Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: vD5KtypEOABeP7F+XYwKRLgbz69azwVDt0m4WQmVJDY=
Subject key identifier: 9A:52:D9:B7:67:BB:51:42:15:D4:12:45:6F:66:97:9C:BA:83:C1:70
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 019CAD90C8B8A54DDEEC94924C031D0D32F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 04DA
Signing time: Mon 02 Mar 2026 08:01:12 +0000
Manifest this update: Mon 02 Mar 2026 08:01:12 +0000
Manifest next update: Tue 03 Mar 2026 08:01:12 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: wgRpGjjR/zFve/OfOgsAWQQMFRR035b5H+xQN3eKUNc=)
2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:c8:b8:a5:4d:de:ec:94:92:4c:03:1d:0d:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Mar 2 08:01:12 2026 GMT
Not After : Mar 3 08:01:12 2026 GMT
Subject: CN=9a52d9b767bb514215d412456f66979cba83c170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:4d:31:dd:85:04:0d:b6:63:ec:e6:61:4d:
a7:b0:78:85:10:de:99:39:9a:d7:a0:c7:60:9d:4a:
fb:29:ff:95:12:ef:d2:63:d9:72:8c:96:45:b5:42:
25:25:be:d3:6f:c4:13:bc:c8:41:e2:b0:9f:37:8d:
83:ad:32:c3:86:78:3d:ae:cb:55:47:fc:ea:e0:fc:
f2:fb:0a:3e:32:0c:23:58:52:69:b4:ca:71:f9:3d:
6f:d9:c8:ae:08:27:bb:7f:eb:a6:97:9e:99:77:31:
13:8e:b3:07:df:e3:fa:d8:26:d4:99:74:9c:ee:c7:
01:06:f8:50:78:3f:c9:12:07:e0:8c:ff:6c:74:c7:
0f:35:1b:f4:bf:52:42:4b:01:59:d3:df:ec:8e:e2:
d0:f6:67:ac:ba:36:56:d7:ea:c1:9f:b5:c4:60:6c:
af:5b:51:de:c0:7a:6f:ff:45:0b:64:52:7d:ca:1d:
99:f1:0f:d5:f5:97:5d:a7:b8:dc:fe:35:bc:5d:3f:
27:50:e4:cb:fc:d2:e3:a4:b4:95:c0:e7:a2:bf:7c:
cf:86:a3:f5:9d:fc:6e:1e:1b:c2:41:5f:b1:b5:ff:
80:ea:ab:59:ad:7b:07:16:fc:f9:71:40:01:aa:26:
1e:ff:03:aa:02:51:37:1d:b7:31:c7:08:a0:2b:35:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:D9:B7:67:BB:51:42:15:D4:12:45:6F:66:97:9C:BA:83:C1:70
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:59:ad:70:92:71:dc:9c:03:b4:52:31:77:62:7f:e2:4c:79:
3b:51:26:8c:de:b5:13:62:b9:a5:aa:87:3f:ab:3c:39:35:dc:
19:23:c4:7f:f5:f7:53:41:72:22:66:f6:ce:5e:bf:54:a5:20:
31:c7:c1:3b:f1:98:57:ec:52:a8:8a:fd:9f:01:62:2f:78:b8:
95:33:09:8b:4b:c9:8b:2e:b7:2f:49:cd:f3:fd:68:73:8b:e7:
42:b4:c2:1b:9e:31:0e:ef:b4:49:a6:01:9b:2c:59:c1:3a:dc:
8a:8c:ca:f0:36:0d:fc:81:4e:16:63:2f:e5:8b:7c:18:01:3b:
be:74:c2:92:92:b0:1e:00:cd:c7:07:fc:d8:a3:ab:36:ca:1a:
6a:9b:f0:ab:5e:a5:fa:c5:02:c4:e9:a4:48:ee:98:83:ff:cb:
6b:4d:3a:fb:ab:d7:23:cf:a0:60:75:85:25:dc:73:3b:38:b4:
70:c9:ab:f3:ac:48:88:37:fa:35:ab:2c:d6:fa:75:9e:62:f2:
93:26:8c:96:b8:bc:74:69:68:7f:5c:ce:71:09:73:ea:32:66:
07:29:40:ad:74:79:3b:5f:47:8b:19:12:39:6a:5d:cd:95:29:
43:d8:e0:24:ab:fe:1e:4b:50:95:8c:64:25:e7:77:a8:92:44:
f8:1c:41:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkMi4pU3e7JSSTAMdDTL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk
NTQyMTIwHhcNMjYwMzAyMDgwMTEyWhcNMjYwMzAzMDgwMTEyWjAzMTEwLwYDVQQD
Eyg5YTUyZDliNzY3YmI1MTQyMTVkNDEyNDU2ZjY2OTc5Y2JhODNjMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iRNMd2FBA22Y+zmYU2nsHiFEN6Z
OZrXoMdgnUr7Kf+VEu/SY9lyjJZFtUIlJb7Tb8QTvMhB4rCfN42DrTLDhng9rstV
R/zq4Pzy+wo+MgwjWFJptMpx+T1v2ciuCCe7f+uml56ZdzETjrMH3+P62CbUmXSc
7scBBvhQeD/JEgfgjP9sdMcPNRv0v1JCSwFZ09/sjuLQ9mesujZW1+rBn7XEYGyv
W1HewHpv/0ULZFJ9yh2Z8Q/V9Zddp7jc/jW8XT8nUOTL/NLjpLSVwOeiv3zPhqP1
nfxuHhvCQV+xtf+A6qtZrXsHFvz5cUABqiYe/wOqAlE3HbcxxwigKzVfAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpS2bdnu1FCFdQSRW9ml5y6g8FwMB8GA1UdIwQY
MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt
MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw
LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlmtcJJx
3JwDtFIxd2J/4kx5O1EmjN61E2K5paqHP6s8OTXcGSPEf/X3U0FyImb2zl6/VKUg
McfBO/GYV+xSqIr9nwFiL3i4lTMJi0vJiy63L0nN8/1oc4vnQrTCG54xDu+0SaYB
myxZwTrciozK8DYN/IFOFmMv5Yt8GAE7vnTCkpKwHgDNxwf82KOrNsoaapvwq16l
+sUCxOmkSO6Yg//La006+6vXI8+gYHWFJdxzOzi0cMmr86xIiDf6Nass1vp1nmLy
kyaMlri8dGlof1zOcQlz6jJmBylArXR5O19HixkSOWpdzZUpQ9jgJKv+HktQlYxk
Jed3qJJE+BxBoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:16 2026 by rpki-client