Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: /+BLoLYmp5NMsqwdl7FHZOwvyoHqy2D1YaKqkoVowUU=
Subject key identifier: A4:33:E7:3F:15:B1:7A:B1:94:BF:80:04:4D:79:F9:EC:75:32:1D:5C
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 01A0DE05D68F749EB475AD91A0426A6BAA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 1929
Signing time: Sat 26 Sep 2026 14:01:59 +0000
Manifest this update: Sat 26 Sep 2026 14:01:59 +0000
Manifest next update: Sun 27 Sep 2026 14:01:59 +0000
Files and hashes: 1: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: IDnrojIypU/yfwWfVa1FYSYkZY4ebuDuKyKpcf7D0vg=)
2: m5yvHicFnXm_Esifvf9nJ43HYjM.roa (hash: 2UG9meAu50+1K4RYnFNAIuouwlkL5D4Ox6KRSauQKrc=)
3: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (hash: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:d6:8f:74:9e:b4:75:ad:91:a0:42:6a:6b:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Sep 26 14:01:59 2026 GMT
Not After : Sep 27 14:01:59 2026 GMT
Subject: CN=a433e73f15b17ab194bf80044d79f9ec75321d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:33:6e:08:e5:a4:4f:a9:0d:7f:ff:11:2f:29:
c6:e7:5c:df:e8:39:bb:50:28:1b:69:2f:c3:e1:1e:
cb:2e:81:fb:4a:0e:82:d2:25:1d:cd:81:fb:39:96:
59:c4:db:f5:6a:9a:d2:34:f4:a8:3b:f1:04:d4:9f:
25:ab:a6:dc:ad:c5:55:07:6e:50:0b:a4:00:1f:6f:
83:20:82:92:43:1a:a7:bb:ba:c9:89:21:b0:ad:97:
23:86:ba:d6:24:9c:7d:82:d1:48:cf:b0:50:c4:c8:
fd:80:98:88:07:a5:45:b0:5b:6b:5a:eb:2d:3d:94:
11:41:53:7c:05:58:60:71:a5:9f:eb:b7:af:d7:fd:
ff:95:b1:7f:74:15:5c:25:63:49:2c:fe:13:3e:29:
b5:24:bf:c4:a4:9f:89:48:44:85:ed:71:5d:ae:2b:
58:da:32:bd:74:00:c1:f3:3c:cb:37:a4:8d:27:ad:
54:01:10:93:ce:95:a4:3d:8c:69:56:ba:1f:f3:14:
cb:59:73:c1:2f:f8:59:56:1d:e7:ed:38:3d:f7:76:
73:e3:35:9d:31:1b:d1:a7:b6:46:05:d8:4c:57:f3:
de:0b:75:ca:a1:9d:0d:11:39:0f:d3:c7:46:19:80:
f1:cf:8e:a8:96:16:16:20:27:e5:87:47:ad:0a:61:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:E7:3F:15:B1:7A:B1:94:BF:80:04:4D:79:F9:EC:75:32:1D:5C
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:d4:03:c5:18:87:5f:a9:30:1e:11:67:f9:59:04:bb:ce:
20:0f:ba:f8:17:71:2a:87:6e:29:f1:ac:a7:d6:64:f1:b9:92:
64:a2:f1:36:5f:c8:1b:f1:a5:3d:5a:95:97:f6:74:e2:6a:3c:
c5:99:79:ba:67:ac:10:1c:bb:ca:82:05:ad:27:7b:ba:b2:60:
c3:79:d0:7c:f3:12:7b:e2:c0:54:3d:08:98:6f:cc:e1:3d:18:
c4:58:a0:ce:33:ba:aa:51:41:a4:0c:59:97:2c:d7:4b:ea:d3:
7d:ec:bb:02:50:2c:f3:ed:45:35:0f:20:cc:b6:a7:00:67:c9:
de:30:fc:db:99:36:a4:a6:85:97:5e:63:68:ba:c4:86:1a:f7:
ba:29:1b:46:38:c0:64:48:5d:c5:58:8d:a9:df:c9:88:a1:de:
bb:0b:c7:79:f0:ab:bf:08:35:f9:40:d2:e0:45:52:54:ca:ad:
e7:97:fd:ca:2d:cb:c4:cc:ce:8f:11:03:fa:a1:3c:d2:e4:f1:
de:56:da:2a:f2:9b:c9:64:56:4d:41:bd:d5:ba:8b:fa:ed:e2:
18:e1:7c:73:b3:41:a9:5e:c5:ca:27:b1:33:5e:85:f7:af:49:
c6:28:c7:51:f6:71:ac:22:2c:e8:31:1f:a5:b7:26:18:07:7e:
54:d4:4a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeBdaPdJ60da2RoEJqa6qUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZDViM2FmMDA2NDk4MWU5NmJiNWUyN2Q4ZjA0ZDg2ZTYz
MDZjZmEwHhcNMjYwOTI2MTQwMTU5WhcNMjYwOTI3MTQwMTU5WjAzMTEwLwYDVQQD
EyhhNDMzZTczZjE1YjE3YWIxOTRiZjgwMDQ0ZDc5ZjllYzc1MzIxZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DNuCOWkT6kNf/8RLynG51zf6Dm7
UCgbaS/D4R7LLoH7Sg6C0iUdzYH7OZZZxNv1aprSNPSoO/EE1J8lq6bcrcVVB25Q
C6QAH2+DIIKSQxqnu7rJiSGwrZcjhrrWJJx9gtFIz7BQxMj9gJiIB6VFsFtrWust
PZQRQVN8BVhgcaWf67ev1/3/lbF/dBVcJWNJLP4TPim1JL/EpJ+JSESF7XFdritY
2jK9dADB8zzLN6SNJ61UARCTzpWkPYxpVrof8xTLWXPBL/hZVh3n7Tg993Zz4zWd
MRvRp7ZGBdhMV/PeC3XKoZ0NETkP08dGGYDxz46olhYWICflh0etCmF7gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQz5z8VsXqxlL+ABE15+ex1Mh1cMB8GA1UdIwQY
MBaAFO7Vs68AZJgelrteJ9jwTYbmMGz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAt
MDMwYWNkM2FlMzM2LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAtMDMwYWNkM2FlMzM2
LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTzUA8UY
h1+pMB4RZ/lZBLvOIA+6+BdxKoduKfGsp9Zk8bmSZKLxNl/IG/GlPVqVl/Z04mo8
xZl5umesEBy7yoIFrSd7urJgw3nQfPMSe+LAVD0ImG/M4T0YxFigzjO6qlFBpAxZ
lyzXS+rTfey7AlAs8+1FNQ8gzLanAGfJ3jD825k2pKaFl15jaLrEhhr3uikbRjjA
ZEhdxViNqd/JiKHeuwvHefCrvwg1+UDS4EVSVMqt55f9yi3LxMzOjxED+qE80uTx
3lbaKvKbyWRWTUG91bqL+u3iGOF8c7NBqV7FyiexM16F969JxijHUfZxrCIs6DEf
pbcmGAd+VNRKTg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:20:32 2026 by rpki-client