Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: pjm1YUuZmzlSJII1RNnp4bv7HeJ05HB2RQlv9eQXHME=
Subject key identifier: CD:41:C1:8B:D7:FA:0B:3A:E0:0E:71:F5:50:39:E7:AD:66:01:B7:0C
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 019CADFE555B2F41AAB28BAA4B7CDB8A079E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0CAD
Signing time: Mon 02 Mar 2026 10:00:52 +0000
Manifest this update: Mon 02 Mar 2026 10:00:52 +0000
Manifest next update: Tue 03 Mar 2026 10:00:52 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: P3kJeUDiHbK6S+AM4zqqVe0QuUs4zGji6f/bMfYjT2w=)
2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:55:5b:2f:41:aa:b2:8b:aa:4b:7c:db:8a:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Mar 2 10:00:52 2026 GMT
Not After : Mar 3 10:00:52 2026 GMT
Subject: CN=cd41c18bd7fa0b3ae00e71f55039e7ad6601b70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:4c:75:28:f8:d7:ea:43:52:08:d2:c1:ae:
f1:48:52:75:32:cd:df:1e:f4:10:d6:80:88:8e:64:
01:0a:c9:4e:c7:42:b6:9c:58:b7:2d:51:bb:91:81:
b4:89:52:73:69:fa:1e:1b:06:cc:98:d8:cb:96:2a:
25:ff:f5:90:44:d0:ee:01:9c:7b:bd:12:d2:64:5c:
34:6b:0d:47:50:b5:ce:ab:15:b4:14:f5:b9:5b:fe:
0a:f5:c1:01:c1:91:79:0a:3f:fe:9d:e2:9a:06:7e:
4f:f4:42:7b:2b:e3:23:bd:ef:2f:a5:a3:21:e1:b4:
77:fd:36:85:6c:e9:8c:1f:ab:0f:1e:af:8b:6a:57:
77:dc:b7:9f:a1:bf:42:29:3c:ce:de:1d:8b:50:99:
79:a9:12:c5:aa:4e:70:43:2b:29:3f:0f:e9:30:8e:
0b:93:85:59:92:b3:34:3a:0f:d5:ad:2e:2a:0f:ab:
16:26:f7:f4:43:78:ff:6b:4e:03:9a:c9:f9:9a:ae:
a9:dc:ed:b8:aa:2b:db:e4:38:a9:a5:b8:be:6b:62:
1f:f2:10:2b:e7:27:76:14:34:a9:45:fb:ee:c5:dd:
c7:d0:cf:4a:4a:d6:14:d3:4a:57:0e:4e:fc:e6:56:
06:c9:cb:cb:43:b4:51:51:ae:1c:6a:d5:f2:02:81:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:C1:8B:D7:FA:0B:3A:E0:0E:71:F5:50:39:E7:AD:66:01:B7:0C
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b3:85:77:b7:73:c0:92:ec:80:50:0c:90:78:1d:aa:6c:2d:
3c:d1:6e:bf:4f:1d:ed:0c:a4:d8:db:49:65:a5:8a:d6:ae:aa:
a9:1c:84:d4:b3:0d:eb:9e:16:1e:0a:8e:84:2c:44:29:4f:4b:
35:94:d9:13:a1:e7:54:3a:62:a5:df:4b:58:7a:65:dc:ac:3d:
6d:26:59:3a:e9:d9:e1:14:bf:cd:8d:b6:51:dd:35:92:34:c0:
d2:d4:fd:78:3d:cb:33:18:dd:a4:0d:c0:21:4d:e1:5e:b0:f4:
44:5a:a5:6e:ab:ba:8e:26:8d:af:7d:7d:3b:2a:bf:c4:6a:ff:
c2:06:9c:64:18:cf:65:a8:9d:71:bb:7c:c6:fb:57:62:be:9d:
7b:73:7d:d9:1b:c3:6b:cc:23:f1:aa:01:2f:55:04:03:19:04:
38:7a:99:5f:7d:1a:f9:30:f9:1f:3d:a8:11:55:4a:6e:33:07:
44:0c:03:b9:eb:d8:eb:cb:a4:25:87:98:98:10:45:c1:e5:f1:
fa:27:68:dc:05:7b:25:b6:98:09:0b:f7:00:0b:17:96:fe:ff:
c6:54:03:d6:a3:66:8a:81:4f:ca:68:20:8f:50:6d:5d:e8:37:
a7:5b:1c:00:e1:71:6b:fe:31:9e:e0:ad:06:38:43:1d:66:03:
2a:4e:5b:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/lVbL0GqsouqS3zbigeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWRhYTYzMzkxMDNiZGI1NTY2ZDgzMjcxZDNjNDdjMDA1
YzI1MGQwHhcNMjYwMzAyMTAwMDUyWhcNMjYwMzAzMTAwMDUyWjAzMTEwLwYDVQQD
EyhjZDQxYzE4YmQ3ZmEwYjNhZTAwZTcxZjU1MDM5ZTdhZDY2MDFiNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/tMdSj41+pDUgjSwa7xSFJ1Ms3f
HvQQ1oCIjmQBCslOx0K2nFi3LVG7kYG0iVJzafoeGwbMmNjLliol//WQRNDuAZx7
vRLSZFw0aw1HULXOqxW0FPW5W/4K9cEBwZF5Cj/+neKaBn5P9EJ7K+Mjve8vpaMh
4bR3/TaFbOmMH6sPHq+Lald33Lefob9CKTzO3h2LUJl5qRLFqk5wQyspPw/pMI4L
k4VZkrM0Og/VrS4qD6sWJvf0Q3j/a04Dmsn5mq6p3O24qivb5Dippbi+a2If8hAr
5yd2FDSpRfvuxd3H0M9KStYU00pXDk785lYGycvLQ7RRUa4catXyAoHatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1BwYvX+gs64A5x9VA5561mAbcMMB8GA1UdIwQY
MBaAFO6tqmM5EDvbVWbYMnHTxHwAXCUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMt
MjE0MmMwYzQzODVmLzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMtMjE0MmMwYzQzODVm
LzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbOFd7dz
wJLsgFAMkHgdqmwtPNFuv08d7Qyk2NtJZaWK1q6qqRyE1LMN654WHgqOhCxEKU9L
NZTZE6HnVDpipd9LWHpl3Kw9bSZZOunZ4RS/zY22Ud01kjTA0tT9eD3LMxjdpA3A
IU3hXrD0RFqlbqu6jiaNr319Oyq/xGr/wgacZBjPZaidcbt8xvtXYr6de3N92RvD
a8wj8aoBL1UEAxkEOHqZX30a+TD5Hz2oEVVKbjMHRAwDuevY68ukJYeYmBBFweXx
+ido3AV7JbaYCQv3AAsXlv7/xlQD1qNmioFPymggj1BtXeg3p1scAOFxa/4xnuCt
BjhDHWYDKk5b8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:48 2026 by rpki-client