Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier: z6PYCzitghDFGSXz38Kp8bMBN/G/4PW076ky9pg/Jwo=
Subject key identifier: B3:F5:40:5C:37:54:6E:FB:78:E8:F9:B8:68:00:42:BE:DC:1F:97:5E
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 019CAA58A3CC8958FC7B42184A0A12306FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number: 069A
Signing time: Sun 01 Mar 2026 17:01:01 +0000
Manifest this update: Sun 01 Mar 2026 17:01:01 +0000
Manifest next update: Mon 02 Mar 2026 17:01:01 +0000
Files and hashes: 1: 3-ZRPzIcEVUi-ra3cIe_QiX4MmE.roa (hash: ioG0rYT2U8xqbe9ZiKXHC8R0PXnU7MQZkccybD0LOac=)
2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: 1ujBgMyiX/3y7BLyXZm7LJkovuU9065sI8fGuFn56Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a3:cc:89:58:fc:7b:42:18:4a:0a:12:30:6f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Mar 1 17:01:01 2026 GMT
Not After : Mar 2 17:01:01 2026 GMT
Subject: CN=b3f5405c37546efb78e8f9b8680042bedc1f975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:2f:6c:75:bc:bd:8e:ac:7a:d2:bf:cf:09:
0a:0a:56:4c:28:39:87:1c:7a:db:06:60:de:f4:63:
e3:2b:5f:f4:4f:1d:64:ae:2c:c9:5e:2a:5d:58:31:
10:84:38:f5:83:12:02:04:cc:01:e8:59:0d:fc:6b:
f7:26:1c:1e:43:3e:6e:8d:e7:b0:52:63:7c:f8:c3:
ce:32:1c:b6:ed:8e:5b:9c:5a:75:45:c9:f8:29:a2:
40:e3:73:a1:93:30:41:d5:20:d7:ef:da:b7:0c:3a:
a1:5d:08:8f:20:3d:b4:49:a1:6e:2a:64:1c:5a:4b:
75:50:03:3c:7b:30:30:69:3a:9b:a4:af:9c:e7:45:
b5:1a:15:62:e1:40:b2:0d:0b:ea:ef:45:97:f1:8f:
81:12:7a:d7:fa:20:6d:40:62:b8:61:10:20:37:a7:
9f:95:0a:bc:f5:8f:3b:3a:cb:70:fc:5f:2e:15:ee:
c5:6e:57:9e:e6:0b:1e:83:20:cb:a5:28:39:fe:6b:
21:9a:35:0c:23:c8:51:45:81:07:e8:75:47:fc:9c:
4d:b8:c8:9b:86:1c:06:72:3f:9e:d1:0d:bc:8c:50:
f8:22:c1:83:3e:18:bf:72:a3:d2:21:92:9d:55:eb:
f5:4a:ba:65:9a:d2:2b:18:c1:60:17:b5:41:42:01:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:40:5C:37:54:6E:FB:78:E8:F9:B8:68:00:42:BE:DC:1F:97:5E
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:af:5b:4e:65:c9:b1:f5:73:c2:7a:da:c7:ab:01:46:ec:71:
ec:23:d4:9e:ea:07:64:56:5b:38:4d:b0:6f:4e:3c:ea:48:35:
42:f2:1e:6d:13:41:6b:a8:b2:de:c0:a1:7c:81:63:1a:4f:e0:
58:ca:10:f1:bc:5a:69:d4:1a:58:c2:fe:30:f4:79:41:5d:98:
67:93:1e:e6:9b:99:77:79:d8:e0:07:63:74:d3:82:8c:7f:cb:
f3:d8:d5:d9:9a:38:73:7e:7c:2c:b9:84:5f:aa:0c:7d:e8:f7:
d6:e3:b4:6a:38:c1:67:fd:91:41:df:36:47:c7:59:c9:50:54:
2b:51:36:26:55:b3:2a:84:6d:54:c1:fe:ae:50:a7:68:31:48:
f3:92:39:90:be:e7:56:33:c4:54:16:6d:9d:d4:87:df:0d:df:
d4:a0:61:63:ee:c4:e5:90:f0:d6:eb:87:25:e2:35:ee:3d:fb:
05:69:b3:41:3e:6c:87:9b:f2:78:d9:63:7d:ad:64:a1:c7:99:
76:08:cf:09:70:83:cc:15:45:b6:a0:51:0f:a4:0a:37:aa:cf:
90:25:42:9f:4b:e8:c0:25:71:1b:1e:b2:f9:c1:d3:4b:31:ea:
d2:22:4e:a6:c4:bf:e5:8b:1b:b0:47:ac:b8:31:be:0e:1b:b9:
b5:10:4a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWKPMiVj8e0IYSgoSMG/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YjkyYmRlYTViOTdhY2FiYzJmNjU4YzQxMmJmNzQ2ZWUw
ZTIwN2QwHhcNMjYwMzAxMTcwMTAxWhcNMjYwMzAyMTcwMTAxWjAzMTEwLwYDVQQD
EyhiM2Y1NDA1YzM3NTQ2ZWZiNzhlOGY5Yjg2ODAwNDJiZWRjMWY5NzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1cvbHW8vY6setK/zwkKClZMKDmH
HHrbBmDe9GPjK1/0Tx1krizJXipdWDEQhDj1gxICBMwB6FkN/Gv3JhweQz5ujeew
UmN8+MPOMhy27Y5bnFp1Rcn4KaJA43OhkzBB1SDX79q3DDqhXQiPID20SaFuKmQc
Wkt1UAM8ezAwaTqbpK+c50W1GhVi4UCyDQvq70WX8Y+BEnrX+iBtQGK4YRAgN6ef
lQq89Y87Ostw/F8uFe7Fblee5gsegyDLpSg5/mshmjUMI8hRRYEH6HVH/JxNuMib
hhwGcj+e0Q28jFD4IsGDPhi/cqPSIZKdVev1SrplmtIrGMFgF7VBQgEvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP1QFw3VG77eOj5uGgAQr7cH5deMB8GA1UdIwQY
MBaAFLe5K96luXrKvC9ljEEr90buDiB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODIt
ZGQ5MDA5YjMzMTdkLzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83YjY0NDgtNGZkYy00NzRhLWEwODItZGQ5MDA5YjMzMTdk
LzEvdDdrcjNxVzVlc3E4TDJXTVFTdjNSdTRPSUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK9bTmXJ
sfVzwnrax6sBRuxx7CPUnuoHZFZbOE2wb0486kg1QvIebRNBa6iy3sChfIFjGk/g
WMoQ8bxaadQaWML+MPR5QV2YZ5Me5puZd3nY4AdjdNOCjH/L89jV2Zo4c358LLmE
X6oMfej31uO0ajjBZ/2RQd82R8dZyVBUK1E2JlWzKoRtVMH+rlCnaDFI85I5kL7n
VjPEVBZtndSH3w3f1KBhY+7E5ZDw1uuHJeI17j37BWmzQT5sh5vyeNljfa1koceZ
dgjPCXCDzBVFtqBRD6QKN6rPkCVCn0vowCVxGx6y+cHTSzHq0iJOpsS/5YsbsEes
uDG+Dhu5tRBKLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:59 2026 by rpki-client