ae:6b:67:99:a6:0a:f0:f0:81:bb:
ca:6d:01:44:3b:0a:54:55:cf:2b:19:38:6e:6b:50:8e:c7:57:
4e:f3:43:50:c3:2c:90:66:7b:4d:a2:56:33:4a:31:4c:aa:6f:
fc:83:15:35:9e:3d:6d:bd:c4:69:26:3c:be:bf:27:00:72:fc:
5f:5d:06:e6:a1:50:be:d1:03:1c:fc:87:2a:30:35:a7:4e:00:
54:98:44:05:cf:3e:29:e5:9c:14:4c:2a:66:42:5d:cb:96:81:
1e:c0:35:06:05:f4:c1:b6:97:dc:2c:fa:3f:29:0a:e4:5b:fd:
b1:62:3a:56:60:98:a9:84:9f:5b:32:21:8d:24:15:d4:2f:a7:
9a:d2:bd:a0:e2:d3:30:66:66:21:6d:9a:a1:cb:d9:76:2e:8a:
5f:35:22:a3:93:ae:77:c2:30:cd:4c:cf:0d:f6:6c:28:e7:1a:
37:32:2e:51:f9:82:96:96:7e:94:ce:3d:66:e4:04:b3:48:e6:
4a:f3:4f:d2:57:50:c7:32:91:53:60:d0:70:64:0f:fe:0f:14:
8e:30:6f:78:43:9d:37:c1:1b:74:fe:5f:51:15:42:88:d5:34:
92:ec:eb:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRvVfySNuUTY6vk9ApYHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmVlMmZmNjg2ZGU4ODljM2Y1OGRmMWQ5ZjVlMmI3OGQ2
NDFkZTQwHhcNMjYwMzAyMDIwMDU3WhcNMjYwMzAzMDIwMDU3WjAzMTEwLwYDVQQD
EyhlMTQxZWU1MGZmMWM3MTQxMzU4NjhlZjU0MDdkYzNmMDVlMzYxNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjszv3IsX4qTKDWvnV/6XG+6kSQ6L
O9QiDvqJGWwh4Lz5tjkMM26jZ9ERhWqFFo3z752qjEKXizT+66gJH6j6Q/R/lq/H
yYuNjvePyejAzCZezfxzKcqUhNg/UNNOjygZ+n0Iw3JRpeQ+jhhXCwqla/Klf1NG
lp5kJrtvxI+/suBj6Tu3TnKwgbRaEpzXUmVZD3UTs8FrcYNg2IVjftcaP1xRF8SR
88TUlVmv/EvCAynbPKhwpFUDjBl8vLIaNuGGSn4UtG/C4EWZCco0yqCTcGbbeLft
qtvFjqOrIZ8Ne1MFGI75vLFIkZMxTrHKhOhwldsUFtq/hk5UP5HXjAYa+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFB7lD/HHFBNYaO9UB9w/BeNhS0MB8GA1UdIwQY
MBaAFLz+4v9obeiJw/WN8dn14reNZB3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82MDI3N2MtZDAzNy00ODVjLWE0YjAt
ZGIzOTkzY2M1MTI1LzEvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82MDI3N2MtZDAzNy00ODVjLWE0YjAtZGIzOTkzY2M1MTI1
LzEvdlA3aV8yaHQ2SW5EOVkzeDJmWGl0NDFrSGVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZi8WL6R
8T6junWfRpRm23WruzcuETIQshiua2eZpgrw8IG7ym0BRDsKVFXPKxk4bmtQjsdX
TvNDUMMskGZ7TaJWM0oxTKpv/IMVNZ49bb3EaSY8vr8nAHL8X10G5qFQvtEDHPyH
KjA1p04AVJhEBc8+KeWcFEwqZkJdy5aBHsA1BgX0wbaX3Cz6PykK5Fv9sWI6VmCY
qYSfWzIhjSQV1C+nmtK9oOLTMGZmIW2aocvZdi6KXzUio5Oud8IwzUzPDfZsKOca
NzIuUfmClpZ+lM49ZuQEs0jmSvNP0ldQxzKRU2DQcGQP/g8UjjBveEOdN8EbdP5f
URVCiNU0kuzrpQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:00 2026 by rpki-client