Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: IuUI7K1i88tGV2Jz0UQLp7lq5oa9yFaBpczkVAkdY0U=
Subject key identifier: 9A:B2:B5:F5:C6:E7:0A:1A:82:5F:19:6D:6A:06:65:7D:C7:49:43:40
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 019D999921182FF43A83C3E4408AC306AD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 0CD0
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: +wZguKf4f6Rd19lYOlHa7XGp4MKU4DLw0S1251pJtyw=)
2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:21:18:2f:f4:3a:83:c3:e4:40:8a:c3:06:ad:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=9ab2b5f5c6e70a1a825f196d6a06657dc7494340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:8c:95:ff:0a:78:e2:96:ce:c0:82:4c:e4:
75:55:34:f3:86:2c:0b:6b:43:8e:7d:a2:d0:ae:80:
0c:3b:1e:73:65:08:8d:8f:32:c6:4b:59:e2:28:f0:
cb:83:26:e7:70:81:d1:19:d0:d4:31:6f:54:eb:8b:
39:99:77:96:0a:a9:79:55:30:06:0c:8f:db:b9:f3:
83:ef:a2:61:f3:2a:d4:71:0c:a4:9c:4b:01:4d:82:
69:f4:9c:e4:40:52:4d:e5:b2:47:65:01:30:ef:5f:
bc:d4:f8:ec:08:06:e5:7b:49:4a:a4:88:00:20:87:
6e:5f:25:8c:fb:fc:9c:53:ec:ed:88:46:28:03:ef:
1b:91:76:80:78:b5:13:0f:61:9d:e8:53:c2:8d:70:
c3:d6:5b:93:9d:18:07:9c:39:5c:fe:61:4c:0a:2e:
03:c4:fd:1b:97:85:08:f9:a8:4b:ea:85:d0:bb:82:
15:df:c4:14:67:6b:63:88:d5:fb:53:41:5d:65:f9:
6b:d8:bb:ad:30:6c:ee:8c:f1:0d:24:6d:e0:c7:bd:
88:21:b1:8a:1e:03:47:41:fc:fa:b4:04:35:fe:97:
8d:44:9c:19:5c:45:cd:14:4a:14:3b:94:b6:b3:f1:
2f:ff:72:79:8d:d5:72:bc:af:3a:e2:64:ea:35:7e:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:B5:F5:C6:E7:0A:1A:82:5F:19:6D:6A:06:65:7D:C7:49:43:40
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cf:02:a1:39:47:1b:5c:65:fd:af:3f:14:fb:42:a5:5f:d8:
aa:f9:08:7b:28:9e:1a:5e:17:9d:db:e0:39:ee:22:54:98:cd:
47:f0:0d:1d:4a:89:c4:24:5b:0f:27:1a:25:30:7a:7e:3d:79:
b7:b0:31:a0:46:f4:8e:08:bd:1c:13:31:f9:e2:4b:98:82:c8:
f6:a2:a7:ba:12:21:19:03:ba:e6:4d:d6:34:e6:cf:06:8f:3f:
be:19:b3:8c:e2:0f:9a:82:a6:e0:3e:28:ca:a7:a2:c8:81:a2:
11:6e:02:d7:9d:38:d3:fb:2a:a2:8c:f9:e8:3d:2f:1a:c6:86:
d5:f2:1b:6b:75:64:72:41:7c:c3:6f:a4:3e:9f:5f:80:56:76:
12:00:7a:c2:41:3e:f4:d7:82:30:d6:25:9a:91:6b:cd:7b:7f:
97:8b:a0:d9:a0:35:02:f9:4c:41:ad:f3:12:b3:3c:df:a3:bc:
ed:b1:6b:07:d2:97:33:d3:15:a3:a7:02:6c:c4:07:70:ed:23:
9e:92:eb:0c:6f:dc:11:9b:80:7d:c6:bf:29:57:74:c2:b4:4a:
60:1b:b3:e1:1a:bb:12:93:75:91:1d:ca:3e:4b:c3:07:4c:ec:
54:6e:f2:f0:5b:d9:e3:b7:0e:7b:55:dd:d6:f4:2b:2a:8f:41:
bf:a9:75:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmSEYL/Q6g8PkQIrDBq1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGIyNzkwNGQxMWJjZjUzNjc3NGQ1NDE1NDIwODJjZmFm
ZThlYWEwHhcNMjYwNDE3MDQwMDQyWhcNMjYwNDE4MDQwMDQyWjAzMTEwLwYDVQQD
Eyg5YWIyYjVmNWM2ZTcwYTFhODI1ZjE5NmQ2YTA2NjU3ZGM3NDk0MzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQSMlf8KeOKWzsCCTOR1VTTzhiwL
a0OOfaLQroAMOx5zZQiNjzLGS1niKPDLgybncIHRGdDUMW9U64s5mXeWCql5VTAG
DI/bufOD76Jh8yrUcQyknEsBTYJp9JzkQFJN5bJHZQEw71+81PjsCAble0lKpIgA
IIduXyWM+/ycU+ztiEYoA+8bkXaAeLUTD2Gd6FPCjXDD1luTnRgHnDlc/mFMCi4D
xP0bl4UI+ahL6oXQu4IV38QUZ2tjiNX7U0FdZflr2LutMGzujPENJG3gx72IIbGK
HgNHQfz6tAQ1/peNRJwZXEXNFEoUO5S2s/Ev/3J5jdVyvK864mTqNX42yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqytfXG5woagl8ZbWoGZX3HSUNAMB8GA1UdIwQY
MBaAFO6LJ5BNEbz1NndNVBVCCCz6/o6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYt
Y2M2NGQxM2E2MTJjLzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kYjRkMzgtYTUxNC00MjdlLThkNzYtY2M2NGQxM2E2MTJj
LzEvN29zbmtFMFJ2UFUyZDAxVUZVSUlMUHItanFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc8CoTlH
G1xl/a8/FPtCpV/YqvkIeyieGl4XndvgOe4iVJjNR/ANHUqJxCRbDycaJTB6fj15
t7AxoEb0jgi9HBMx+eJLmILI9qKnuhIhGQO65k3WNObPBo8/vhmzjOIPmoKm4D4o
yqeiyIGiEW4C15040/sqooz56D0vGsaG1fIba3VkckF8w2+kPp9fgFZ2EgB6wkE+
9NeCMNYlmpFrzXt/l4ug2aA1AvlMQa3zErM836O87bFrB9KXM9MVo6cCbMQHcO0j
npLrDG/cEZuAfca/KVd0wrRKYBuz4Rq7EpN1kR3KPkvDB0zsVG7y8FvZ47cOe1Xd
1vQrKo9Bv6l1RQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:03 2026 by rpki-client