Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
File: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft (raw, json)
Hash identifier: sNI7+T0jyaM326zhoNye9cBX0N/46Wv7PwhQZ6qro4I=
Subject key identifier: CE:AD:28:66:68:DC:95:28:46:29:78:AA:0D:E0:57:B2:AE:CF:FD:A8
Authority key identifier: EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
Certificate issuer: /CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Certificate serial: 01A1250BEEB3DEA648564470D0772A288C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:01:41 +0000
Manifest this update: Sat 10 Oct 2026 09:01:41 +0000
Manifest next update: Sun 11 Oct 2026 09:01:41 +0000
Files and hashes: 1: 7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl (hash: ocJKxCtIhVgzXuWcLpJaySBGR2XUpTi8mb8E3b5d2nI=)
2: XbUrIbN32tx_I5q3CIy0eDpniyc.roa (hash: rSzXDaoG3c1rlucOs36GgG/tUP5/xd5PVZrM6moq2JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:ee:b3:de:a6:48:56:44:70:d0:77:2a:28:8c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec33207d144a0944f52e8671a91839a83ac9a6fa
Validity
Not Before: Oct 10 09:01:41 2026 GMT
Not After : Oct 11 09:01:41 2026 GMT
Subject: CN=cead286668dc9528462978aa0de057b2aecffda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:d3:ac:32:99:3a:99:94:b8:de:0d:b4:97:
03:31:c4:91:73:aa:8b:6a:36:7d:f5:88:db:04:4f:
a9:7b:df:c8:0a:7f:a1:29:f6:46:81:80:5d:34:fb:
de:47:61:7a:67:89:0e:6b:64:21:bf:bf:50:61:94:
50:17:16:76:b3:fd:88:6c:f1:2f:fa:a4:cd:0e:3c:
10:3f:ca:06:82:3a:55:ab:06:76:de:f5:cd:83:a3:
82:41:c6:70:98:19:31:88:d2:94:a2:75:45:fc:2a:
09:9e:41:5a:4c:94:fd:c1:51:2a:4c:74:5a:91:27:
3d:9d:50:03:3b:7d:de:f4:b0:01:a2:d5:6b:bd:4a:
58:f8:35:ab:a8:2d:8c:f5:b6:99:59:f8:5d:79:99:
b5:99:a4:55:98:2f:24:f9:87:03:78:c8:73:e4:8c:
b7:78:64:2f:81:e9:52:66:50:83:d4:a6:44:23:ff:
28:a4:74:77:1b:ea:de:59:db:44:a7:ee:a5:a4:2f:
d7:c7:62:58:55:b0:e0:43:83:ab:99:0e:09:3e:3b:
62:0b:e2:12:37:9f:5e:23:92:a2:55:e5:17:59:0a:
a6:b7:2d:52:7a:03:56:9b:b9:e4:ab:c9:6f:43:40:
cf:c5:0a:42:66:72:46:83:2d:44:b6:63:95:b3:57:
72:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:28:66:68:DC:95:28:46:29:78:AA:0D:E0:57:B2:AE:CF:FD:A8
X509v3 Authority Key Identifier:
keyid:EC:33:20:7D:14:4A:09:44:F5:2E:86:71:A9:18:39:A8:3A:C9:A6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DMgfRRKCUT1LoZxqRg5qDrJpvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/7DMgfRRKCUT1LoZxqRg5qDrJpvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9f:64:9b:6f:77:82:1b:a0:8c:48:54:d1:98:b0:f1:29:81:
9a:b7:46:0a:6a:b1:22:30:98:20:60:f3:a8:e9:77:64:f0:4f:
f0:f6:22:0f:c7:78:e1:2a:0c:73:14:b6:ce:da:cc:4c:31:63:
a7:c1:88:9a:9b:d0:ea:81:f6:88:1a:c5:66:97:7d:06:9c:e8:
83:53:0d:14:5b:84:90:07:d7:03:97:d3:9a:6c:3b:48:6d:e1:
a9:ef:29:fa:34:d0:cc:01:c7:ba:4e:e0:24:a4:43:62:b6:96:
35:dc:26:b3:bc:07:7a:22:1e:0f:07:73:ae:bc:aa:9e:d5:86:
33:1c:63:98:77:e0:2c:72:08:94:0c:00:26:ee:02:9b:66:0f:
f6:7c:cf:22:03:c0:88:64:f0:85:b7:5b:d3:54:99:12:56:07:
44:2a:90:f2:0c:2a:43:db:b7:1f:b3:d2:e6:c6:dc:34:12:f7:
20:35:38:73:11:26:70:27:5e:49:b7:ae:3b:96:04:b6:ba:68:
ab:0a:64:f4:2a:2a:d9:7f:01:a9:f4:00:92:42:ec:11:f2:2d:
5a:3a:b4:28:45:a2:00:83:58:f0:83:65:98:e8:c4:7e:6c:58:
1c:bb:a4:e8:a8:37:83:eb:1f:30:96:a8:0f:24:da:03:f6:fb:
ac:db:64:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElC+6z3qZIVkRw0HcqKIwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzMyMDdkMTQ0YTA5NDRmNTJlODY3MWE5MTgzOWE4M2Fj
OWE2ZmEwHhcNMjYxMDEwMDkwMTQxWhcNMjYxMDExMDkwMTQxWjAzMTEwLwYDVQQD
EyhjZWFkMjg2NjY4ZGM5NTI4NDYyOTc4YWEwZGUwNTdiMmFlY2ZmZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNXTrDKZOpmUuN4NtJcDMcSRc6qL
ajZ99YjbBE+pe9/ICn+hKfZGgYBdNPveR2F6Z4kOa2Qhv79QYZRQFxZ2s/2IbPEv
+qTNDjwQP8oGgjpVqwZ23vXNg6OCQcZwmBkxiNKUonVF/CoJnkFaTJT9wVEqTHRa
kSc9nVADO33e9LABotVrvUpY+DWrqC2M9baZWfhdeZm1maRVmC8k+YcDeMhz5Iy3
eGQvgelSZlCD1KZEI/8opHR3G+reWdtEp+6lpC/Xx2JYVbDgQ4OrmQ4JPjtiC+IS
N59eI5KiVeUXWQqmty1SegNWm7nkq8lvQ0DPxQpCZnJGgy1EtmOVs1dyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6tKGZo3JUoRil4qg3gV7Kuz/2oMB8GA1UdIwQY
MBaAFOwzIH0USglE9S6GcakYOag6yab6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0RNZ2ZSUktDVVQxTG9aeHFSZzVxRHJKcHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt
ZjBjYWQ5ZmY2NWJlLzEvN0RNZ2ZSUktDVVQxTG9aeHFSZzVxRHJKcHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl
LzEvN0RNZ2ZSUktDVVQxTG9aeHFSZzVxRHJKcHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ9km293
ghugjEhU0Ziw8SmBmrdGCmqxIjCYIGDzqOl3ZPBP8PYiD8d44SoMcxS2ztrMTDFj
p8GImpvQ6oH2iBrFZpd9Bpzog1MNFFuEkAfXA5fTmmw7SG3hqe8p+jTQzAHHuk7g
JKRDYraWNdwms7wHeiIeDwdzrryqntWGMxxjmHfgLHIIlAwAJu4Cm2YP9nzPIgPA
iGTwhbdb01SZElYHRCqQ8gwqQ9u3H7PS5sbcNBL3IDU4cxEmcCdeSbeuO5YEtrpo
qwpk9Coq2X8BqfQAkkLsEfItWjq0KEWiAINY8INlmOjEfmxYHLuk6Kg3g+sfMJao
DyTaA/b7rNtkjQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:12:21 2026 by rpki-client