Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File: E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier: NiOQcwMAOcZmhN7/vTtxRZdiUJf2DxEnsuImw/i34KM=
Subject key identifier: A4:9E:D6:23:FA:C0:18:DC:8C:97:4F:8F:45:BC:6B:8E:99:07:1D:C7
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer: /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial: 019CAD9095F36DFAEEF58DD45984938EA941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number: 097B
Signing time: Mon 02 Mar 2026 08:00:59 +0000
Manifest this update: Mon 02 Mar 2026 08:00:59 +0000
Manifest next update: Tue 03 Mar 2026 08:00:59 +0000
Files and hashes: 1: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: bjVjP1QXlDRiqiDiCfr69ARzxhgTmI+K6styqwTWaZ4=)
2: nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa (hash: TGjV+Bn0STBLHDURzdnH0m2eTzhKRI7/ugPawErQAOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:95:f3:6d:fa:ee:f5:8d:d4:59:84:93:8e:a9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Validity
Not Before: Mar 2 08:00:59 2026 GMT
Not After : Mar 3 08:00:59 2026 GMT
Subject: CN=a49ed623fac018dc8c974f8f45bc6b8e99071dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:db:72:31:82:4d:1f:0a:5e:0d:ad:0e:7d:
d8:c3:64:89:ea:b9:42:73:71:09:20:51:92:6d:31:
16:81:04:87:af:7f:dc:b7:e5:ba:ef:ac:41:dd:f5:
bc:f3:71:29:7b:dd:de:2f:80:51:22:32:35:c7:ad:
c4:77:24:41:47:5d:1b:cd:91:38:17:df:52:19:9b:
95:a2:f3:0f:aa:03:e2:ca:ea:e1:bb:6f:ea:33:ab:
e4:31:68:05:a7:33:3b:f7:dc:c8:20:b3:52:37:2f:
14:72:69:8a:53:1d:54:e2:b7:be:d0:79:9b:70:6e:
cf:36:19:9f:94:5c:f9:48:d3:67:57:2b:3d:47:e8:
ee:aa:ef:a5:43:db:64:14:d9:06:8d:76:41:8b:3a:
ff:e0:f8:44:2c:39:aa:67:35:2d:c7:55:15:5a:5a:
1b:80:59:97:da:cd:55:69:cf:7d:8b:9e:4d:a5:7a:
2c:e2:e8:8f:ff:1a:e7:d6:18:c8:ad:eb:0e:a0:9b:
47:e0:ef:b9:f5:61:df:28:6d:8c:ab:94:00:6f:f6:
5b:72:5b:f5:8f:93:e8:38:bb:60:e0:71:b3:01:af:
58:3f:ea:74:c7:94:fa:42:1c:84:af:47:12:f1:29:
47:6b:f5:0f:a7:77:ec:43:a2:ee:0f:4f:78:d7:cb:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:D6:23:FA:C0:18:DC:8C:97:4F:8F:45:BC:6B:8E:99:07:1D:C7
X509v3 Authority Key Identifier:
keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:73:40:28:ab:1e:73:c1:77:2b:9a:98:24:24:45:cd:fd:
92:30:48:b9:69:5e:93:69:81:36:7d:2e:c6:65:9b:41:54:48:
d6:5e:ae:c0:f2:a9:96:50:04:78:fd:38:e4:cb:96:46:90:48:
e7:df:9c:d9:31:1d:75:37:e5:cf:4e:88:4b:aa:16:b8:77:ad:
b6:81:ef:47:93:9e:6a:73:15:6d:65:6a:c5:2f:60:41:76:ba:
8f:88:e0:c1:bf:a8:b1:3d:67:e6:4b:81:d6:b7:a4:26:ab:95:
2d:33:4f:51:01:06:38:50:b6:54:d1:97:27:0c:38:49:f7:db:
ad:9e:ca:d0:be:f1:ca:77:c5:40:af:95:04:c8:e5:53:fc:f2:
86:c1:2b:2c:b0:75:cf:b0:89:57:4b:db:5a:81:32:65:d3:98:
ca:b9:14:69:47:12:f8:20:9d:2d:89:0a:a2:18:e3:ae:42:13:
50:15:12:c2:9d:3d:be:4a:75:8e:0f:5e:a7:d1:34:c6:e2:14:
a5:92:9d:54:5f:35:e7:e8:d7:08:80:a6:d1:a7:c0:23:19:cf:
ba:b2:ab:85:90:d3:e1:ba:74:fa:1c:fe:7f:75:6c:4d:71:86:
18:53:6a:2e:d1:6c:e3:ff:92:c8:8f:30:2e:45:b3:5e:1c:31:
1a:da:a4:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkJXzbfru9Y3UWYSTjqlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjliMjFjMDA4MWQyM2M0YTIxZjYwYTA4NGE3NWNiNWY5
NWJlYTIwHhcNMjYwMzAyMDgwMDU5WhcNMjYwMzAzMDgwMDU5WjAzMTEwLwYDVQQD
EyhhNDllZDYyM2ZhYzAxOGRjOGM5NzRmOGY0NWJjNmI4ZTk5MDcxZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny/bcjGCTR8KXg2tDn3Yw2SJ6rlC
c3EJIFGSbTEWgQSHr3/ct+W676xB3fW883Epe93eL4BRIjI1x63EdyRBR10bzZE4
F99SGZuVovMPqgPiyurhu2/qM6vkMWgFpzM799zIILNSNy8UcmmKUx1U4re+0Hmb
cG7PNhmflFz5SNNnVys9R+juqu+lQ9tkFNkGjXZBizr/4PhELDmqZzUtx1UVWlob
gFmX2s1Vac99i55NpXos4uiP/xrn1hjIresOoJtH4O+59WHfKG2Mq5QAb/Zbclv1
j5PoOLtg4HGzAa9YP+p0x5T6QhyEr0cS8SlHa/UPp3fsQ6LuD09418vHnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSe1iP6wBjcjJdPj0W8a46ZBx3HMB8GA1UdIwQY
MBaAFBO5shwAgdI8SiH2CghKdctflb6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAt
YmY5MjRhODI1ZjU4LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85OWEwMWYtYmI1Mi00NzEyLTk0ZDAtYmY5MjRhODI1ZjU4
LzEvRTdteUhBQ0IwanhLSWZZS0NFcDF5MS1WdnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfJzQCir
HnPBdyuamCQkRc39kjBIuWlek2mBNn0uxmWbQVRI1l6uwPKpllAEeP045MuWRpBI
59+c2TEddTflz06IS6oWuHettoHvR5OeanMVbWVqxS9gQXa6j4jgwb+osT1n5kuB
1rekJquVLTNPUQEGOFC2VNGXJww4SffbrZ7K0L7xynfFQK+VBMjlU/zyhsErLLB1
z7CJV0vbWoEyZdOYyrkUaUcS+CCdLYkKohjjrkITUBUSwp09vkp1jg9ep9E0xuIU
pZKdVF815+jXCICm0afAIxnPurKrhZDT4bp0+hz+f3VsTXGGGFNqLtFs4/+SyI8w
LkWzXhwxGtqkdA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:20 2026 by rpki-client