Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: Eki8UVRw1RleW/x8FUr9P3yZvKsTvguqCceRqTW/Vv0=
Subject key identifier: B2:1C:01:5F:40:29:19:3F:8B:FB:41:2F:E6:B6:67:92:2E:D3:E4:E6
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019CAA5821AED76D8D6687EEDEC43699ED00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 1687
Signing time: Sun 01 Mar 2026 17:00:28 +0000
Manifest this update: Sun 01 Mar 2026 17:00:28 +0000
Manifest next update: Mon 02 Mar 2026 17:00:28 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: BlycKr4HT8ueYQabmZ8S56RE1IdP+vpAT5mDtHkd+rg=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:21:ae:d7:6d:8d:66:87:ee:de:c4:36:99:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Mar 1 17:00:28 2026 GMT
Not After : Mar 2 17:00:28 2026 GMT
Subject: CN=b21c015f4029193f8bfb412fe6b667922ed3e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:f1:c2:36:1e:d6:da:00:5e:9c:5c:e9:dc:
e6:ad:bf:d7:4b:cb:af:fc:1e:8b:56:15:92:e2:d1:
cd:32:58:8c:aa:24:5a:5d:1e:45:95:0d:36:b1:8c:
93:a8:3e:0c:f7:61:0b:49:82:7f:02:fb:5b:9c:fd:
86:99:fc:00:59:92:e5:c6:1c:b9:10:20:36:79:4c:
50:30:cf:78:3c:c3:36:41:fa:51:4e:e3:00:66:51:
5e:f4:5a:de:58:b4:00:b6:06:e3:89:48:23:25:a8:
66:4c:59:0a:b9:a0:a9:52:12:61:e7:24:af:05:96:
63:bf:50:3b:ad:ae:25:8f:7a:02:1f:19:9f:83:24:
ec:91:7e:04:ce:a7:27:34:3b:12:0e:ce:ab:53:d1:
89:24:74:43:4a:11:6e:73:81:ce:0e:cb:82:8c:33:
17:68:ff:e5:32:9e:d7:46:07:5e:e4:a2:69:80:65:
ea:a1:3f:52:f2:5f:ae:74:dc:9d:76:40:60:63:65:
dd:bb:34:b5:ee:b9:33:7f:e4:53:21:2a:bc:07:43:
e2:18:ad:68:39:38:5a:c7:e6:3a:24:da:b1:7c:a1:
8b:44:dc:cb:4e:14:3c:0e:bc:25:4f:0c:45:bb:6e:
d1:d9:7e:c6:f6:e1:67:df:15:58:ca:47:65:60:7c:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:01:5F:40:29:19:3F:8B:FB:41:2F:E6:B6:67:92:2E:D3:E4:E6
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e6:5b:e7:1b:a1:32:7f:f0:e1:e4:e0:91:6b:09:32:3b:0d:
7b:d2:dd:a5:70:f5:d5:40:00:5e:f0:aa:90:72:1c:03:c2:2e:
fd:c4:60:18:0e:c0:ee:40:96:a3:89:e4:4c:e6:55:fe:d2:3c:
53:1b:a8:de:f6:b9:2c:44:be:b1:31:2f:59:77:0c:29:d4:1a:
8c:ac:d5:7f:ee:32:04:f7:79:10:dc:3c:d7:e1:1f:eb:0a:75:
a2:83:4d:3f:af:2e:48:47:60:e8:68:da:e5:68:30:09:0b:ae:
57:6d:81:f0:c4:e0:89:d7:ea:e6:c6:ae:e0:19:b4:52:7e:f2:
c2:98:4a:c0:0c:53:fc:0b:df:ac:ce:46:0c:7a:b3:3a:55:0e:
5c:d7:ff:24:c7:4d:37:90:4f:88:52:3c:85:b9:4d:cf:1c:ea:
c7:12:92:b2:33:1e:8b:37:87:16:1c:9d:00:e2:98:7e:b0:68:
07:50:42:58:83:79:11:25:2b:fb:de:36:aa:7c:2f:8a:5e:ca:
19:78:f6:1d:56:24:0e:2b:83:12:ef:e7:fa:4c:51:18:df:60:
cc:cd:49:cf:2d:33:35:00:13:a7:45:10:38:a7:7e:22:b9:b4:
97:f1:8b:ad:18:ce:94:b4:1b:55:b8:06:f1:bf:30:8e:4a:86:
67:8e:8d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWCGu122NZofu3sQ2me0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmJmMmJhNWIzMmU0MmU4YjZjMDNiODM2ZDc2NGY5NzVi
NTg5OGYwHhcNMjYwMzAxMTcwMDI4WhcNMjYwMzAyMTcwMDI4WjAzMTEwLwYDVQQD
EyhiMjFjMDE1ZjQwMjkxOTNmOGJmYjQxMmZlNmI2Njc5MjJlZDNlNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YvxwjYe1toAXpxc6dzmrb/XS8uv
/B6LVhWS4tHNMliMqiRaXR5FlQ02sYyTqD4M92ELSYJ/AvtbnP2GmfwAWZLlxhy5
ECA2eUxQMM94PMM2QfpRTuMAZlFe9FreWLQAtgbjiUgjJahmTFkKuaCpUhJh5ySv
BZZjv1A7ra4lj3oCHxmfgyTskX4EzqcnNDsSDs6rU9GJJHRDShFuc4HODsuCjDMX
aP/lMp7XRgde5KJpgGXqoT9S8l+udNyddkBgY2XduzS17rkzf+RTISq8B0PiGK1o
OThax+Y6JNqxfKGLRNzLThQ8DrwlTwxFu27R2X7G9uFn3xVYykdlYHzSKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIcAV9AKRk/i/tBL+a2Z5Iu0+TmMB8GA1UdIwQY
MBaAFOy78rpbMuQui2wDuDbXZPl1tYmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAt
ODNmZmM4MDA3M2IyLzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAtODNmZmM4MDA3M2Iy
LzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROZb5xuh
Mn/w4eTgkWsJMjsNe9LdpXD11UAAXvCqkHIcA8Iu/cRgGA7A7kCWo4nkTOZV/tI8
Uxuo3va5LES+sTEvWXcMKdQajKzVf+4yBPd5ENw81+Ef6wp1ooNNP68uSEdg6Gja
5WgwCQuuV22B8MTgidfq5sau4Bm0Un7ywphKwAxT/AvfrM5GDHqzOlUOXNf/JMdN
N5BPiFI8hblNzxzqxxKSsjMeizeHFhydAOKYfrBoB1BCWIN5ESUr+942qnwvil7K
GXj2HVYkDiuDEu/n+kxRGN9gzM1Jzy0zNQATp0UQOKd+Irm0l/GLrRjOlLQbVbgG
8b8wjkqGZ46NzQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:43 2026 by rpki-client