Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: usnI7cK+9ulD43ia25iUueZFptUwflBJD0aHwJ8wtwA=
Subject key identifier: 54:89:2B:DC:33:E9:FA:A4:04:FB:40:F3:C3:C7:B5:89:D2:A7:22:14
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019CAD592FE13E94F0DFF8989EBC2D3F263E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 1268
Signing time: Mon 02 Mar 2026 07:00:29 +0000
Manifest this update: Mon 02 Mar 2026 07:00:29 +0000
Manifest next update: Tue 03 Mar 2026 07:00:29 +0000
Files and hashes: 1: 3MNxWlvYJ1UEreJxUOEEE9L47Ng.roa (hash: dV3Q++D9g4wj89CuXX4P3NnLKAaay8XuMVHolFZE0pI=)
2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: dDtSEI9SN0RnDDK/AufHXJCC1+h8yI40tTyzZOMIRiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2f:e1:3e:94:f0:df:f8:98:9e:bc:2d:3f:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Mar 2 07:00:29 2026 GMT
Not After : Mar 3 07:00:29 2026 GMT
Subject: CN=54892bdc33e9faa404fb40f3c3c7b589d2a72214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:42:4b:dd:5b:b4:1a:8b:16:1c:52:39:09:
2e:74:56:bd:41:89:1c:5d:51:ac:86:85:77:cf:ec:
2a:4c:e6:6e:f1:a8:0a:52:6e:bd:28:f4:ff:c1:32:
12:32:e2:27:ec:c2:b6:81:51:fa:0d:db:d8:97:f3:
e3:ac:af:4c:36:55:61:3e:55:07:65:05:4e:43:ea:
b5:17:40:8c:ad:80:61:0d:c6:36:a4:19:ef:78:1c:
df:8a:52:bb:90:08:14:69:b5:fc:44:ff:94:b0:e7:
25:ce:1e:e4:34:2d:78:82:bb:36:4b:91:ae:e5:1b:
0f:ee:9f:f7:41:83:2b:20:04:4e:c8:6b:8e:95:c2:
61:a2:b0:1f:2c:d8:dd:d4:51:21:01:6c:6a:e0:ad:
4a:5d:37:d0:db:58:06:c5:09:4a:d8:fb:23:7b:c5:
40:39:48:e7:51:06:47:40:0e:a8:d6:05:6b:88:3b:
17:07:b5:e7:ad:b6:b0:31:86:fa:6b:9b:e7:36:90:
0b:5c:2c:de:98:a8:e6:13:5d:5f:cf:09:75:b1:71:
f7:2d:e9:5d:ee:b4:3f:0a:0e:ea:e0:c0:a4:9d:f0:
86:e7:94:65:07:59:de:80:19:d7:31:dd:a6:bb:a3:
39:30:ee:7c:01:ff:63:9a:7e:83:5c:91:4f:f1:b6:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:2B:DC:33:E9:FA:A4:04:FB:40:F3:C3:C7:B5:89:D2:A7:22:14
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:3a:99:69:8d:27:51:29:ba:b0:e5:0c:91:cc:27:e3:f5:
a3:ac:6c:9f:5e:3c:40:61:12:ec:99:64:fc:87:29:33:a2:99:
4d:46:a3:11:98:23:64:36:3f:ef:2c:f1:3e:ca:ec:27:7c:65:
a4:13:b4:4b:99:a6:5f:9c:0c:e5:ab:7a:78:af:3c:2d:ab:4b:
e6:5c:e6:e9:c0:03:7f:0a:ab:ab:b6:1b:62:61:42:1f:aa:e6:
7d:d9:aa:77:f3:88:43:97:10:64:4d:d6:a9:fa:a0:8b:50:6d:
a8:8f:5c:d7:16:bd:ed:70:b9:65:1b:64:70:d5:08:dd:12:3a:
43:4c:16:e5:6b:04:a0:ca:46:70:1d:ce:c9:2c:75:1b:66:45:
5c:06:64:24:63:b2:13:aa:80:a3:a1:5c:78:da:64:37:25:86:
d2:95:36:41:4c:31:93:12:7b:2f:2a:3a:f3:eb:ac:29:70:46:
dc:e3:87:10:76:17:4f:2d:1a:a4:32:0e:6e:4e:d8:35:e3:30:
8f:e7:f4:ab:df:78:ac:ab:83:87:66:f5:71:ae:75:78:d2:8e:
fe:6c:4a:df:cd:fb:fa:e6:63:1e:93:1e:60:a5:19:0a:2d:ac:
70:f9:b2:a9:93:fb:d7:3e:90:1e:8f:81:0c:78:1d:c6:19:31:
a8:01:44:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWS/hPpTw3/iYnrwtPyY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmIwMDM4MWU3MzNkYzZlNDFkMDZkYjllYzhkZGQzMTEy
ODFiZGQwHhcNMjYwMzAyMDcwMDI5WhcNMjYwMzAzMDcwMDI5WjAzMTEwLwYDVQQD
Eyg1NDg5MmJkYzMzZTlmYWE0MDRmYjQwZjNjM2M3YjU4OWQyYTcyMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEVCS91btBqLFhxSOQkudFa9QYkc
XVGshoV3z+wqTOZu8agKUm69KPT/wTISMuIn7MK2gVH6DdvYl/PjrK9MNlVhPlUH
ZQVOQ+q1F0CMrYBhDcY2pBnveBzfilK7kAgUabX8RP+UsOclzh7kNC14grs2S5Gu
5RsP7p/3QYMrIAROyGuOlcJhorAfLNjd1FEhAWxq4K1KXTfQ21gGxQlK2Psje8VA
OUjnUQZHQA6o1gVriDsXB7XnrbawMYb6a5vnNpALXCzemKjmE11fzwl1sXH3Leld
7rQ/Cg7q4MCknfCG55RlB1negBnXMd2mu6M5MO58Af9jmn6DXJFP8baOaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSJK9wz6fqkBPtA88PHtYnSpyIUMB8GA1UdIwQY
MBaAFOz7ADgecz3G5B0G257I3dMRKBvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEt
NTgzNjZlOThhOWU2LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEtNTgzNjZlOThhOWU2
LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjw6mWmN
J1EpurDlDJHMJ+P1o6xsn148QGES7Jlk/IcpM6KZTUajEZgjZDY/7yzxPsrsJ3xl
pBO0S5mmX5wM5at6eK88LatL5lzm6cADfwqrq7YbYmFCH6rmfdmqd/OIQ5cQZE3W
qfqgi1BtqI9c1xa97XC5ZRtkcNUI3RI6Q0wW5WsEoMpGcB3OySx1G2ZFXAZkJGOy
E6qAo6FceNpkNyWG0pU2QUwxkxJ7Lyo68+usKXBG3OOHEHYXTy0apDIObk7YNeMw
j+f0q994rKuDh2b1ca51eNKO/mxK3837+uZjHpMeYKUZCi2scPmyqZP71z6QHo+B
DHgdxhkxqAFEHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:48 2026 by rpki-client