Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
File: 7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json)
Hash identifier: bddjHPywKdJaN7uQlfBjKyvT0m73bkYlpuo1L4kb4iY=
Subject key identifier: 02:AA:7F:94:22:79:86:D3:F1:6C:C7:B2:CA:37:D6:7B:46:74:82:6C
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Certificate issuer: /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial: 019D9AABCC61A1410160199277BA60588142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
Manifest number: 01A2
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: 0ZqH99V57Xuf54z1hwypjXXPfTk.roa (hash: a/D66uiFnK78JnobNYVCxo0xT6Yj6YVtDbbQ8ijoyQo=)
2: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: RLhQ3niAORAfeUADTO/69X53T58k1D+mdwu4LnCMod0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cc:61:a1:41:01:60:19:92:77:ba:60:58:81:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=02aa7f94227986d3f16cc7b2ca37d67b4674826c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:14:3e:58:a7:75:76:1b:05:35:a8:fb:8a:
86:93:ae:ee:82:0c:a3:e8:08:b8:41:0c:34:9f:42:
54:78:72:6a:35:44:ae:d0:58:a7:4e:b3:9b:c2:79:
8e:32:af:88:e6:0c:d6:35:6e:af:ae:bd:30:8d:05:
4e:60:3e:4b:9e:43:63:f0:08:2b:39:be:4e:2b:3b:
d0:b3:d8:27:25:06:e2:1a:38:5e:e3:9f:27:da:30:
18:6d:d6:1e:9e:42:5e:db:5b:1b:76:c0:17:77:c9:
c6:87:78:e1:bf:c9:75:1d:fc:bd:7f:75:7c:a7:1f:
c1:68:b1:18:8c:30:d9:72:5a:01:b1:90:03:82:68:
f9:49:08:8f:26:dc:29:70:2a:f9:1f:97:46:2d:e9:
d0:d0:92:52:4e:68:cf:39:5a:ab:11:92:17:44:68:
9b:9c:cf:e3:99:28:0f:5d:10:9e:d1:fb:02:c7:ab:
96:10:9d:86:04:f7:c6:e0:e7:2c:c6:41:3e:c0:62:
2f:94:dd:3b:3c:57:f2:42:f1:1d:e6:66:22:b0:52:
e9:97:9a:c6:28:23:d9:57:c7:10:5d:6b:b0:ed:29:
74:24:e1:80:bc:aa:ad:31:31:da:a7:e8:05:60:60:
23:61:6a:1c:02:39:ac:7f:3d:ec:4e:1b:fd:0e:19:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:7F:94:22:79:86:D3:F1:6C:C7:B2:CA:37:D6:7B:46:74:82:6C
X509v3 Authority Key Identifier:
keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2d:e5:2a:77:c5:ea:5e:6c:bc:b4:35:25:10:eb:63:a2:f3:
7f:9c:a9:81:b9:4c:83:5f:cc:a0:8c:33:07:f5:12:8b:de:7a:
18:e2:e4:b5:ff:3e:e3:5f:8a:3d:36:6a:1f:ae:d9:ca:f5:1e:
11:2a:0d:4b:32:7f:5a:ed:64:66:d2:b8:40:af:b3:48:ab:6b:
20:41:fc:33:05:18:e4:b8:9a:55:16:a7:99:fb:ee:c9:4f:a9:
82:3a:ba:8a:73:0f:0a:24:62:91:9f:90:62:b3:95:51:08:99:
0c:15:ac:7d:cb:1b:93:cf:b6:0b:41:da:28:01:6b:54:7b:4c:
ca:6d:ef:df:f9:ec:d8:5a:a7:09:1f:17:06:02:9d:a9:dd:89:
0b:05:3f:b3:f6:d7:75:cb:42:88:ea:2c:46:a6:80:71:62:91:
87:5d:c0:5f:5f:e9:80:37:a7:cf:61:a4:55:6c:8e:5b:d4:6e:
c3:7d:f4:59:d4:76:ff:0f:b1:59:d1:82:3c:9b:6d:cf:a9:cc:
a3:24:5e:d5:51:01:91:00:e6:e7:20:08:03:c1:84:c3:42:fd:
5e:a9:02:87:0c:fa:80:82:a4:24:da:fc:3d:b6:4a:ab:10:b3:
16:00:36:c5:50:1c:b6:34:41:47:c0:56:3b:07:29:7f:66:9a:
ed:ae:12:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8xhoUEBYBmSd7pgWIFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZmZmNDBkOGJiNGEyNDg3MmUwMWJhN2Y0MmUzYWU2M2Vl
MDg1ZjUwHhcNMjYwNDE3MDkwMDQzWhcNMjYwNDE4MDkwMDQzWjAzMTEwLwYDVQQD
EygwMmFhN2Y5NDIyNzk4NmQzZjE2Y2M3YjJjYTM3ZDY3YjQ2NzQ4MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzgUPlindXYbBTWo+4qGk67uggyj
6Ai4QQw0n0JUeHJqNUSu0FinTrObwnmOMq+I5gzWNW6vrr0wjQVOYD5LnkNj8Agr
Ob5OKzvQs9gnJQbiGjhe458n2jAYbdYenkJe21sbdsAXd8nGh3jhv8l1Hfy9f3V8
px/BaLEYjDDZcloBsZADgmj5SQiPJtwpcCr5H5dGLenQ0JJSTmjPOVqrEZIXRGib
nM/jmSgPXRCe0fsCx6uWEJ2GBPfG4OcsxkE+wGIvlN07PFfyQvEd5mYisFLpl5rG
KCPZV8cQXWuw7Sl0JOGAvKqtMTHap+gFYGAjYWocAjmsfz3sThv9DhlFFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKqf5QieYbT8WzHsso31ntGdIJsMB8GA1UdIwQY
MBaAFO7/9A2LtKJIcuAbp/QuOuY+4IX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQt
MTQxZDMzYzc0M2RmLzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zZWJkYmEtNDZjOS00MDNjLThhMGQtMTQxZDMzYzc0M2Rm
LzEvN3ZfMERZdTBva2h5NEJ1bjlDNDY1ajdnaGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuy3lKnfF
6l5svLQ1JRDrY6Lzf5ypgblMg1/MoIwzB/USi956GOLktf8+41+KPTZqH67ZyvUe
ESoNSzJ/Wu1kZtK4QK+zSKtrIEH8MwUY5LiaVRanmfvuyU+pgjq6inMPCiRikZ+Q
YrOVUQiZDBWsfcsbk8+2C0HaKAFrVHtMym3v3/ns2FqnCR8XBgKdqd2JCwU/s/bX
dctCiOosRqaAcWKRh13AX1/pgDenz2GkVWyOW9Ruw330WdR2/w+xWdGCPJttz6nM
oyRe1VEBkQDm5yAIA8GEw0L9XqkChwz6gIKkJNr8PbZKqxCzFgA2xVActjRBR8BW
Owcpf2aa7a4Sbw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:08 2026 by rpki-client