Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: 9sqEyBa0WybZO1GO7GB2miG4xQ9UZH/D76s8zGFoj1I=
Subject key identifier: 15:2D:10:8F:48:2C:95:56:66:94:B1:15:C5:4E:30:1F:3A:5F:8D:71
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 01A0D9BB2C6B41AE648B9E256643A06D3140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 18:01:57 +0000
Manifest this update: Fri 25 Sep 2026 18:01:57 +0000
Manifest next update: Sat 26 Sep 2026 18:01:57 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: sY7sNRA/8OaqEMUsR7/o/R4vFLV3wKMKZPsarmvuPCk=)
2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:2c:6b:41:ae:64:8b:9e:25:66:43:a0:6d:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Sep 25 18:01:57 2026 GMT
Not After : Sep 26 18:01:57 2026 GMT
Subject: CN=152d108f482c95566694b115c54e301f3a5f8d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:f2:27:03:86:5f:01:b3:70:7d:76:6f:c1:
7b:44:ef:26:e3:d3:7e:32:be:9e:79:15:16:09:16:
94:ba:bd:ee:87:7c:81:be:3d:6d:37:ae:40:bd:f1:
7b:05:ee:f8:78:25:77:b1:17:c0:9d:5c:1f:74:70:
75:f7:1f:9d:a9:f0:9d:e7:49:e0:a4:5c:27:64:75:
31:1a:2b:8d:33:28:7d:55:96:a3:e0:e2:7f:a9:5c:
f9:95:da:4d:94:10:f7:72:80:e8:c5:7e:04:21:df:
b5:39:8d:df:87:74:ab:e0:5a:76:94:96:82:1b:9f:
b9:f4:f0:bf:ee:66:d9:e7:3f:45:20:72:5d:ae:b8:
73:b8:52:c2:d8:b0:99:e1:b6:85:7e:00:f7:3b:1e:
c5:a2:9e:85:34:b8:14:72:5f:60:0f:2d:38:b0:ef:
da:14:59:d0:a3:33:da:7e:79:dd:44:b8:3b:c2:b6:
92:d9:8c:23:5d:b4:de:21:ea:d3:85:23:29:9e:d9:
a4:12:27:04:8c:db:a8:d0:37:c5:51:28:db:a0:85:
6e:1f:4e:3d:1b:2d:20:99:50:33:43:de:73:b8:f4:
0a:8b:08:3e:8b:9e:76:94:1f:00:74:c2:e5:92:c2:
09:e1:8e:16:3e:22:cb:7b:b9:a3:e9:14:7f:69:94:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:10:8F:48:2C:95:56:66:94:B1:15:C5:4E:30:1F:3A:5F:8D:71
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e9:a7:bc:49:e6:78:b9:6e:ac:5d:0b:eb:60:db:83:19:dc:
e6:48:4d:c9:80:38:df:00:ee:a8:72:81:9e:04:10:77:a9:37:
bf:aa:d9:f4:be:51:27:3d:fc:a8:cd:15:bb:b7:35:0a:2c:d2:
19:33:43:fc:af:d5:77:a3:37:2d:35:f3:a6:44:26:97:47:cc:
1a:da:2e:7b:92:af:5b:29:18:31:8f:dd:08:96:6b:92:db:f9:
d6:df:21:70:16:80:91:27:c1:b7:9c:a3:c9:cf:32:3a:43:b9:
45:78:74:26:04:b5:82:36:e2:5e:cf:f5:8e:ee:38:86:3d:97:
ad:1f:ff:77:a2:b2:96:e6:e5:3d:b4:ee:a0:c0:a9:66:e6:4b:
90:a3:ae:11:18:c9:df:e2:e5:fb:24:f3:5d:86:1f:3f:56:f9:
98:8e:92:05:b7:0c:81:7a:07:a5:36:18:57:11:fd:62:2a:90:
fe:63:09:e8:67:b4:21:0f:c7:03:d6:de:97:21:f2:4c:2a:49:
e3:fe:7d:8b:0e:c9:47:88:f2:6a:b6:4c:f6:7f:bb:66:32:05:
fd:6a:85:45:84:93:89:c4:ce:41:90:b0:c3:d0:31:9f:99:fd:
85:d2:85:f1:d6:8f:f6:2c:77:42:bb:ef:92:52:d0:f9:95:8b:
d2:bb:72:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuyxrQa5ki54lZkOgbTFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi
Yzk5MWIwHhcNMjYwOTI1MTgwMTU3WhcNMjYwOTI2MTgwMTU3WjAzMTEwLwYDVQQD
EygxNTJkMTA4ZjQ4MmM5NTU2NjY5NGIxMTVjNTRlMzAxZjNhNWY4ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvijyJwOGXwGzcH12b8F7RO8m49N+
Mr6eeRUWCRaUur3uh3yBvj1tN65AvfF7Be74eCV3sRfAnVwfdHB19x+dqfCd50ng
pFwnZHUxGiuNMyh9VZaj4OJ/qVz5ldpNlBD3coDoxX4EId+1OY3fh3Sr4Fp2lJaC
G5+59PC/7mbZ5z9FIHJdrrhzuFLC2LCZ4baFfgD3Ox7Fop6FNLgUcl9gDy04sO/a
FFnQozPafnndRLg7wraS2YwjXbTeIerThSMpntmkEicEjNuo0DfFUSjboIVuH049
Gy0gmVAzQ95zuPQKiwg+i552lB8AdMLlksIJ4Y4WPiLLe7mj6RR/aZQHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUtEI9ILJVWZpSxFcVOMB86X41xMB8GA1UdIwQY
MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt
MzZlMzlmZWQ3YmVkLzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk
LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+mnvEnm
eLlurF0L62Dbgxnc5khNyYA43wDuqHKBngQQd6k3v6rZ9L5RJz38qM0Vu7c1CizS
GTND/K/Vd6M3LTXzpkQml0fMGtoue5KvWykYMY/dCJZrktv51t8hcBaAkSfBt5yj
yc8yOkO5RXh0JgS1gjbiXs/1ju44hj2XrR//d6KylublPbTuoMCpZuZLkKOuERjJ
3+Ll+yTzXYYfP1b5mI6SBbcMgXoHpTYYVxH9YiqQ/mMJ6Ge0IQ/HA9belyHyTCpJ
4/59iw7JR4jyarZM9n+7ZjIF/WqFRYSTicTOQZCww9Axn5n9hdKF8daP9ix3Qrvv
klLQ+ZWL0rtyuQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:45:39 2026 by rpki-client