Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
File: uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft (raw, json)
Hash identifier: KsmPiucQrp8YIPlPwMPR2abIFli+3qRCL6kptAcauxs=
Subject key identifier: 7B:EC:80:F7:73:63:12:19:09:95:92:00:43:73:80:11:B7:3B:3A:76
Authority key identifier: B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
Certificate issuer: /CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Certificate serial: 019CAB6AD460ECAAB75B6683AA63DE2F3430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
Manifest number: 11AC
Signing time: Sun 01 Mar 2026 22:00:30 +0000
Manifest this update: Sun 01 Mar 2026 22:00:30 +0000
Manifest next update: Mon 02 Mar 2026 22:00:30 +0000
Files and hashes: 1: uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl (hash: 962+wwP0SCl06VaqVrA0PFbXT/KuccfBpyaSIoWjmFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d4:60:ec:aa:b7:5b:66:83:aa:63:de:2f:34:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Validity
Not Before: Mar 1 22:00:30 2026 GMT
Not After : Mar 2 22:00:30 2026 GMT
Subject: CN=7bec80f7736312190995920043738011b73b3a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:17:46:9b:6d:ec:d2:e8:fb:c6:11:65:94:
d0:f9:ee:83:55:5c:7e:ca:f1:6c:12:6c:ac:7e:71:
d2:09:9c:6d:6d:c5:1f:d6:1d:c8:90:15:99:65:92:
6d:2d:37:8b:12:e8:b5:2a:fd:7c:c4:90:77:6e:8c:
ca:29:02:21:ea:8d:05:c3:43:44:49:e0:bc:34:a7:
d0:2e:e2:b8:c4:8f:a7:42:58:f6:e5:d3:45:a9:56:
30:dd:40:1c:f2:2a:25:01:55:2d:7d:0d:78:db:4e:
42:4c:3a:98:8f:00:47:6e:63:5c:44:84:79:4a:a7:
d0:21:bf:41:1a:56:fc:fa:19:58:f6:f0:db:ad:83:
94:36:7e:8f:8b:4c:7c:64:e9:45:58:91:60:13:96:
fd:42:90:6a:5d:cc:eb:38:a1:ff:4b:24:8d:33:35:
4d:12:b7:24:dc:8e:2d:b2:ca:fd:55:0a:21:50:4b:
44:79:36:d7:30:3a:17:7b:b2:53:03:1f:31:67:4f:
c6:c8:02:3c:aa:2f:ea:ec:38:3c:d3:7c:58:35:49:
ff:6a:68:51:43:9d:02:fc:72:e5:da:d1:c1:ec:36:
0f:9c:d2:57:7b:8a:29:33:d8:3a:ca:e6:fd:cd:8b:
6b:ce:b0:4c:96:9e:5a:f3:8d:24:07:bc:4f:18:46:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:80:F7:73:63:12:19:09:95:92:00:43:73:80:11:B7:3B:3A:76
X509v3 Authority Key Identifier:
keyid:B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:39:08:8c:38:1e:b6:34:86:d3:c4:25:41:10:e2:f0:59:
3d:38:91:d1:fa:0b:6e:9c:ae:5a:8d:51:bc:e3:1a:c0:cd:7c:
cc:9b:1a:a8:cb:4a:10:18:d7:56:21:e9:ed:b4:a6:ca:7b:59:
4b:b7:25:eb:18:34:5e:f3:72:36:c0:eb:53:56:99:04:8c:3b:
53:56:fa:02:ff:64:e6:f4:37:00:b4:c8:0f:f6:a5:45:7c:89:
ad:da:09:4c:db:3c:a4:38:16:09:fe:e2:dc:5b:96:ea:67:87:
0e:a1:3a:3e:95:b5:e2:fb:31:ab:24:00:38:cc:ac:69:98:53:
69:4b:f7:e4:5c:d7:0d:b3:d6:d9:b6:7d:9a:ed:f4:e4:9c:42:
d3:35:1b:70:66:d8:47:b4:2a:5b:c9:3e:a2:6f:a5:58:b2:60:
f1:45:3f:c2:c8:47:de:4c:af:c5:bc:b2:e8:e2:0e:cf:bb:20:
79:95:1c:48:3a:9a:71:e8:fb:98:39:a4:b6:0b:e3:73:27:50:
42:47:23:44:0d:2b:4a:62:9c:7f:21:07:1c:e9:9d:7b:4f:2f:
2a:89:03:24:2b:8f:f1:b0:68:7d:f8:3d:6f:3a:48:79:60:c5:
69:3a:fc:28:f4:17:f7:99:e4:2e:fb:e3:46:08:31:f9:12:9d:
84:16:de:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyratRg7Kq3W2aDqmPeLzQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OGZmODZjNDcxN2UwZTM2NmYyOTBjZDBkNjI4YWZjNDZh
MzhmMGQwHhcNMjYwMzAxMjIwMDMwWhcNMjYwMzAyMjIwMDMwWjAzMTEwLwYDVQQD
Eyg3YmVjODBmNzczNjMxMjE5MDk5NTkyMDA0MzczODAxMWI3M2IzYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1QXRptt7NLo+8YRZZTQ+e6DVVx+
yvFsEmysfnHSCZxtbcUf1h3IkBWZZZJtLTeLEui1Kv18xJB3bozKKQIh6o0Fw0NE
SeC8NKfQLuK4xI+nQlj25dNFqVYw3UAc8iolAVUtfQ14205CTDqYjwBHbmNcRIR5
SqfQIb9BGlb8+hlY9vDbrYOUNn6Pi0x8ZOlFWJFgE5b9QpBqXczrOKH/SySNMzVN
Erck3I4tssr9VQohUEtEeTbXMDoXe7JTAx8xZ0/GyAI8qi/q7Dg803xYNUn/amhR
Q50C/HLl2tHB7DYPnNJXe4opM9g6yub9zYtrzrBMlp5a840kB7xPGEYVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvsgPdzYxIZCZWSAENzgBG3Ozp2MB8GA1UdIwQY
MBaAFLiP+GxHF+DjZvKQzQ1iivxGo48NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUlfNGJFY1g0T05tOHBETkRXS0tfRWFqancwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZTcxNTQtYzNhYS00NWI2LThmYjAt
MTkxZDUzNGM5N2I5LzEvdUlfNGJFY1g0T05tOHBETkRXS0tfRWFqancwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZTcxNTQtYzNhYS00NWI2LThmYjAtMTkxZDUzNGM5N2I5
LzEvdUlfNGJFY1g0T05tOHBETkRXS0tfRWFqancwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpg5CIw4
HrY0htPEJUEQ4vBZPTiR0foLbpyuWo1RvOMawM18zJsaqMtKEBjXViHp7bSmyntZ
S7cl6xg0XvNyNsDrU1aZBIw7U1b6Av9k5vQ3ALTID/alRXyJrdoJTNs8pDgWCf7i
3FuW6meHDqE6PpW14vsxqyQAOMysaZhTaUv35FzXDbPW2bZ9mu305JxC0zUbcGbY
R7QqW8k+om+lWLJg8UU/wshH3kyvxbyy6OIOz7sgeZUcSDqacej7mDmktgvjcydQ
QkcjRA0rSmKcfyEHHOmde08vKokDJCuP8bBoffg9bzpIeWDFaTr8KPQX95nkLvvj
Rggx+RKdhBbeZA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:15 2026 by rpki-client