Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: y9HybhDi9r8Fw92phb8kDL/j/xOm5qfycSQXZ5m3iJE=
Subject key identifier: 15:7A:25:1B:C9:6D:68:9F:95:9B:1F:C9:AB:62:85:13:DC:96:57:73
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 019CAA58EF8A783334BAEF4D5B86FE5F3426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: xfmDCWujniXOV4c5M59vgfk26Grg/YCQU4omXceLfRs=)
2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ef:8a:78:33:34:ba:ef:4d:5b:86:fe:5f:34:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=157a251bc96d689f959b1fc9ab628513dc965773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:de:0f:26:2d:65:c9:33:60:5e:b6:ba:9b:
44:fa:52:01:15:4d:61:07:c2:ec:05:ec:1f:6d:5c:
07:16:50:01:de:85:27:41:c4:bc:83:3b:7d:6b:5c:
a4:67:c4:6c:45:a1:df:3a:8a:e1:e5:7c:63:5b:4e:
12:09:e8:4e:3a:b8:0c:6d:04:35:35:24:6d:29:02:
fd:da:3e:af:69:0e:35:20:fb:c7:2c:87:db:df:1c:
da:e4:eb:e7:51:f0:df:4a:07:65:2b:aa:30:96:9c:
c5:05:ac:72:b2:79:1d:72:0e:f6:9c:8a:1e:b0:e7:
e3:92:f0:a9:e0:3e:9a:3a:8b:65:49:dd:18:61:f5:
54:5b:88:82:e4:82:e6:81:dc:4b:b7:b0:50:ad:c4:
59:d1:7f:19:d6:33:f1:a7:84:18:72:28:52:eb:24:
d0:63:9e:39:7d:21:b3:db:52:a9:ba:92:2f:5a:86:
6d:d7:1d:c0:11:fc:2c:fa:4a:f8:05:23:79:7f:db:
69:ac:da:48:32:ba:1a:09:3d:f7:75:d8:51:38:27:
f0:79:e5:ef:10:13:b0:2e:d5:ee:42:4a:80:ad:0e:
03:45:9e:71:99:9c:4a:c9:42:c9:92:75:54:36:0d:
49:66:9b:cb:af:c2:8a:95:e4:01:99:5c:48:4d:9d:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:25:1B:C9:6D:68:9F:95:9B:1F:C9:AB:62:85:13:DC:96:57:73
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:3a:ee:48:22:a6:e0:da:c6:48:e9:e8:69:88:72:a2:ac:
ce:3c:11:40:b5:c3:ab:0b:78:08:35:eb:47:e5:47:1a:10:9e:
51:1f:eb:77:2e:d4:3d:6d:87:28:17:55:64:61:7a:d0:a8:f5:
0b:5b:17:34:7d:3d:7a:09:b8:fb:5f:69:46:3c:87:e8:83:b5:
a2:11:96:09:eb:87:d1:f7:11:d8:91:12:9a:48:27:f1:81:95:
29:60:2d:51:68:f2:a8:15:64:fc:cf:c4:07:ec:bb:01:25:f5:
44:c3:d1:a6:c7:a8:4e:30:34:5d:9a:13:e6:83:bb:9a:95:ec:
9e:4e:2f:91:36:5a:2d:1b:a1:9d:99:94:41:20:45:49:f1:e3:
28:c9:21:6f:f6:03:b4:03:01:f3:e8:3e:b3:0b:89:7f:5d:81:
22:11:57:d3:52:3d:25:6a:b3:83:47:72:96:e8:ec:41:7b:60:
c9:3d:44:d7:07:f0:a8:b6:fb:1f:f9:54:52:83:8f:84:bf:e7:
fd:0f:5e:4c:3e:3a:aa:43:c9:82:ec:1d:6e:20:f7:37:0d:ec:
16:cc:0a:a5:8e:e8:d8:f2:c3:7f:81:0a:26:18:cd:a4:d0:22:
e7:dc:03:5f:d6:c3:65:ab:88:ce:3c:87:3d:af:df:52:d2:1d:
c2:a3:d8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWO+KeDM0uu9NW4b+XzQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM0ODdiNmI2YmRkYTIyMTc5MDcyZDkyYThmMDFlOGU3
MzY2MzQwHhcNMjYwMzAxMTcwMTIwWhcNMjYwMzAyMTcwMTIwWjAzMTEwLwYDVQQD
EygxNTdhMjUxYmM5NmQ2ODlmOTU5YjFmYzlhYjYyODUxM2RjOTY1NzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03HeDyYtZckzYF62uptE+lIBFU1h
B8LsBewfbVwHFlAB3oUnQcS8gzt9a1ykZ8RsRaHfOorh5XxjW04SCehOOrgMbQQ1
NSRtKQL92j6vaQ41IPvHLIfb3xza5OvnUfDfSgdlK6owlpzFBaxysnkdcg72nIoe
sOfjkvCp4D6aOotlSd0YYfVUW4iC5ILmgdxLt7BQrcRZ0X8Z1jPxp4QYcihS6yTQ
Y545fSGz21KpupIvWoZt1x3AEfws+kr4BSN5f9tprNpIMroaCT33ddhROCfweeXv
EBOwLtXuQkqArQ4DRZ5xmZxKyULJknVUNg1JZpvLr8KKleQBmVxITZ3i2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV6JRvJbWiflZsfyatihRPclldzMB8GA1UdIwQY
MBaAFO4sSHtra92iIXkHLZKo8B6Oc2Y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmIt
NGI5ODNmMWI4NGEyLzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmItNGI5ODNmMWI4NGEy
LzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhk67kgi
puDaxkjp6GmIcqKszjwRQLXDqwt4CDXrR+VHGhCeUR/rdy7UPW2HKBdVZGF60Kj1
C1sXNH09egm4+19pRjyH6IO1ohGWCeuH0fcR2JESmkgn8YGVKWAtUWjyqBVk/M/E
B+y7ASX1RMPRpseoTjA0XZoT5oO7mpXsnk4vkTZaLRuhnZmUQSBFSfHjKMkhb/YD
tAMB8+g+swuJf12BIhFX01I9JWqzg0dylujsQXtgyT1E1wfwqLb7H/lUUoOPhL/n
/Q9eTD46qkPJguwdbiD3Nw3sFswKpY7o2PLDf4EKJhjNpNAi59wDX9bDZauIzjyH
Pa/fUtIdwqPY6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:10 2026 by rpki-client