Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier: l43pU34jY3C5ZM9nxd/T3UnEmQzejcafQD7+zT+ov0U=
Subject key identifier: 29:54:85:60:12:36:58:09:C5:FC:3C:2D:5E:4E:D9:1F:6E:F6:FE:D7
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 019CA945BD23505BBAC919D1460FC8AEA4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number: 16AF
Signing time: Sun 01 Mar 2026 12:00:45 +0000
Manifest this update: Sun 01 Mar 2026 12:00:45 +0000
Manifest next update: Mon 02 Mar 2026 12:00:45 +0000
Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: D0EOQ5iFOT+Z6kKwHtYsu8dtyFtFtJNOOaAp4tPBdIk=)
2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:bd:23:50:5b:ba:c9:19:d1:46:0f:c8:ae:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Mar 1 12:00:45 2026 GMT
Not After : Mar 2 12:00:45 2026 GMT
Subject: CN=2954856012365809c5fc3c2d5e4ed91f6ef6fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:94:27:5c:a7:ef:d6:c9:d2:c8:68:72:b6:
59:b8:b9:c4:7a:7b:4c:9f:f4:77:e2:32:71:87:9f:
90:7e:1e:a6:b1:c0:2b:b3:59:a4:64:b3:f0:4d:d1:
c2:3c:4b:f3:2a:ed:0f:eb:bd:ef:93:3e:8d:b7:33:
cf:6a:b2:0c:f8:c0:7b:54:a0:15:37:78:4d:d8:23:
42:cd:ea:09:19:d7:ee:2d:d3:3c:5d:df:54:34:13:
21:5d:e4:0f:6b:22:51:44:7f:82:ec:98:3b:98:8b:
91:58:25:db:13:76:1b:ad:2f:6b:6c:55:f4:8a:d1:
4a:a4:c5:d0:f1:30:d6:f1:10:d0:99:70:f8:d6:09:
0a:73:2d:ba:2c:3c:d9:ea:c8:d5:de:ea:26:19:82:
31:1a:71:93:d7:39:70:7f:dd:2e:9a:7f:36:93:a2:
fd:c3:d8:ef:47:8b:3b:a4:12:da:67:21:06:f9:22:
c2:55:cb:fc:3f:bd:c6:4e:a7:3f:94:71:4d:09:73:
a1:ee:8c:01:64:3f:bc:83:74:a8:1f:4d:03:00:83:
3a:46:9d:ce:50:15:35:c2:35:8e:42:21:f9:1e:c7:
4b:a9:2a:97:f8:a1:e3:0b:a6:6e:6e:5c:1e:6f:c7:
9f:50:84:d6:17:82:63:51:ee:e9:cb:42:cc:62:1d:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:54:85:60:12:36:58:09:C5:FC:3C:2D:5E:4E:D9:1F:6E:F6:FE:D7
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:68:aa:44:1f:2b:df:c6:f8:30:66:5b:54:bf:4d:0e:81:
ad:b0:e6:9e:9a:41:bc:ae:56:b0:87:91:c8:05:68:91:4b:a2:
66:a4:4f:56:57:7c:41:d1:9a:70:0f:cc:21:f3:45:ef:08:6b:
9b:4a:29:54:03:ce:a6:45:e3:51:04:7b:d6:1d:d2:30:23:c1:
c6:e9:f0:d3:25:0d:4a:f1:52:fd:32:11:54:6f:68:36:45:14:
70:0a:da:be:fb:ec:8e:1d:1d:98:eb:36:cf:68:27:b9:df:00:
7b:3c:82:9d:f2:42:f3:d5:2a:01:0f:29:58:eb:1f:a8:50:a6:
fd:92:9b:13:13:dc:8d:05:85:b4:3f:c3:ed:01:3c:f0:53:7a:
41:99:10:2b:f2:0a:5e:26:3a:be:b8:94:15:7e:ee:73:cc:ca:
c9:dd:63:d3:8c:10:f3:0c:f1:31:2b:92:94:66:ed:4f:89:a0:
1f:15:ef:a5:76:ca:99:31:71:75:4f:9f:d8:d6:b3:c8:49:2a:
dc:b3:1d:75:8d:a3:59:14:e6:7f:7b:f3:15:29:81:c4:76:cd:
1b:8c:fd:b5:4b:df:36:df:c7:e5:b9:08:f5:8c:9f:af:5d:1d:
93:a8:aa:75:4e:b0:5d:b2:7b:9c:22:1c:15:91:87:74:7f:5f:
c4:ff:bf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRb0jUFu6yRnRRg/IrqTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmE5OGIyMjFhYmU0ZGQ5NTk5OWVlZjI5MmZmMGJlYTQx
MjE4YWMwHhcNMjYwMzAxMTIwMDQ1WhcNMjYwMzAyMTIwMDQ1WjAzMTEwLwYDVQQD
EygyOTU0ODU2MDEyMzY1ODA5YzVmYzNjMmQ1ZTRlZDkxZjZlZjZmZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHSUJ1yn79bJ0shocrZZuLnEentM
n/R34jJxh5+Qfh6mscArs1mkZLPwTdHCPEvzKu0P673vkz6NtzPParIM+MB7VKAV
N3hN2CNCzeoJGdfuLdM8Xd9UNBMhXeQPayJRRH+C7Jg7mIuRWCXbE3YbrS9rbFX0
itFKpMXQ8TDW8RDQmXD41gkKcy26LDzZ6sjV3uomGYIxGnGT1zlwf90umn82k6L9
w9jvR4s7pBLaZyEG+SLCVcv8P73GTqc/lHFNCXOh7owBZD+8g3SoH00DAIM6Rp3O
UBU1wjWOQiH5HsdLqSqX+KHjC6Zublweb8efUITWF4JjUe7py0LMYh0GYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClUhWASNlgJxfw8LV5O2R9u9v7XMB8GA1UdIwQY
MBaAFO8qmLIhq+TdlZme7ykv8L6kEhisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQt
NTZiNjViOTFhNzNjLzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80MWExNjYtM2EwMC00OWJjLTkzNWQtNTZiNjViOTFhNzNj
LzEvN3lxWXNpR3I1TjJWbVo3dktTX3d2cVFTR0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk1oqkQf
K9/G+DBmW1S/TQ6BrbDmnppBvK5WsIeRyAVokUuiZqRPVld8QdGacA/MIfNF7whr
m0opVAPOpkXjUQR71h3SMCPBxunw0yUNSvFS/TIRVG9oNkUUcAravvvsjh0dmOs2
z2gnud8AezyCnfJC89UqAQ8pWOsfqFCm/ZKbExPcjQWFtD/D7QE88FN6QZkQK/IK
XiY6vriUFX7uc8zKyd1j04wQ8wzxMSuSlGbtT4mgHxXvpXbKmTFxdU+f2NazyEkq
3LMddY2jWRTmf3vzFSmBxHbNG4z9tUvfNt/H5bkI9Yyfr10dk6iqdU6wXbJ7nCIc
FZGHdH9fxP+/Xg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:27:47 2026 by rpki-client