Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: PwtRK+Xj6DovnbZlUyjGDKGKjS2rKXJaA70BlPyFtP0=
Subject key identifier: 56:45:A7:34:07:76:3C:EC:24:8E:14:74:E4:CB:8A:39:05:34:9C:40
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 019CACEBC1BD6253A7D00F7AF1B862E99B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0F08
Signing time: Mon 02 Mar 2026 05:00:57 +0000
Manifest this update: Mon 02 Mar 2026 05:00:57 +0000
Manifest next update: Tue 03 Mar 2026 05:00:57 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: TheS3WrMLkGIqBq+wavg4hqrccEnL+UYtgpPtwPiTj4=)
2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c1:bd:62:53:a7:d0:0f:7a:f1:b8:62:e9:9b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Mar 2 05:00:57 2026 GMT
Not After : Mar 3 05:00:57 2026 GMT
Subject: CN=5645a73407763cec248e1474e4cb8a3905349c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:b7:01:ca:65:62:94:38:fb:1a:c1:96:67:
85:77:37:da:ea:9a:2d:1e:ef:3c:d1:a7:cc:1a:e6:
91:da:ab:83:27:6c:b2:e6:b0:1e:c7:89:c8:40:2b:
01:87:a4:c8:43:28:d7:7b:e1:ad:1e:16:85:a9:da:
a8:f6:01:b2:f9:11:9d:75:18:fa:fa:63:6b:a5:33:
08:ac:28:30:0d:90:53:7e:67:96:d2:ac:0f:8e:8c:
5f:60:c7:0c:26:96:7c:09:16:b1:e2:be:7e:a3:09:
a3:a2:48:79:4d:5c:26:b9:ea:02:c0:c9:d1:a6:df:
76:8b:75:e0:af:94:2d:b6:04:57:01:8a:7c:ac:32:
b1:7b:eb:1d:7c:d4:b5:e4:55:be:69:39:0b:0f:88:
e0:7a:67:c6:1a:5a:7f:8e:30:b9:5d:6b:5c:92:57:
f7:d7:6f:01:08:4e:b9:7e:90:e4:72:94:f0:a3:d2:
80:32:9e:90:d9:84:4f:c6:7f:be:18:29:74:83:95:
03:84:64:9c:db:4f:01:1f:cf:52:17:f0:3f:eb:d1:
ed:c3:56:c5:33:6d:0e:cc:f1:5c:2a:a6:72:85:82:
e6:33:40:7a:bf:ce:33:d6:b3:aa:a6:51:53:dc:ab:
5d:5a:39:f5:8d:aa:b4:59:15:79:e1:2b:a2:44:09:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:45:A7:34:07:76:3C:EC:24:8E:14:74:E4:CB:8A:39:05:34:9C:40
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:ec:c6:7b:db:07:52:81:64:c7:51:09:6f:1a:4e:d4:b0:
89:66:74:cd:ab:db:97:fe:3f:6a:db:fd:c7:7a:ce:d2:79:02:
7c:45:d1:dc:42:e6:60:d7:7c:43:d6:86:e3:bc:71:a0:3f:b7:
4d:1a:75:03:aa:f0:dc:41:0e:2f:99:9b:ce:cb:c4:c1:0e:13:
f5:f1:97:b7:0d:11:1b:8c:a9:0c:90:7c:47:96:59:15:65:9f:
a5:ae:54:92:39:37:a4:b1:c2:25:29:5e:63:72:40:63:c0:ab:
73:d2:cd:fe:bc:45:ea:45:eb:4c:c0:9d:eb:89:9d:5c:2a:b7:
a2:b5:8b:d9:f3:30:5e:71:4b:2c:95:00:13:8d:23:ed:ad:84:
99:a1:ae:3d:58:2e:d9:5d:32:17:7b:53:b2:11:89:b3:e6:d4:
a1:a5:7f:3b:05:4a:d8:d7:36:45:61:20:f9:df:1f:56:1b:4f:
11:a6:d0:d7:d4:c9:74:b8:8d:00:bf:39:e5:5e:63:ed:96:37:
2d:79:b6:2a:0e:56:1b:a2:32:47:ee:33:6d:ba:e0:55:d6:ea:
bd:18:f7:06:5c:f9:34:44:93:4d:88:af:75:97:68:c8:84:72:
31:d8:7b:44:5a:1b:f3:af:05:42:8c:7d:fe:0d:3a:37:96:09:
b1:32:ac:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys68G9YlOn0A968bhi6ZtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5
YTYyNWQwHhcNMjYwMzAyMDUwMDU3WhcNMjYwMzAzMDUwMDU3WjAzMTEwLwYDVQQD
Eyg1NjQ1YTczNDA3NzYzY2VjMjQ4ZTE0NzRlNGNiOGEzOTA1MzQ5YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx63AcplYpQ4+xrBlmeFdzfa6pot
Hu880afMGuaR2quDJ2yy5rAex4nIQCsBh6TIQyjXe+GtHhaFqdqo9gGy+RGddRj6
+mNrpTMIrCgwDZBTfmeW0qwPjoxfYMcMJpZ8CRax4r5+owmjokh5TVwmueoCwMnR
pt92i3Xgr5QttgRXAYp8rDKxe+sdfNS15FW+aTkLD4jgemfGGlp/jjC5XWtcklf3
128BCE65fpDkcpTwo9KAMp6Q2YRPxn++GCl0g5UDhGSc208BH89SF/A/69Htw1bF
M20OzPFcKqZyhYLmM0B6v84z1rOqplFT3KtdWjn1jaq0WRV54SuiRAlo9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZFpzQHdjzsJI4UdOTLijkFNJxAMB8GA1UdIwQY
MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt
OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5
LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaXsxnvb
B1KBZMdRCW8aTtSwiWZ0zavbl/4/atv9x3rO0nkCfEXR3ELmYNd8Q9aG47xxoD+3
TRp1A6rw3EEOL5mbzsvEwQ4T9fGXtw0RG4ypDJB8R5ZZFWWfpa5Ukjk3pLHCJSle
Y3JAY8Crc9LN/rxF6kXrTMCd64mdXCq3orWL2fMwXnFLLJUAE40j7a2EmaGuPVgu
2V0yF3tTshGJs+bUoaV/OwVK2Nc2RWEg+d8fVhtPEabQ19TJdLiNAL855V5j7ZY3
LXm2Kg5WG6IyR+4zbbrgVdbqvRj3Blz5NESTTYivdZdoyIRyMdh7RFob868FQox9
/g06N5YJsTKsyA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:04 2026 by rpki-client