Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: A6HWYnmbvgxqcU4jEBxkcHXRIAwL4yAZwM2NTTV0kiU=
Subject key identifier: E2:91:D7:08:87:59:E1:AF:D3:C6:EA:34:BC:B0:BE:5F:0C:AA:00:5E
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 019D99991EAF7B8E2437994D95F3D5016F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 08A0
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: ypljVC1pJrp0TE9Xab75m35KJp4cJiPhY3+Kyh/71yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1e:af:7b:8e:24:37:99:4d:95:f3:d5:01:6f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=e291d7088759e1afd3c6ea34bcb0be5f0caa005e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:08:a3:02:0c:38:85:fb:11:f7:a5:da:36:f7:
d0:d9:67:15:41:6b:c2:a4:e4:74:eb:a0:af:96:4b:
23:0d:1d:7a:f3:7a:94:44:e9:0d:ba:4c:dc:d9:ba:
dc:ff:4a:12:05:7b:4d:78:06:fe:c9:9c:64:51:3e:
3b:de:37:56:17:a5:85:3c:03:07:11:74:5d:4b:f3:
f3:41:1e:a6:a3:81:e3:86:ce:b9:78:b9:05:1f:72:
79:28:5c:8c:ca:48:de:64:73:70:b0:5b:8f:f6:6d:
0a:48:3b:03:23:d2:a3:50:d8:cc:44:4e:b3:24:2e:
d5:6c:7f:f0:9a:61:1a:42:5c:07:1e:cf:e0:24:89:
cf:05:2f:1a:16:1d:bd:6a:b6:20:ed:24:d7:4f:f9:
3f:5f:a1:44:08:c1:79:58:69:dd:ac:d8:aa:0b:aa:
8d:ad:c9:8c:73:7b:0e:c8:c8:a3:e3:f9:16:7d:df:
42:de:f7:3a:31:ae:3d:af:8e:11:92:99:85:38:73:
72:96:04:a8:85:c2:ec:e3:0f:af:f0:96:4e:86:42:
2e:c5:a9:e6:99:7d:d1:20:a3:e5:38:a3:5f:c2:b7:
79:5a:5b:ca:38:6e:e7:1b:46:97:44:a7:a8:3d:13:
83:81:c1:ad:4c:95:36:7d:8e:9f:d5:d7:db:d4:b8:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:91:D7:08:87:59:E1:AF:D3:C6:EA:34:BC:B0:BE:5F:0C:AA:00:5E
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:aa:84:7c:86:0f:31:67:dd:5c:36:2b:27:ae:7e:e7:b0:
92:20:15:5f:de:67:1f:7a:37:ae:df:fe:39:e5:7f:c3:87:de:
78:06:4e:c1:8d:2e:9e:90:14:5a:65:7e:9d:4b:f9:ec:56:60:
14:97:51:91:3e:9a:a4:17:98:e2:2e:4c:d1:82:c8:82:eb:32:
83:e8:d0:c4:9a:eb:bc:d9:33:fb:fd:fa:27:27:33:ad:61:c6:
0e:b5:50:2d:28:02:bb:bd:69:b9:a6:d6:6d:6b:25:9d:d5:73:
b8:da:3e:7d:0b:88:9a:8c:9e:b4:8c:d4:4d:38:d3:f2:47:93:
fe:19:f8:93:e7:05:65:a5:f8:f5:01:6d:7a:f2:42:e3:c5:75:
1b:39:76:14:f0:97:fa:a5:d5:2b:54:fa:c2:92:04:dc:91:df:
52:5d:75:c5:d2:31:c0:fe:d2:9d:07:c0:fa:b2:b2:33:33:b3:
95:5d:0d:f0:8e:24:de:6d:cb:5a:ee:e0:2a:c9:73:09:ee:09:
29:65:f1:3a:37:07:4c:39:48:e5:c3:b3:40:21:6e:02:8a:a3:
27:8a:71:6a:f0:e0:63:70:3d:41:be:91:c6:a3:20:6f:89:e5:
ec:ea:22:b5:11:9c:4b:96:6f:0b:a8:5b:86:10:57:e6:9c:a4:
74:f4:52:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmR6ve44kN5lNlfPVAW+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjkyOTM4ZWE4Y2Y3YTNmNjA5OWNhNmQ2ZTNlNWEyN2I4
OTdjZjAwHhcNMjYwNDE3MDQwMDQyWhcNMjYwNDE4MDQwMDQyWjAzMTEwLwYDVQQD
EyhlMjkxZDcwODg3NTllMWFmZDNjNmVhMzRiY2IwYmU1ZjBjYWEwMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QijAgw4hfsR96XaNvfQ2WcVQWvC
pOR066CvlksjDR1683qUROkNukzc2brc/0oSBXtNeAb+yZxkUT473jdWF6WFPAMH
EXRdS/PzQR6mo4Hjhs65eLkFH3J5KFyMykjeZHNwsFuP9m0KSDsDI9KjUNjMRE6z
JC7VbH/wmmEaQlwHHs/gJInPBS8aFh29arYg7STXT/k/X6FECMF5WGndrNiqC6qN
rcmMc3sOyMij4/kWfd9C3vc6Ma49r44RkpmFOHNylgSohcLs4w+v8JZOhkIuxanm
mX3RIKPlOKNfwrd5WlvKOG7nG0aXRKeoPRODgcGtTJU2fY6f1dfb1LhYWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKR1wiHWeGv08bqNLywvl8MqgBeMB8GA1UdIwQY
MBaAFO65KTjqjPej9gmcptbj5aJ7iXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgt
MGJmMDI4MmE2ZDY3LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgtMGJmMDI4MmE2ZDY3
LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKOqhHyG
DzFn3Vw2KyeufuewkiAVX95nH3o3rt/+OeV/w4feeAZOwY0unpAUWmV+nUv57FZg
FJdRkT6apBeY4i5M0YLIgusyg+jQxJrrvNkz+/36JyczrWHGDrVQLSgCu71puabW
bWslndVzuNo+fQuImoyetIzUTTjT8keT/hn4k+cFZaX49QFtevJC48V1Gzl2FPCX
+qXVK1T6wpIE3JHfUl11xdIxwP7SnQfA+rKyMzOzlV0N8I4k3m3LWu7gKslzCe4J
KWXxOjcHTDlI5cOzQCFuAoqjJ4pxavDgY3A9Qb6RxqMgb4nl7OoitRGcS5ZvC6hb
hhBX5pykdPRSaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:42 2026 by rpki-client