Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: i/c9vEcL2mtXgzTzxwaK8IB4l5zFlct2qo7MqK8nizU=
Subject key identifier: A4:42:BC:7D:C7:2B:59:0A:A0:3D:4B:7E:21:E1:7B:21:77:73:1F:69
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019CAB345C77556DE8A91918F258ED960F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: Ikq1+HvHg3inc/iYNviuE4ptLXkxeI1dpzA2hUNCI3g=)
2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5c:77:55:6d:e8:a9:19:18:f2:58:ed:96:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=a442bc7dc72b590aa03d4b7e21e17b2177731f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:3a:55:68:99:ef:40:39:2f:b9:8b:6d:a2:
a1:07:f6:a0:11:39:56:9a:4d:9b:2f:9f:24:d9:ca:
f8:a4:f1:5c:98:eb:37:41:5e:66:68:35:c1:75:e7:
42:c6:6b:67:1b:9d:01:a5:2b:ae:c1:6a:49:58:d2:
59:33:e7:b0:cc:ad:f8:c8:c7:1e:72:83:86:38:16:
b4:fd:09:99:49:08:13:08:7d:89:30:40:c5:a7:51:
28:81:55:2c:a2:d1:b3:34:c0:8f:83:f6:1a:51:5f:
31:55:9d:a7:c7:4c:84:9f:d1:e6:86:5c:ef:5e:74:
f2:e4:38:e1:c8:d3:d7:ad:1d:0c:da:3c:f0:77:1b:
41:70:1c:d4:76:98:6d:d6:1c:58:e5:09:ee:af:5e:
27:7f:03:c0:9f:d7:0e:5f:1e:80:b2:5e:fb:9b:3b:
91:e9:01:1d:f6:8f:95:1a:96:d3:7f:fa:3c:8e:03:
0a:35:c2:8a:5e:e9:ae:02:6f:dd:4e:dc:ea:03:a2:
d1:ac:a8:1d:e6:38:65:02:fb:1c:47:40:d0:50:31:
af:df:bf:7f:fd:d0:eb:5b:87:37:e2:b9:97:20:6e:
eb:95:7e:02:32:2b:9d:25:92:da:0a:76:fe:dc:9b:
86:72:72:c7:8f:ca:ea:1f:55:29:62:a3:33:a1:11:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:BC:7D:C7:2B:59:0A:A0:3D:4B:7E:21:E1:7B:21:77:73:1F:69
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fa:46:12:34:ad:12:dc:48:ba:3e:d5:80:58:60:08:d7:e3:
32:6c:66:1d:64:e6:bd:96:5f:fc:70:98:e9:92:55:44:a0:68:
a2:a9:31:f1:b1:a7:9a:42:8a:cd:e7:a4:a1:e5:b8:70:94:fa:
b4:8d:5e:98:9f:b5:dd:4d:73:1c:66:c2:40:3f:36:c6:16:17:
e7:01:73:cb:c3:69:c5:6c:3e:39:c0:57:2a:d2:df:43:f5:07:
f1:f0:1d:8e:de:09:d0:73:32:a8:14:ee:3b:7c:0b:e8:90:9f:
98:f3:ba:88:1a:bd:37:ef:46:9d:25:8e:e5:b8:49:5d:8f:26:
fb:a1:30:10:6d:dc:a7:1d:16:cb:8f:60:fb:6e:85:41:2e:60:
f3:59:20:d2:16:9c:0d:e1:02:b7:0d:73:87:b9:00:dc:08:3d:
47:d6:8e:6a:7e:34:50:6a:c7:36:c8:44:16:95:95:2a:56:9c:
ff:42:a0:b9:47:81:98:0f:94:45:d1:0b:5e:e1:8b:7e:9a:6d:
a4:79:37:b2:da:44:40:a8:47:ce:d2:aa:7c:70:80:ea:05:d8:
84:b2:b8:58:f5:4a:56:4c:f1:69:64:a3:f1:15:6d:a7:aa:6d:
08:86:2e:6a:95:c6:76:38:94:9b:d3:65:b4:55:bf:dd:e2:c5:
bb:bc:bf:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNFx3VW3oqRkY8ljtlg8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTEzMTRlMDRlYzk2NzZmMmI2MDI0OGUxYjliZDAyZWYw
MGUxNjgwHhcNMjYwMzAxMjEwMTAxWhcNMjYwMzAyMjEwMTAxWjAzMTEwLwYDVQQD
EyhhNDQyYmM3ZGM3MmI1OTBhYTAzZDRiN2UyMWUxN2IyMTc3NzMxZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuc6VWiZ70A5L7mLbaKhB/agETlW
mk2bL58k2cr4pPFcmOs3QV5maDXBdedCxmtnG50BpSuuwWpJWNJZM+ewzK34yMce
coOGOBa0/QmZSQgTCH2JMEDFp1EogVUsotGzNMCPg/YaUV8xVZ2nx0yEn9Hmhlzv
XnTy5DjhyNPXrR0M2jzwdxtBcBzUdpht1hxY5Qnur14nfwPAn9cOXx6Asl77mzuR
6QEd9o+VGpbTf/o8jgMKNcKKXumuAm/dTtzqA6LRrKgd5jhlAvscR0DQUDGv379/
/dDrW4c34rmXIG7rlX4CMiudJZLaCnb+3JuGcnLHj8rqH1UpYqMzoRG7jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRCvH3HK1kKoD1LfiHheyF3cx9pMB8GA1UdIwQY
MBaAFOxRMU4E7JZ28rYCSOG5vQLvAOFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2It
M2JiYmNhMzEwZDcxLzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kYjUzOTktNmZiYi00Y2UyLTg5N2ItM2JiYmNhMzEwZDcx
LzEvN0ZFeFRnVHNsbmJ5dGdKSTRibTlBdThBNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPpGEjSt
EtxIuj7VgFhgCNfjMmxmHWTmvZZf/HCY6ZJVRKBooqkx8bGnmkKKzeekoeW4cJT6
tI1emJ+13U1zHGbCQD82xhYX5wFzy8NpxWw+OcBXKtLfQ/UH8fAdjt4J0HMyqBTu
O3wL6JCfmPO6iBq9N+9GnSWO5bhJXY8m+6EwEG3cpx0Wy49g+26FQS5g81kg0hac
DeECtw1zh7kA3Ag9R9aOan40UGrHNshEFpWVKlac/0KguUeBmA+URdELXuGLfppt
pHk3stpEQKhHztKqfHCA6gXYhLK4WPVKVkzxaWSj8RVtp6ptCIYuapXGdjiUm9Nl
tFW/3eLFu7y/6Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:20 2026 by rpki-client