
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: fva1GlkhR0RjUXXJP7Q7JVPL9M+B3dqXopzJgGhteUs=
Subject key identifier: 23:22:4E:B5:AD:FB:C2:DA:BF:F1:C8:2B:F4:62:D6:83:FA:46:75:52
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 019EBEED1FD8796B339DA37AC3737A6487AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0DDB
Signing time: Sat 13 Jun 2026 03:01:11 +0000
Manifest this update: Sat 13 Jun 2026 03:01:11 +0000
Manifest next update: Sun 14 Jun 2026 03:01:11 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: e6SGBpEueQmIcVpyswGA0l6OBQT8+mC5Bfzddk6Yqns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:1f:d8:79:6b:33:9d:a3:7a:c3:73:7a:64:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Jun 13 03:01:11 2026 GMT
Not After : Jun 14 03:01:11 2026 GMT
Subject: CN=23224eb5adfbc2dabff1c82bf462d683fa467552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:5d:27:1b:e4:a7:39:54:55:ec:e8:9b:17:
b3:18:3a:3f:6c:88:bc:e1:5f:6f:f4:95:16:d5:8c:
83:28:5e:37:f7:36:6e:d6:56:91:68:e7:56:86:0b:
5c:d5:84:24:7d:1a:51:2c:d8:dd:7b:37:93:e8:b5:
ab:55:73:d8:f8:1c:a9:e6:7f:f1:4d:c3:51:84:ce:
24:fc:9a:81:6c:cd:d6:61:2a:8c:ca:92:4f:80:4a:
ca:bc:c4:7d:24:55:83:a2:61:39:4a:97:fc:34:ae:
9c:c1:0d:c0:85:4c:04:11:53:54:9b:af:38:88:12:
39:fa:c7:18:08:58:36:dd:07:c2:57:c5:b7:5f:52:
af:81:a6:fb:ac:f8:86:4d:94:1a:6f:3e:7f:a8:35:
f3:7c:99:49:07:0d:a4:67:a4:3e:38:b5:c3:79:33:
d7:87:76:eb:38:a5:0d:a8:be:4e:6a:36:8e:04:c5:
e2:3d:25:03:ab:38:7b:8b:ed:5e:91:f6:6b:00:cc:
0c:2e:bd:24:3f:6a:e6:a0:e7:34:dd:55:99:20:1d:
39:ff:29:50:f4:0f:96:86:c8:6c:80:59:ac:17:c6:
04:ee:05:e5:17:11:40:01:a4:86:d3:91:cd:2d:98:
a0:ce:92:66:72:1f:4c:94:fd:36:0f:54:19:96:00:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:22:4E:B5:AD:FB:C2:DA:BF:F1:C8:2B:F4:62:D6:83:FA:46:75:52
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:73:a5:b4:95:bd:dc:f1:2e:37:61:45:24:6f:f2:17:f5:
ad:5c:02:55:b1:fa:11:e5:0b:f3:44:24:75:f0:ef:98:43:31:
78:bf:fc:c6:0d:3f:af:d6:cd:e7:3a:d5:9b:23:1d:e8:43:32:
c6:19:19:17:a1:fc:f0:3e:3c:3f:4f:f9:73:69:59:6a:bd:f3:
38:35:8a:4d:8f:2f:aa:c4:5f:78:fb:94:e0:f2:ff:f2:8b:7d:
0f:f7:70:9d:a1:e6:62:c5:8d:e7:45:e9:df:af:c3:a4:64:13:
bc:70:3d:4e:c3:c4:a5:cf:e8:d5:12:52:b9:93:c9:0b:83:aa:
a3:db:8e:1a:4e:73:4d:a4:e6:6a:73:17:8f:62:c0:3f:76:37:
20:62:b5:c9:45:68:e6:9d:c0:57:a7:7f:22:f4:61:20:e1:d8:
eb:1e:a9:77:f8:94:ca:3d:34:25:b9:2f:26:25:5d:2e:ff:33:
df:e3:8c:04:33:2a:25:73:60:76:27:d1:f5:ce:6e:27:3d:2a:
05:77:11:5e:ee:ac:2d:03:66:63:54:f4:56:2e:e8:15:7c:30:
f2:14:9c:17:fa:56:e8:25:9d:93:c9:46:86:d2:cd:a9:37:9c:
69:9c:d8:5f:cf:43:68:90:74:0c:72:e1:15:5e:ef:2e:1f:78:
19:49:5b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7R/YeWsznaN6w3N6ZIevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmU0YTA5Njc3YjAwYmJjMzMzZjcxNjc4ZWFhODBhNzFi
NjJhNDgwHhcNMjYwNjEzMDMwMTExWhcNMjYwNjE0MDMwMTExWjAzMTEwLwYDVQQD
EygyMzIyNGViNWFkZmJjMmRhYmZmMWM4MmJmNDYyZDY4M2ZhNDY3NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ldJxvkpzlUVezomxezGDo/bIi8
4V9v9JUW1YyDKF439zZu1laRaOdWhgtc1YQkfRpRLNjdezeT6LWrVXPY+Byp5n/x
TcNRhM4k/JqBbM3WYSqMypJPgErKvMR9JFWDomE5Spf8NK6cwQ3AhUwEEVNUm684
iBI5+scYCFg23QfCV8W3X1Kvgab7rPiGTZQabz5/qDXzfJlJBw2kZ6Q+OLXDeTPX
h3brOKUNqL5OajaOBMXiPSUDqzh7i+1ekfZrAMwMLr0kP2rmoOc03VWZIB05/ylQ
9A+WhshsgFmsF8YE7gXlFxFAAaSG05HNLZigzpJmch9MlP02D1QZlgDybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMiTrWt+8Lav/HIK/Ri1oP6RnVSMB8GA1UdIwQY
MBaAFOz+SglnewC7wzP3FnjqqApxtipIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEt
ZWQ5MzAyZmVkZGNiLzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hNGE0YTgtMmE5My00OGFkLWI4OTEtZWQ5MzAyZmVkZGNi
LzEvN1A1S0NXZDdBTHZETV9jV2VPcW9DbkcyS2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwlzpbSV
vdzxLjdhRSRv8hf1rVwCVbH6EeUL80QkdfDvmEMxeL/8xg0/r9bN5zrVmyMd6EMy
xhkZF6H88D48P0/5c2lZar3zODWKTY8vqsRfePuU4PL/8ot9D/dwnaHmYsWN50Xp
36/DpGQTvHA9TsPEpc/o1RJSuZPJC4Oqo9uOGk5zTaTmanMXj2LAP3Y3IGK1yUVo
5p3AV6d/IvRhIOHY6x6pd/iUyj00JbkvJiVdLv8z3+OMBDMqJXNgdifR9c5uJz0q
BXcRXu6sLQNmY1T0Vi7oFXww8hScF/pW6CWdk8lGhtLNqTecaZzYX89DaJB0DHLh
FV7vLh94GUlbBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:24 2026 by rpki-client