
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
File: 7wC6UdY7F3WDfocvvehOLdCHT2M.mft (raw, json)
Hash identifier: tO6UoYJ71SgVBkwbIjsUZip7fSBsZA7iiO8WgbYe9t8=
Subject key identifier: F0:2D:10:85:52:B3:DA:BA:3E:5B:EA:C8:0E:AD:DC:78:92:AC:6C:53
Authority key identifier: EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
Certificate issuer: /CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Certificate serial: 019CAAC60662669A6FA9D3C9537EE0DD6D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
Manifest number: 14ED
Signing time: Sun 01 Mar 2026 19:00:30 +0000
Manifest this update: Sun 01 Mar 2026 19:00:30 +0000
Manifest next update: Mon 02 Mar 2026 19:00:30 +0000
Files and hashes: 1: 7wC6UdY7F3WDfocvvehOLdCHT2M.crl (hash: 8cm785VpbfUvclmdfvnJ089MF6gYU2RJQTxYEinwt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:06:62:66:9a:6f:a9:d3:c9:53:7e:e0:dd:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef00ba51d63b1775837e872fbde84e2dd0874f63
Validity
Not Before: Mar 1 19:00:30 2026 GMT
Not After : Mar 2 19:00:30 2026 GMT
Subject: CN=f02d108552b3daba3e5beac80eaddc7892ac6c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:fa:fc:a8:db:7e:27:e4:30:fc:df:97:63:
02:a7:ba:9f:40:f6:a5:88:ae:34:37:8f:74:14:2d:
de:c5:55:a5:74:48:a9:e5:33:e4:07:83:99:4c:53:
d8:a0:a9:f3:57:46:8b:1c:45:db:6f:78:94:48:87:
3e:96:7c:39:67:d8:8e:a7:85:32:0e:fe:27:f2:29:
80:f1:31:12:c2:10:0b:59:4f:95:53:e5:4f:00:cb:
b3:4a:19:23:27:42:da:ea:ea:78:6b:62:0e:eb:0a:
9e:de:fa:a3:fa:00:20:66:39:5e:17:c1:06:08:66:
e6:d6:85:a2:50:c4:56:c0:ac:05:12:6f:b6:d0:03:
ce:01:50:39:14:3c:4e:17:8d:a0:87:5c:a0:df:39:
c1:18:18:b3:8b:83:5d:ff:b4:b9:58:9d:92:37:5c:
51:6c:d1:03:45:d6:38:0c:3f:6c:58:c0:76:90:9b:
fd:1a:98:23:78:b0:a1:fa:d2:b7:0e:00:b0:01:1a:
83:ed:28:5e:7b:48:cd:33:29:29:6d:9b:72:c0:e2:
9d:31:a4:38:9e:6e:5a:8d:6d:63:2d:e8:91:62:63:
9c:62:ee:c6:68:84:f8:2e:f8:e4:49:c0:f6:df:54:
63:41:48:2a:71:18:33:73:27:7f:66:92:d8:6c:2f:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:10:85:52:B3:DA:BA:3E:5B:EA:C8:0E:AD:DC:78:92:AC:6C:53
X509v3 Authority Key Identifier:
keyid:EF:00:BA:51:D6:3B:17:75:83:7E:87:2F:BD:E8:4E:2D:D0:87:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wC6UdY7F3WDfocvvehOLdCHT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e253f6-83ea-4c7e-8742-85c59544c6f3/1/7wC6UdY7F3WDfocvvehOLdCHT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a7:7e:30:69:b5:14:07:d8:bd:81:b6:8f:4e:69:ed:a8:cc:
fc:7d:a8:5e:53:82:84:ba:19:93:40:54:85:f4:06:a5:2f:cf:
f5:17:82:ab:89:f5:dd:19:49:1c:cd:83:e5:7e:10:76:b3:ef:
84:11:d9:cb:f3:3d:5a:bb:37:41:20:ca:0b:c6:29:a9:81:e6:
fe:20:19:e3:73:8e:a7:e2:9a:bf:95:05:d6:60:36:06:b7:eb:
01:b3:0c:00:97:fb:c6:9d:86:fd:1d:b7:32:b8:cc:18:4d:76:
44:81:6e:1d:53:15:d6:d7:cb:d0:d3:01:bb:c6:f8:a5:a7:31:
0a:6f:01:79:63:7c:28:b4:52:73:b0:21:7f:80:86:17:64:1e:
c5:9f:30:33:90:5c:cf:2b:54:5d:fb:51:fd:73:58:56:89:e3:
e7:2b:4c:16:36:e4:e1:db:60:3d:2e:da:7c:4e:a6:5b:4c:e1:
98:32:e9:fd:db:18:ff:88:7f:3d:af:6a:c1:b4:be:bc:81:dd:
a7:ca:4e:50:ac:ce:e3:f7:06:4a:30:96:49:a9:2c:78:e8:97:
12:9c:ea:95:99:19:83:d2:b7:8d:54:01:b5:60:fc:24:da:bc:
75:98:c2:4c:20:0a:a8:f0:c5:8f:ac:bb:53:d2:a9:83:f4:9d:
68:7d:2d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxgZiZppvqdPJU37g3W11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDBiYTUxZDYzYjE3NzU4MzdlODcyZmJkZTg0ZTJkZDA4
NzRmNjMwHhcNMjYwMzAxMTkwMDMwWhcNMjYwMzAyMTkwMDMwWjAzMTEwLwYDVQQD
EyhmMDJkMTA4NTUyYjNkYWJhM2U1YmVhYzgwZWFkZGM3ODkyYWM2YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ur6/KjbfifkMPzfl2MCp7qfQPal
iK40N490FC3exVWldEip5TPkB4OZTFPYoKnzV0aLHEXbb3iUSIc+lnw5Z9iOp4Uy
Dv4n8imA8TESwhALWU+VU+VPAMuzShkjJ0La6up4a2IO6wqe3vqj+gAgZjleF8EG
CGbm1oWiUMRWwKwFEm+20APOAVA5FDxOF42gh1yg3znBGBizi4Nd/7S5WJ2SN1xR
bNEDRdY4DD9sWMB2kJv9GpgjeLCh+tK3DgCwARqD7Shee0jNMykpbZtywOKdMaQ4
nm5ajW1jLeiRYmOcYu7GaIT4LvjkScD231RjQUgqcRgzcyd/ZpLYbC8dnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAtEIVSs9q6PlvqyA6t3HiSrGxTMB8GA1UdIwQY
MBaAFO8AulHWOxd1g36HL73oTi3Qh09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDIt
ODVjNTk1NDRjNmYzLzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9lMjUzZjYtODNlYS00YzdlLTg3NDItODVjNTk1NDRjNmYz
LzEvN3dDNlVkWTdGM1dEZm9jdnZlaE9MZENIVDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6d+MGm1
FAfYvYG2j05p7ajM/H2oXlOChLoZk0BUhfQGpS/P9ReCq4n13RlJHM2D5X4QdrPv
hBHZy/M9Wrs3QSDKC8YpqYHm/iAZ43OOp+Kav5UF1mA2BrfrAbMMAJf7xp2G/R23
MrjMGE12RIFuHVMV1tfL0NMBu8b4pacxCm8BeWN8KLRSc7Ahf4CGF2QexZ8wM5Bc
zytUXftR/XNYVonj5ytMFjbk4dtgPS7afE6mW0zhmDLp/dsY/4h/Pa9qwbS+vIHd
p8pOUKzO4/cGSjCWSakseOiXEpzqlZkZg9K3jVQBtWD8JNq8dZjCTCAKqPDFj6y7
U9Kpg/SdaH0tIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:55 2026 by rpki-client