
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier: 3wzpDVoeImXNURC+5El6pqxgzvSDjbk/eYVwjSBepgo=
Subject key identifier: 2E:98:ED:69:A1:8D:1D:91:5D:A1:3D:86:90:C0:3E:21:44:0E:DA:F7
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial: 019CACB4F9BB4F9FE7CF914206859D0DFF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number: 0EDF
Signing time: Mon 02 Mar 2026 04:01:07 +0000
Manifest this update: Mon 02 Mar 2026 04:01:07 +0000
Manifest next update: Tue 03 Mar 2026 04:01:07 +0000
Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: koEbNs/sfmAmUu/qs6Ch1NnY0uGkid3vnvgFWg+qkSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f9:bb:4f:9f:e7:cf:91:42:06:85:9d:0d:ff:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
Validity
Not Before: Mar 2 04:01:07 2026 GMT
Not After : Mar 3 04:01:07 2026 GMT
Subject: CN=2e98ed69a18d1d915da13d8690c03e21440edaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:c1:b7:d7:1f:37:b4:ec:04:31:da:d3:26:
f7:fb:e6:8c:20:d1:13:64:25:ad:8b:40:2f:ef:67:
71:ba:e0:6e:6d:ea:31:53:ef:1b:72:12:92:8d:5b:
13:e5:14:53:89:a7:cc:10:39:9d:c2:6f:f2:0b:66:
cd:2c:b5:35:18:e5:fa:2b:a7:a7:a1:3b:dc:7a:29:
d4:b9:04:b4:0a:c8:c7:46:65:fa:05:4b:7e:58:8c:
82:b6:cf:f3:71:8e:61:5b:da:26:c5:ad:bd:95:04:
74:11:fd:80:0e:37:d6:26:67:4b:d9:89:2a:9c:1f:
16:b3:ce:35:79:4f:46:d9:e4:e5:04:3a:83:be:9b:
48:65:9b:29:63:74:10:2e:99:76:77:e8:6f:44:b6:
ae:f6:c6:18:e5:fe:f6:30:48:d0:39:fe:e5:c5:5e:
b4:47:bc:fd:5a:c1:a1:c1:df:88:5c:62:de:08:6e:
68:c3:89:5e:ca:ae:06:b9:64:fd:8a:de:4f:e2:90:
63:9d:00:5e:8c:f4:18:76:84:5d:27:dd:c6:d8:e7:
4b:7f:cb:3e:5a:5d:85:16:2d:3e:1a:dc:3d:50:6b:
18:56:0b:0a:77:15:ba:a2:7d:4a:86:72:fc:13:52:
70:9a:02:94:b9:b9:ee:2c:1e:f4:4e:b6:00:cd:f6:
3f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:ED:69:A1:8D:1D:91:5D:A1:3D:86:90:C0:3E:21:44:0E:DA:F7
X509v3 Authority Key Identifier:
keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:7c:f8:b0:54:90:8d:23:43:34:13:79:7a:7a:08:8f:fd:ba:
8f:cd:4c:aa:87:f8:e1:95:2f:e2:a0:19:ea:e8:cf:b3:d6:9e:
fd:c0:f2:58:d7:47:38:ce:1d:46:6d:2a:c3:d0:1b:23:c3:03:
8c:32:cc:d6:6e:05:9f:e2:ce:8f:45:73:c3:ed:28:17:32:36:
1d:3b:84:1a:49:3c:51:43:af:8d:b9:9f:fc:77:39:62:f7:0a:
58:a9:c8:b1:34:37:eb:39:29:a8:81:0e:6a:d8:c0:68:d8:48:
e2:57:38:f7:92:b6:02:f8:f1:e5:ff:f4:43:03:22:aa:c0:10:
7c:16:5c:b6:be:3f:02:5b:4d:69:ef:54:df:85:5d:02:84:4a:
4e:6a:b3:af:73:68:5d:0d:f3:a3:8e:ee:95:ea:f6:e2:bb:d0:
2d:bd:16:21:67:05:32:ad:79:c3:97:97:0a:4b:14:88:19:51:
31:8e:ef:c0:13:2b:19:15:77:8b:75:a4:15:df:70:ed:c9:54:
16:06:85:e8:1c:3b:68:f8:93:02:0b:bc:e2:77:32:3c:10:14:
c4:55:83:96:76:52:95:ef:ab:6e:08:0d:f2:95:40:56:2b:e2:
9b:c6:b2:8c:04:18:01:d6:99:5c:0b:3c:be:84:6b:c3:53:8f:
d3:9d:2c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystPm7T5/nz5FCBoWdDf8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjk4NzE4OWRhNGUzODM4NWIwNzIxODU0ZmVjY2MzZWY0
NjZhOTYwHhcNMjYwMzAyMDQwMTA3WhcNMjYwMzAzMDQwMTA3WjAzMTEwLwYDVQQD
EygyZTk4ZWQ2OWExOGQxZDkxNWRhMTNkODY5MGMwM2UyMTQ0MGVkYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmXBt9cfN7TsBDHa0yb3++aMINET
ZCWti0Av72dxuuBubeoxU+8bchKSjVsT5RRTiafMEDmdwm/yC2bNLLU1GOX6K6en
oTvceinUuQS0CsjHRmX6BUt+WIyCts/zcY5hW9omxa29lQR0Ef2ADjfWJmdL2Ykq
nB8Ws841eU9G2eTlBDqDvptIZZspY3QQLpl2d+hvRLau9sYY5f72MEjQOf7lxV60
R7z9WsGhwd+IXGLeCG5ow4leyq4GuWT9it5P4pBjnQBejPQYdoRdJ93G2OdLf8s+
Wl2FFi0+Gtw9UGsYVgsKdxW6on1KhnL8E1JwmgKUubnuLB70TrYAzfY/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Y7WmhjR2RXaE9hpDAPiFEDtr3MB8GA1UdIwQY
MBaAFO/5hxidpOODhbByGFT+zMPvRmqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAt
ODg1ZWUxOWVkNmJmLzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOTMwMTAtZjI2Ny00M2ZmLWE3NjAtODg1ZWUxOWVkNmJm
LzEvN19tSEdKMms0NE9Gc0hJWVZQN013LTlHYXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Hz4sFSQ
jSNDNBN5enoIj/26j81Mqof44ZUv4qAZ6ujPs9ae/cDyWNdHOM4dRm0qw9AbI8MD
jDLM1m4Fn+LOj0Vzw+0oFzI2HTuEGkk8UUOvjbmf/Hc5YvcKWKnIsTQ36zkpqIEO
atjAaNhI4lc495K2Avjx5f/0QwMiqsAQfBZctr4/AltNae9U34VdAoRKTmqzr3No
XQ3zo47uler24rvQLb0WIWcFMq15w5eXCksUiBlRMY7vwBMrGRV3i3WkFd9w7clU
FgaF6Bw7aPiTAgu84ncyPBAUxFWDlnZSle+rbggN8pVAVivim8ayjAQYAdaZXAs8
voRrw1OP050sbg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:15:32 2026 by rpki-client