Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: wZbRcoEGs33eoBbUYw8drFlmu6LYdllo7H0fPqJF5K0=
Subject key identifier: EC:70:63:FA:C8:F7:72:9C:26:70:75:46:2B:E9:6B:D2:5C:7D:5D:F4
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 019CA9EA93BCEDD52BA04C53C4AFBD554CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 15:00:48 +0000
Manifest this update: Sun 01 Mar 2026 15:00:48 +0000
Manifest next update: Mon 02 Mar 2026 15:00:48 +0000
Files and hashes: 1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: qqZhvwwT6RAA5llqV5mpJ5PsTNt/1cWKZYEI+5zj4MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:93:bc:ed:d5:2b:a0:4c:53:c4:af:bd:55:4c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Mar 1 15:00:48 2026 GMT
Not After : Mar 2 15:00:48 2026 GMT
Subject: CN=ec7063fac8f7729c267075462be96bd25c7d5df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:91:6d:e4:3d:d8:c1:12:7b:e8:e8:d7:cc:
e0:a5:6e:4b:a8:df:ff:e1:94:f8:ad:8b:86:a2:db:
80:e9:35:5f:2b:57:84:b6:64:ce:ee:5b:cd:cd:2c:
37:b5:57:60:7f:cf:c7:d9:31:4e:2f:d0:ab:fc:a7:
66:1a:76:ef:43:a1:5a:60:34:f6:2c:e0:4e:20:ef:
b5:82:dd:b8:1e:aa:54:41:96:ad:bd:43:b3:8a:5d:
69:38:33:de:a5:c2:3c:0b:ca:0a:a3:1f:78:8d:e1:
50:40:44:e5:fe:d5:30:97:b7:81:61:af:64:83:a4:
48:7a:1c:f2:fa:21:26:e4:c2:95:06:01:4b:3a:c5:
3d:eb:8e:8a:6b:13:ad:21:1b:5c:a4:eb:55:eb:59:
af:40:3a:4c:f0:5c:10:a3:6c:e2:c9:28:de:f9:f4:
e2:5f:a2:78:c1:7b:8c:94:ed:a6:0e:d9:51:55:a8:
a8:19:5e:c4:bb:1e:f7:65:10:3d:a8:14:5f:b8:30:
0d:15:ee:e4:29:08:8c:27:25:1f:8b:9d:37:46:d5:
86:af:66:0e:53:c0:aa:8b:86:0f:a3:d6:57:d7:7f:
9f:db:4f:bb:47:9c:ef:b2:4b:41:ef:38:38:a4:0a:
e2:96:81:e9:db:1c:e1:7a:47:2e:5a:b7:a7:9b:6d:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:63:FA:C8:F7:72:9C:26:70:75:46:2B:E9:6B:D2:5C:7D:5D:F4
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:35:4a:bb:9e:ad:0e:5f:66:34:5e:ff:27:e6:2f:82:d4:5c:
78:d6:2e:34:3a:2d:33:c0:88:f9:32:ed:21:5e:19:e9:f0:41:
b6:bf:27:3f:be:23:17:2c:37:d1:42:86:25:cb:bb:ee:92:9f:
47:aa:e6:1f:ea:66:c0:bf:65:5a:5f:b5:60:33:d8:cc:22:83:
af:02:ed:94:4e:e0:31:67:16:da:d7:c8:da:f7:f8:96:25:69:
3e:61:d5:82:9d:23:1f:14:9b:0e:69:b8:3b:8b:ce:1b:e0:4e:
b8:86:19:8a:9f:c0:ab:0f:04:b4:a6:ca:71:9e:71:6b:02:90:
18:ed:ab:6c:22:7d:82:bc:b8:63:f5:9b:d8:37:42:84:06:d5:
bf:0b:cc:db:6c:81:67:f4:e6:a0:0e:80:10:20:6a:37:b6:02:
e6:f7:b0:30:ff:a9:0f:7e:71:e6:80:d1:88:6e:39:a7:4a:44:
1a:7e:83:f2:c7:b3:58:11:53:b6:e0:ab:d3:f8:3a:a6:3f:6e:
b3:be:47:80:22:75:2d:5a:19:40:2c:47:23:6e:dd:a3:b3:88:
8c:45:8f:af:16:fb:96:d8:d3:b7:44:99:54:44:57:db:4b:a0:
fc:fa:76:92:6d:bc:68:c3:5e:37:78:f8:02:91:37:d4:82:83:
0d:8c:5a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6pO87dUroExTxK+9VUzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj
M2M5OTAwHhcNMjYwMzAxMTUwMDQ4WhcNMjYwMzAyMTUwMDQ4WjAzMTEwLwYDVQQD
EyhlYzcwNjNmYWM4Zjc3MjljMjY3MDc1NDYyYmU5NmJkMjVjN2Q1ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwqRbeQ92MESe+jo18zgpW5LqN//
4ZT4rYuGotuA6TVfK1eEtmTO7lvNzSw3tVdgf8/H2TFOL9Cr/KdmGnbvQ6FaYDT2
LOBOIO+1gt24HqpUQZatvUOzil1pODPepcI8C8oKox94jeFQQETl/tUwl7eBYa9k
g6RIehzy+iEm5MKVBgFLOsU9646KaxOtIRtcpOtV61mvQDpM8FwQo2ziySje+fTi
X6J4wXuMlO2mDtlRVaioGV7Eux73ZRA9qBRfuDANFe7kKQiMJyUfi503RtWGr2YO
U8Cqi4YPo9ZX13+f20+7R5zvsktB7zg4pAriloHp2xzhekcuWrenm204BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxwY/rI93KcJnB1Rivpa9JcfV30MB8GA1UdIwQY
MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt
OGE4NjVmZDYyMWM4LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4
LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7zVKu56t
Dl9mNF7/J+YvgtRceNYuNDotM8CI+TLtIV4Z6fBBtr8nP74jFyw30UKGJcu77pKf
R6rmH+pmwL9lWl+1YDPYzCKDrwLtlE7gMWcW2tfI2vf4liVpPmHVgp0jHxSbDmm4
O4vOG+BOuIYZip/Aqw8EtKbKcZ5xawKQGO2rbCJ9gry4Y/Wb2DdChAbVvwvM22yB
Z/TmoA6AECBqN7YC5vewMP+pD35x5oDRiG45p0pEGn6D8sezWBFTtuCr0/g6pj9u
s75HgCJ1LVoZQCxHI27do7OIjEWPrxb7ltjTt0SZVERX20ug/Pp2km28aMNeN3j4
ApE31IKDDYxa+g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:31 2026 by rpki-client