Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: BVzF77ehSrKv/9htp8AJfygPIRrdEFOVwBh95ewvWcQ=
Subject key identifier: 2D:EC:47:BB:3A:65:13:8F:E8:F4:5F:AA:45:D6:1D:46:57:F3:1F:AD
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019CAAFD3C647D5A2FB6264342F761E7AA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 03BA
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: 6_ZblNm9ZRmYGkapxWHWsVXv62A.roa (hash: l1m5QGoRdp/fQXdkGDAgYT7UXYr7yNDfK4bT6u+JkJo=)
2: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: UtopK5b3hmt25vhoqPkOKMWaF97u86qpCBQM2FuicCc=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3c:64:7d:5a:2f:b6:26:43:42:f7:61:e7:aa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=2dec47bb3a65138fe8f45faa45d61d4657f31fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:c8:81:a1:ab:0a:8a:73:e0:5a:9f:9d:6c:
e3:b1:05:4e:92:c1:fa:02:77:ec:ed:d6:18:47:36:
15:af:85:e2:e7:9b:cb:2b:95:ef:9c:0f:b7:9b:e3:
23:e3:bc:de:90:0a:bc:c7:b6:0c:fa:a6:f3:2d:e2:
74:b7:75:d1:93:a7:f4:ee:81:e4:6d:1f:2b:b6:7e:
5b:15:dd:f4:a7:8c:07:82:a5:f6:b6:a3:9b:50:d0:
96:44:66:a3:8a:26:e6:a9:4b:aa:5e:7f:3c:ae:47:
d6:02:02:08:16:d8:39:fc:6e:21:12:9d:cf:4c:cc:
c5:6c:f8:24:23:30:28:f8:00:8f:49:dd:12:48:97:
47:1b:21:cf:4d:42:d3:8f:c6:83:57:07:64:65:19:
36:61:a2:04:01:88:0b:91:20:fe:24:2c:65:9e:cc:
2e:cc:eb:4b:f4:74:b5:27:e1:73:84:dd:d7:63:12:
f4:d9:74:99:cf:ff:b3:25:bd:2f:f7:8a:51:7c:f3:
c9:2b:87:fb:53:ba:87:c2:b7:ab:4c:31:d8:8e:56:
ed:ad:10:30:f9:71:ae:d0:9e:f8:51:55:df:4a:f7:
8e:65:e9:30:3e:65:19:a8:d4:aa:59:d0:c3:46:f9:
de:a8:66:87:22:3f:6b:98:57:18:0d:a4:cc:e7:f9:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EC:47:BB:3A:65:13:8F:E8:F4:5F:AA:45:D6:1D:46:57:F3:1F:AD
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:91:f9:b0:86:e8:30:c5:96:a6:ae:40:24:0f:3f:64:ca:ef:
ba:d5:00:be:85:8a:61:8f:66:1a:bd:99:5a:0d:40:b5:ca:22:
6e:8f:61:ce:c3:85:93:b3:d1:bb:6a:c6:ce:1a:c9:c6:05:d0:
c1:ca:f8:69:45:0a:67:87:ee:81:3a:e0:4b:c4:06:b1:c5:d3:
9f:13:19:b5:53:a7:b2:a8:69:70:e9:38:4d:73:47:e9:5d:a2:
78:10:91:56:13:bf:cb:65:5e:f6:9c:39:71:1f:80:c3:3e:2c:
ec:d2:4c:82:f5:b3:d6:9f:67:0c:5b:6f:4a:16:31:cb:ee:49:
c3:b4:9f:8e:3a:42:53:e8:50:60:ee:82:5b:46:8b:6f:94:8f:
0f:ad:af:66:e0:f2:85:ee:54:81:99:2e:80:b8:d5:5d:e1:3c:
68:6f:5f:c0:04:59:93:ab:65:09:c9:e8:f5:ad:ba:b3:79:9c:
c7:1b:d5:5a:12:71:b6:68:8f:0f:f2:d6:54:b6:6b:2c:6b:00:
d8:2f:b5:68:74:65:44:df:48:62:0c:0c:2e:ec:90:9c:a3:46:
79:b4:64:0f:0d:28:d0:b5:b8:fd:4b:3e:3a:6d:11:c3:a0:5c:
9b:a6:e4:b8:e1:c3:c9:0e:ec:a0:86:df:49:56:76:eb:1f:54:
87:e8:51:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/TxkfVovtiZDQvdh56qDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM1ZjRjODY4MGNlMGRiYTRhMDNkOTVlNjY1YzkzY2M5
OWNlYjkwHhcNMjYwMzAxMjAwMDQ4WhcNMjYwMzAyMjAwMDQ4WjAzMTEwLwYDVQQD
EygyZGVjNDdiYjNhNjUxMzhmZThmNDVmYWE0NWQ2MWQ0NjU3ZjMxZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo7IgaGrCopz4FqfnWzjsQVOksH6
Anfs7dYYRzYVr4Xi55vLK5XvnA+3m+Mj47zekAq8x7YM+qbzLeJ0t3XRk6f07oHk
bR8rtn5bFd30p4wHgqX2tqObUNCWRGajiibmqUuqXn88rkfWAgIIFtg5/G4hEp3P
TMzFbPgkIzAo+ACPSd0SSJdHGyHPTULTj8aDVwdkZRk2YaIEAYgLkSD+JCxlnswu
zOtL9HS1J+FzhN3XYxL02XSZz/+zJb0v94pRfPPJK4f7U7qHwrerTDHYjlbtrRAw
+XGu0J74UVXfSveOZekwPmUZqNSqWdDDRvneqGaHIj9rmFcYDaTM5/lfFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3sR7s6ZROP6PRfqkXWHUZX8x+tMB8GA1UdIwQY
MBaAFOxTX0yGgM4NukoD2V5mXJPMmc65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMt
NDJmMmZmODU5MzczLzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMtNDJmMmZmODU5Mzcz
LzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZH5sIbo
MMWWpq5AJA8/ZMrvutUAvoWKYY9mGr2ZWg1Atcoibo9hzsOFk7PRu2rGzhrJxgXQ
wcr4aUUKZ4fugTrgS8QGscXTnxMZtVOnsqhpcOk4TXNH6V2ieBCRVhO/y2Ve9pw5
cR+Awz4s7NJMgvWz1p9nDFtvShYxy+5Jw7SfjjpCU+hQYO6CW0aLb5SPD62vZuDy
he5UgZkugLjVXeE8aG9fwARZk6tlCcno9a26s3mcxxvVWhJxtmiPD/LWVLZrLGsA
2C+1aHRlRN9IYgwMLuyQnKNGebRkDw0o0LW4/Us+Om0Rw6Bcm6bkuOHDyQ7soIbf
SVZ26x9Uh+hRyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:29 2026 by rpki-client