Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: r4BktiUWBmFJCUkxwHPTOBUDUNNJr+PhXWYXe6kNrW8=
Subject key identifier: 7D:01:AA:6B:5B:04:2A:B1:F4:73:68:65:E7:89:BE:8D:54:21:9D:85
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 019CABD929DB943740199D38351CA6DDF06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0F13
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: OzdDRRFZ1PsDIJIhwEf7vR7BTbQF5hJ2aD9ObyAApc4=)
2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:29:db:94:37:40:19:9d:38:35:1c:a6:dd:f0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=7d01aa6b5b042ab1f4736865e789be8d54219d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:8b:b8:68:af:06:03:af:32:ab:5a:df:0f:
e0:b8:29:67:f7:68:db:b2:f7:6c:95:21:ba:97:f2:
11:36:1b:ad:b8:f7:5e:d4:3d:4a:e5:12:4b:d1:4a:
2e:c6:b9:bb:96:9f:9a:bc:3e:15:b2:08:95:8b:62:
0e:b7:a7:72:d5:c8:98:ad:30:cd:97:71:e0:3b:6c:
4e:46:3f:ea:9c:60:bf:7c:ce:5a:37:0a:54:c2:43:
ca:be:a4:9b:64:03:8c:11:b3:5c:3f:5c:d1:2f:ab:
95:b5:ba:91:90:1a:1e:c9:83:76:ef:d9:29:2d:78:
34:1a:4c:62:0b:0e:3c:e5:38:f1:66:5e:a6:8b:00:
3c:7c:03:41:a0:c9:e5:fd:7c:12:b9:64:04:80:7d:
f5:47:3b:16:d0:62:b6:8b:a3:9f:b1:13:f4:85:74:
b0:2d:be:5c:f5:32:d3:24:fc:c1:97:89:ce:56:47:
0b:e1:c6:29:9a:b6:cd:b4:0e:18:79:d7:fa:b8:dd:
39:f2:a9:3f:b5:69:d8:9f:e1:59:48:e0:d8:3f:c6:
70:1a:b5:fe:20:d5:b3:15:b1:d8:a8:bf:24:be:b5:
14:d3:3e:4b:4f:36:8d:1e:2d:4f:5c:b6:13:61:ea:
bb:e1:2f:ba:d8:d5:6d:36:33:f6:3f:d1:47:fe:38:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:01:AA:6B:5B:04:2A:B1:F4:73:68:65:E7:89:BE:8D:54:21:9D:85
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:46:bd:9f:f0:16:1f:1e:e3:58:76:50:8a:ca:e0:c3:fc:08:
62:7d:51:d4:73:a9:dd:aa:fa:bb:2d:1b:ba:4f:4a:4b:90:2a:
de:df:36:1a:8c:05:0c:61:99:d3:76:37:44:98:88:8b:67:7c:
ac:75:a0:59:70:66:42:29:fc:8d:0f:f8:47:a5:c9:76:2c:89:
cf:09:13:e5:6c:26:c5:44:68:0e:be:ea:cc:36:63:1c:19:f9:
db:58:91:02:ed:4a:8c:14:e9:97:db:18:6b:30:db:b8:bb:4f:
21:33:a3:89:5e:b8:3a:4b:25:a1:48:df:f4:17:10:97:a6:09:
0b:eb:f2:d7:d8:30:1a:12:45:d8:17:ab:49:87:cc:d4:1c:7e:
3c:49:00:89:24:40:83:2f:b5:be:4a:bc:ca:49:c6:94:ee:c5:
33:25:0e:c0:9b:c8:f4:2e:ce:87:1d:ab:40:67:59:48:6b:92:
c8:b7:87:ec:40:48:1d:c9:57:88:dd:d2:5f:54:47:75:5d:69:
fc:2d:e6:23:39:aa:c4:9a:2b:7e:2e:38:a9:8b:7b:98:7f:a8:
b2:b8:78:2e:94:26:5b:26:60:a1:0d:28:8c:7f:b3:33:cb:50:
dd:99:54:d2:4e:8f:03:ba:7b:6d:22:4b:79:be:ca:b1:62:2d:
d9:50:ba:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2SnblDdAGZ04NRym3fBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz
OTcyMTMwHhcNMjYwMzAyMDAwMTAxWhcNMjYwMzAzMDAwMTAxWjAzMTEwLwYDVQQD
Eyg3ZDAxYWE2YjViMDQyYWIxZjQ3MzY4NjVlNzg5YmU4ZDU0MjE5ZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf6LuGivBgOvMqta3w/guCln92jb
svdslSG6l/IRNhutuPde1D1K5RJL0Uouxrm7lp+avD4VsgiVi2IOt6dy1ciYrTDN
l3HgO2xORj/qnGC/fM5aNwpUwkPKvqSbZAOMEbNcP1zRL6uVtbqRkBoeyYN279kp
LXg0GkxiCw485TjxZl6miwA8fANBoMnl/XwSuWQEgH31RzsW0GK2i6OfsRP0hXSw
Lb5c9TLTJPzBl4nOVkcL4cYpmrbNtA4Yedf6uN058qk/tWnYn+FZSODYP8ZwGrX+
INWzFbHYqL8kvrUU0z5LTzaNHi1PXLYTYeq74S+62NVtNjP2P9FH/jjq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0BqmtbBCqx9HNoZeeJvo1UIZ2FMB8GA1UdIwQY
MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt
NGYzYzMzYzA4ODg0LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0
LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUa9n/AW
Hx7jWHZQisrgw/wIYn1R1HOp3ar6uy0buk9KS5Aq3t82GowFDGGZ03Y3RJiIi2d8
rHWgWXBmQin8jQ/4R6XJdiyJzwkT5WwmxURoDr7qzDZjHBn521iRAu1KjBTpl9sY
azDbuLtPITOjiV64OksloUjf9BcQl6YJC+vy19gwGhJF2BerSYfM1Bx+PEkAiSRA
gy+1vkq8yknGlO7FMyUOwJvI9C7Ohx2rQGdZSGuSyLeH7EBIHclXiN3SX1RHdV1p
/C3mIzmqxJorfi44qYt7mH+osrh4LpQmWyZgoQ0ojH+zM8tQ3ZlU0k6PA7p7bSJL
eb7KsWIt2VC6tQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:46 2026 by rpki-client