Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
File: 7B-pzoPKFB0pqr7sAMX598upk8Y.mft (raw, json)
Hash identifier: ccEH2EXbh6XXziaAvprDg8xoahAD8THh7YiGh0Q25UE=
Subject key identifier: 17:F4:BC:BF:87:F9:83:A8:0A:33:41:73:56:CD:CD:6E:9A:31:13:B5
Authority key identifier: EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
Certificate issuer: /CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Certificate serial: 01A0DC173E59123C2EBED953BB930BB501CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
Manifest number: 0174
Signing time: Sat 26 Sep 2026 05:01:45 +0000
Manifest this update: Sat 26 Sep 2026 05:01:45 +0000
Manifest next update: Sun 27 Sep 2026 05:01:45 +0000
Files and hashes: 1: 7B-pzoPKFB0pqr7sAMX598upk8Y.crl (hash: 1ZSWKKCIo3JD+Vr8Ist+rO6FV+hUzoHyO0KpcJqI5fs=)
2: lty9FU9-lvCivlXe3WOpvJPkZAU.roa (hash: w7emHClyLxjQcPa4VKPJS2kQf8ZhF6GvGuiuy4vd4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:3e:59:12:3c:2e:be:d9:53:bb:93:0b:b5:01:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec1fa9ce83ca141d29aabeec00c5f9f7cba993c6
Validity
Not Before: Sep 26 05:01:45 2026 GMT
Not After : Sep 27 05:01:45 2026 GMT
Subject: CN=17f4bcbf87f983a80a33417356cdcd6e9a3113b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:8b:79:36:a9:2c:3c:82:22:d5:20:95:57:
b2:ad:55:ab:24:8b:56:b8:a1:b8:1c:d6:c3:83:8b:
ae:5a:29:d2:b0:70:2f:01:b3:ec:5d:b7:6b:46:89:
e1:58:6e:fb:b2:81:de:a4:0f:54:d3:3c:bc:b7:84:
0e:ac:70:97:f9:37:8d:83:8e:b5:39:af:21:59:9e:
28:34:19:ea:aa:ae:4c:93:85:5c:63:2c:5f:15:e5:
24:3c:ba:8b:2e:a6:32:b8:ba:88:b6:9d:d3:88:15:
f3:52:74:68:84:8d:06:e5:d9:2a:99:cc:3d:2f:65:
99:cc:e2:f8:1a:ff:d0:dd:a0:3c:d0:32:81:b1:ca:
9f:d4:b6:c4:54:85:ab:dd:ce:3e:86:be:01:a1:dc:
b1:f0:0b:70:8b:09:33:df:fe:7a:8a:8e:20:76:d8:
40:2d:02:41:99:a9:fb:ac:c9:d4:90:80:ba:a4:57:
be:61:7b:d5:2f:e6:c4:2e:3a:e9:a6:81:db:55:aa:
80:af:5e:04:67:60:a4:22:48:e1:f2:bf:b9:1e:a3:
67:25:41:32:05:1f:50:35:19:7c:1b:78:e0:a7:52:
9e:2a:92:43:11:b1:d9:30:0f:cc:8b:6a:9e:be:42:
a5:0f:6c:02:c9:6a:c3:25:a4:20:32:bd:27:c2:5f:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:BC:BF:87:F9:83:A8:0A:33:41:73:56:CD:CD:6E:9A:31:13:B5
X509v3 Authority Key Identifier:
keyid:EC:1F:A9:CE:83:CA:14:1D:29:AA:BE:EC:00:C5:F9:F7:CB:A9:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B-pzoPKFB0pqr7sAMX598upk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/79a8c1-51fc-4aad-8f74-015760467cd1/1/7B-pzoPKFB0pqr7sAMX598upk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3c:2d:87:3b:a7:33:79:10:2e:41:6f:bd:5f:32:0a:e6:bb:
d5:68:ef:56:68:1d:83:50:4d:26:c4:7c:7c:5e:5a:02:d4:cc:
a4:60:29:5b:0c:32:e9:d7:71:79:da:a6:0c:f2:4d:3a:c9:2f:
d7:bd:29:91:97:30:71:24:f1:9b:e4:1c:f4:ea:2e:38:1a:47:
f7:a1:cf:70:a4:2a:ad:9a:70:76:12:e0:71:30:4a:f4:62:37:
b3:ea:46:e3:8f:6c:32:53:88:88:58:5b:d7:5b:05:eb:d4:75:
04:b3:5e:a7:85:12:0e:1e:7c:2c:f5:f9:8c:ee:16:1f:51:a5:
b5:36:5e:de:a1:f0:24:df:41:b2:df:38:3c:11:79:32:95:92:
b6:96:3a:61:3c:22:ef:ef:05:bd:bc:86:fe:4d:59:e7:77:57:
8c:a4:b2:88:3b:76:04:e4:78:81:9b:16:e6:bb:bf:3d:4a:77:
13:53:be:27:04:d8:c2:f7:cc:e5:ef:f7:ad:06:ae:7e:7a:59:
47:6b:aa:63:6c:c0:40:b6:57:91:3a:7b:48:7e:ec:42:12:ca:
5d:b7:46:e4:84:26:5f:fc:2e:b5:42:2e:5d:21:d4:bb:bc:7b:
9b:26:73:9a:04:24:17:c5:01:17:3a:29:92:e3:b2:d5:6d:c4:
4c:4f:fc:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFz5ZEjwuvtlTu5MLtQHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMWZhOWNlODNjYTE0MWQyOWFhYmVlYzAwYzVmOWY3Y2Jh
OTkzYzYwHhcNMjYwOTI2MDUwMTQ1WhcNMjYwOTI3MDUwMTQ1WjAzMTEwLwYDVQQD
EygxN2Y0YmNiZjg3Zjk4M2E4MGEzMzQxNzM1NmNkY2Q2ZTlhMzExM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2CLeTapLDyCItUglVeyrVWrJItW
uKG4HNbDg4uuWinSsHAvAbPsXbdrRonhWG77soHepA9U0zy8t4QOrHCX+TeNg461
Oa8hWZ4oNBnqqq5Mk4VcYyxfFeUkPLqLLqYyuLqItp3TiBXzUnRohI0G5dkqmcw9
L2WZzOL4Gv/Q3aA80DKBscqf1LbEVIWr3c4+hr4Bodyx8Atwiwkz3/56io4gdthA
LQJBman7rMnUkIC6pFe+YXvVL+bELjrppoHbVaqAr14EZ2CkIkjh8r+5HqNnJUEy
BR9QNRl8G3jgp1KeKpJDEbHZMA/Mi2qevkKlD2wCyWrDJaQgMr0nwl/LMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf0vL+H+YOoCjNBc1bNzW6aMRO1MB8GA1UdIwQY
MBaAFOwfqc6DyhQdKaq+7ADF+ffLqZPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ItcHpvUEtGQjBwcXI3c0FNWDU5OHVwazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83OWE4YzEtNTFmYy00YWFkLThmNzQt
MDE1NzYwNDY3Y2QxLzEvN0ItcHpvUEtGQjBwcXI3c0FNWDU5OHVwazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83OWE4YzEtNTFmYy00YWFkLThmNzQtMDE1NzYwNDY3Y2Qx
LzEvN0ItcHpvUEtGQjBwcXI3c0FNWDU5OHVwazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzwthzun
M3kQLkFvvV8yCua71WjvVmgdg1BNJsR8fF5aAtTMpGApWwwy6ddxedqmDPJNOskv
170pkZcwcSTxm+Qc9OouOBpH96HPcKQqrZpwdhLgcTBK9GI3s+pG449sMlOIiFhb
11sF69R1BLNep4USDh58LPX5jO4WH1GltTZe3qHwJN9Bst84PBF5MpWStpY6YTwi
7+8FvbyG/k1Z53dXjKSyiDt2BOR4gZsW5ru/PUp3E1O+JwTYwvfM5e/3rQaufnpZ
R2uqY2zAQLZXkTp7SH7sQhLKXbdG5IQmX/wutUIuXSHUu7x7myZzmgQkF8UBFzop
kuOy1W3ETE/8ww==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:46:58 2026 by rpki-client