Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: sGCTsHME311remFsMximS82R2i21r0HWtu0EStj9zbk=
Subject key identifier: 50:1F:83:BE:87:60:85:20:AA:E9:0B:DA:71:AD:6A:B4:C3:AD:C6:8A
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 01A0E06239B29A8689AD1653A6AE35C101C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 17D3
Signing time: Sun 27 Sep 2026 01:02:08 +0000
Manifest this update: Sun 27 Sep 2026 01:02:08 +0000
Manifest next update: Mon 28 Sep 2026 01:02:08 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: bf/juc0NB9IXhWmF5htyH/oPJrqg4/iVhHsHAskKsV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:39:b2:9a:86:89:ad:16:53:a6:ae:35:c1:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Sep 27 01:02:08 2026 GMT
Not After : Sep 28 01:02:08 2026 GMT
Subject: CN=501f83be87608520aae90bda71ad6ab4c3adc68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:ef:de:4e:1b:b6:1e:2a:4b:98:7e:f9:d5:
a8:48:76:cc:7d:7e:ed:d2:ee:63:cc:0c:5c:88:ac:
3c:14:7f:43:79:de:5f:5b:5e:b0:f0:53:cb:ba:be:
fe:64:f5:95:55:c8:00:68:9b:d9:a7:bf:12:52:4c:
ff:62:e2:d0:a7:53:a3:f6:d8:a7:1b:41:37:7a:ba:
a1:e8:ac:fa:71:de:43:f9:fa:df:5a:7c:20:c2:5d:
66:ff:5a:98:a6:26:ff:52:ec:5d:7f:e5:ba:2a:eb:
da:fe:32:c8:f1:b9:90:bc:b9:e1:ae:c3:c5:eb:15:
66:98:9d:0a:fe:38:48:40:26:7f:7e:9d:c9:5d:ee:
05:97:1c:c5:8f:85:8a:0c:9d:95:05:8d:44:4c:a7:
f3:69:55:94:7b:ea:20:a0:a7:3b:47:de:a9:75:a1:
f6:6e:2e:73:62:8b:80:8b:0b:8a:9c:ce:53:a1:ff:
ef:13:db:0a:36:7f:b6:b9:1d:c6:ea:5f:2f:f5:6e:
0f:fc:6f:6a:0f:4d:f8:e0:e3:63:1f:f6:cf:15:c3:
d7:d6:96:12:85:fb:b2:58:be:78:df:c5:2b:e5:f3:
d1:ba:dd:bd:da:49:6c:08:fe:c2:59:05:5b:55:5c:
2c:07:30:f1:85:6b:2d:43:38:fd:fb:40:4d:bd:ec:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1F:83:BE:87:60:85:20:AA:E9:0B:DA:71:AD:6A:B4:C3:AD:C6:8A
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ed:3e:b1:b2:95:80:e7:9f:9a:5c:5f:e8:54:9f:21:2f:4c:
81:a1:45:c9:4b:54:af:98:33:6d:5f:d6:12:14:ad:f3:38:91:
5e:7a:28:fa:ee:50:87:fe:f6:99:d6:8d:10:e2:13:90:9c:9d:
c5:90:0a:b7:4c:8c:63:60:e2:6f:ff:b0:5a:2f:d1:2f:48:9a:
2d:d2:4e:c1:87:ff:7d:2f:03:cc:f4:b4:80:11:0e:4e:1d:5f:
cd:3b:76:ad:0b:c3:de:17:04:f6:4b:68:42:b8:77:5f:d1:19:
0e:c0:74:f2:29:66:a2:13:42:71:bb:d4:94:d0:b1:a1:00:27:
03:a5:23:45:0f:e6:d2:50:00:28:b1:11:1f:fb:18:d4:24:7f:
12:3b:c1:77:0f:fc:14:c6:06:ce:03:3a:ba:88:e7:28:bc:35:
19:bd:cb:ed:e8:90:7c:ae:03:2e:08:3b:21:4d:ff:91:f5:5d:
40:00:4a:a1:4c:c1:b8:15:23:05:7a:ef:a1:06:ba:43:67:d7:
9f:ca:42:be:75:58:d6:63:32:73:db:c3:56:d5:b3:57:80:69:
21:c0:4c:35:9d:d1:9f:ff:61:4e:fe:76:b0:a3:15:02:d0:8f:
e1:b8:1e:8c:86:2e:02:0b:58:d4:c5:3e:38:29:46:38:a0:c5:
03:3f:a6:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYjmymoaJrRZTpq41wQHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy
NTEzNDQwHhcNMjYwOTI3MDEwMjA4WhcNMjYwOTI4MDEwMjA4WjAzMTEwLwYDVQQD
Eyg1MDFmODNiZTg3NjA4NTIwYWFlOTBiZGE3MWFkNmFiNGMzYWRjNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs3v3k4bth4qS5h++dWoSHbMfX7t
0u5jzAxciKw8FH9Ded5fW16w8FPLur7+ZPWVVcgAaJvZp78SUkz/YuLQp1Oj9tin
G0E3erqh6Kz6cd5D+frfWnwgwl1m/1qYpib/Uuxdf+W6Kuva/jLI8bmQvLnhrsPF
6xVmmJ0K/jhIQCZ/fp3JXe4FlxzFj4WKDJ2VBY1ETKfzaVWUe+ogoKc7R96pdaH2
bi5zYouAiwuKnM5Tof/vE9sKNn+2uR3G6l8v9W4P/G9qD0344ONjH/bPFcPX1pYS
hfuyWL5438Ur5fPRut292klsCP7CWQVbVVwsBzDxhWstQzj9+0BNvewJvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAfg76HYIUgqukL2nGtarTDrcaKMB8GA1UdIwQY
MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt
ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5
LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+0+sbKV
gOefmlxf6FSfIS9MgaFFyUtUr5gzbV/WEhSt8ziRXnoo+u5Qh/72mdaNEOITkJyd
xZAKt0yMY2Dib/+wWi/RL0iaLdJOwYf/fS8DzPS0gBEOTh1fzTt2rQvD3hcE9kto
Qrh3X9EZDsB08ilmohNCcbvUlNCxoQAnA6UjRQ/m0lAAKLERH/sY1CR/EjvBdw/8
FMYGzgM6uojnKLw1Gb3L7eiQfK4DLgg7IU3/kfVdQABKoUzBuBUjBXrvoQa6Q2fX
n8pCvnVY1mMyc9vDVtWzV4BpIcBMNZ3Rn/9hTv52sKMVAtCP4bgejIYuAgtY1MU+
OClGOKDFAz+mxg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:50:29 2026 by rpki-client