Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: nPsFYIQRsr1crSTCDo8oPkTVZBhURGQW9hYSigwF2FQ=
Subject key identifier: 2C:B1:DF:7A:60:26:35:25:27:20:F8:51:A4:BE:BE:82:FC:B2:C5:7C
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 019D9C63444F9FCF93A7512259F38836073E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0F84
Signing time: Fri 17 Apr 2026 17:00:44 +0000
Manifest this update: Fri 17 Apr 2026 17:00:44 +0000
Manifest next update: Sat 18 Apr 2026 17:00:44 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: s98cZT/IYaXPnoSnMXe8VQVu/b7SEiLoSzRUxxKBcUk=)
2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:44:4f:9f:cf:93:a7:51:22:59:f3:88:36:07:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Apr 17 17:00:44 2026 GMT
Not After : Apr 18 17:00:44 2026 GMT
Subject: CN=2cb1df7a602635252720f851a4bebe82fcb2c57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:04:c0:0d:91:14:91:3f:d5:fd:11:d6:7b:
b0:43:31:4c:22:c6:a7:3a:87:d9:df:70:c1:59:f7:
42:88:0b:ef:55:59:5a:bd:90:62:1c:4c:d9:76:88:
86:33:9c:c0:da:09:15:70:a7:62:66:8c:9c:ba:a0:
43:8a:1e:b2:c1:13:28:3a:49:db:84:6e:46:9c:bb:
05:62:76:b4:c3:6d:0b:2a:b2:e6:61:05:8c:fd:91:
a8:32:29:4f:65:78:af:57:ab:51:66:9b:7e:e2:10:
28:d3:6b:e0:48:c8:be:9b:d4:d9:55:fe:95:6b:80:
73:a8:6d:80:46:65:bf:6e:37:61:68:43:c3:a8:f3:
30:3d:8e:16:30:cb:b6:35:5a:64:85:9e:e1:5d:a8:
d9:03:ad:3d:53:f9:4d:0d:4e:4c:cb:98:5d:85:f1:
d5:c8:8a:81:c5:2d:d3:5c:b4:93:1a:7b:19:45:b0:
10:dc:11:b9:19:e0:b4:43:b2:79:83:4c:14:00:f9:
6d:c4:b3:e1:d7:f9:1b:c9:2d:93:1a:9c:d8:2a:fd:
31:0a:80:05:46:c9:2b:f5:21:cc:9b:f6:35:e6:95:
1a:46:56:41:7b:5d:0e:03:6c:9e:5e:4f:40:ab:3f:
eb:84:c0:9e:92:07:26:ac:67:f6:d9:05:b8:12:bb:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:DF:7A:60:26:35:25:27:20:F8:51:A4:BE:BE:82:FC:B2:C5:7C
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:13:a4:23:ed:66:c2:0a:85:29:3f:58:c6:34:3f:b6:9f:
cb:8b:1e:13:c2:06:33:a5:db:56:b4:ce:10:b8:ee:4f:6c:fd:
a6:2e:e9:45:18:7b:9e:ba:0b:4e:fe:68:bc:fe:39:00:4f:80:
86:78:a4:9d:4d:17:24:b2:df:28:5b:bc:88:ad:5a:21:b7:65:
00:23:3a:3a:e4:e9:b4:6b:49:6f:30:3d:26:38:56:6c:be:af:
d9:27:6a:8b:fa:11:50:c1:1b:7a:58:ac:6c:c9:38:b1:46:10:
c2:0a:7a:9c:7c:ba:60:73:e7:0b:0f:80:d8:ad:5f:0d:02:6e:
6e:98:ad:72:b6:0d:e6:b5:66:71:f6:de:cd:76:de:c0:c9:a9:
fb:99:3f:35:b9:29:5d:d5:73:f2:4a:db:13:3e:9c:44:10:75:
e2:78:47:5b:a1:c3:50:26:e6:8a:ee:14:9c:47:d5:f4:25:09:
8a:0a:86:e7:4f:5e:ab:7f:20:cb:c6:ca:85:1a:dd:bf:6e:cb:
0c:1c:72:d4:87:bf:21:62:a0:7b:4f:1c:26:68:f9:bb:b0:9e:
24:0a:05:b0:0e:d7:e6:ac:b7:78:0c:89:db:65:7b:d2:38:a2:
71:87:ce:bf:95:67:07:1d:0c:a2:b7:83:14:dd:26:d8:57:5a:
74:42:24:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY0RPn8+Tp1EiWfOINgc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5
YTYyNWQwHhcNMjYwNDE3MTcwMDQ0WhcNMjYwNDE4MTcwMDQ0WjAzMTEwLwYDVQQD
EygyY2IxZGY3YTYwMjYzNTI1MjcyMGY4NTFhNGJlYmU4MmZjYjJjNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XQEwA2RFJE/1f0R1nuwQzFMIsan
OofZ33DBWfdCiAvvVVlavZBiHEzZdoiGM5zA2gkVcKdiZoycuqBDih6ywRMoOknb
hG5GnLsFYna0w20LKrLmYQWM/ZGoMilPZXivV6tRZpt+4hAo02vgSMi+m9TZVf6V
a4BzqG2ARmW/bjdhaEPDqPMwPY4WMMu2NVpkhZ7hXajZA609U/lNDU5My5hdhfHV
yIqBxS3TXLSTGnsZRbAQ3BG5GeC0Q7J5g0wUAPltxLPh1/kbyS2TGpzYKv0xCoAF
Rskr9SHMm/Y15pUaRlZBe10OA2yeXk9Aqz/rhMCekgcmrGf22QW4Ers2mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyx33pgJjUlJyD4UaS+voL8ssV8MB8GA1UdIwQY
MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt
OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5
LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0YTpCPt
ZsIKhSk/WMY0P7afy4seE8IGM6XbVrTOELjuT2z9pi7pRRh7nroLTv5ovP45AE+A
hniknU0XJLLfKFu8iK1aIbdlACM6OuTptGtJbzA9JjhWbL6v2Sdqi/oRUMEbelis
bMk4sUYQwgp6nHy6YHPnCw+A2K1fDQJubpitcrYN5rVmcfbezXbewMmp+5k/Nbkp
XdVz8krbEz6cRBB14nhHW6HDUCbmiu4UnEfV9CUJigqG509eq38gy8bKhRrdv27L
DBxy1Ie/IWKge08cJmj5u7CeJAoFsA7X5qy3eAyJ22V70jiicYfOv5VnBx0MoreD
FN0m2FdadEIkkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:17 2026 by rpki-client