Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File: 7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier: oWJg40/efiawAVNeCqNdRXGSaXjODTjUsbevNSclUs4=
Subject key identifier: 2A:A3:5A:90:6E:4C:BC:D5:EF:6B:E0:E5:9B:86:B9:D2:BF:06:62:DC
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer: /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial: 01A0D383C28DE246F196E7CB4A1C239161C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number: 1152
Signing time: Thu 24 Sep 2026 13:03:42 +0000
Manifest this update: Thu 24 Sep 2026 13:03:42 +0000
Manifest next update: Fri 25 Sep 2026 13:03:42 +0000
Files and hashes: 1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: 6mn8Dxop+BRjnZxIm6ICO80FVSp4w80c5KJ1zLfz95c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:c2:8d:e2:46:f1:96:e7:cb:4a:1c:23:91:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Validity
Not Before: Sep 24 13:03:42 2026 GMT
Not After : Sep 25 13:03:42 2026 GMT
Subject: CN=2aa35a906e4cbcd5ef6be0e59b86b9d2bf0662dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:9a:bf:8f:1d:a9:8d:88:f5:95:9f:08:68:
fe:e2:24:b6:10:1d:df:9f:4b:38:1d:b9:6c:dd:36:
f0:c7:2e:8b:20:08:8c:ba:4a:0f:f6:9a:47:21:db:
3a:91:26:1d:83:a4:28:ae:0e:bc:60:3a:e2:6d:20:
86:4d:94:50:ad:36:83:7a:43:d4:cb:53:8c:b7:06:
ed:9d:35:a9:52:d1:db:a2:bf:fb:26:1e:dc:21:58:
4a:25:07:e3:bb:49:2f:82:32:53:f7:84:45:21:7a:
2c:52:06:09:26:16:0f:0e:08:90:13:df:e3:d8:7c:
42:29:a8:5f:79:7c:ea:65:f2:70:81:77:ed:e4:ea:
94:ef:3a:31:1f:e3:ef:b5:36:41:b9:25:bf:c8:0a:
4e:ae:4a:d0:27:82:91:f4:d8:f6:6f:d5:92:50:47:
e0:45:2b:04:b6:c3:fc:f3:07:14:86:a9:2b:5f:11:
f0:ac:d0:83:90:c8:f0:1f:eb:50:2d:36:4f:00:c8:
55:5d:21:b9:97:20:b3:55:7a:f9:55:fe:8b:34:37:
3e:ae:1c:8a:32:c7:7e:f2:4a:a7:ae:c3:77:44:37:
01:14:aa:93:5a:e5:fe:11:64:06:d8:af:04:d3:6b:
16:88:71:65:d8:68:15:94:09:c4:56:4d:63:5d:ac:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:5A:90:6E:4C:BC:D5:EF:6B:E0:E5:9B:86:B9:D2:BF:06:62:DC
X509v3 Authority Key Identifier:
keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1a:ce:75:22:04:bf:fa:10:38:a1:ee:22:77:c3:a3:d8:a7:
e7:bf:8c:e4:86:84:7d:cc:ea:28:09:47:39:66:35:17:45:d3:
a9:19:20:ec:68:30:2b:cf:d2:63:e6:49:11:0c:b2:6e:6b:17:
45:04:5e:5d:42:6e:26:38:bc:f2:e8:1e:4c:c4:02:e1:06:3d:
5d:80:e8:b5:ae:38:3f:d4:9d:1d:d2:16:28:60:f5:9c:0f:e3:
27:60:e6:1b:23:6a:90:2b:96:49:8f:1e:3e:b6:49:65:51:c8:
14:ae:4e:77:e2:87:f7:6e:91:d6:4b:70:76:6c:23:d6:97:21:
6b:f3:08:e6:ad:1d:26:70:d8:e5:68:d2:7a:f5:76:96:89:14:
35:73:8f:20:40:bc:fe:84:89:5f:64:eb:6b:1f:de:8f:09:56:
8a:38:4f:be:ad:b6:33:97:65:3e:1d:59:14:cb:7d:1f:0e:d9:
77:2d:9b:67:06:f1:ee:fe:f0:a1:c8:a5:89:6b:93:ba:67:5c:
45:5a:16:a7:76:78:48:82:ba:a3:4c:c3:27:80:bf:9c:12:b1:
8c:2f:bc:ce:bb:d2:11:30:66:a3:16:01:76:fb:8e:35:8f:21:
a9:9b:7c:92:fc:47:1f:b5:30:e1:c2:92:bd:03:46:71:91:9b:
40:30:68:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg8KN4kbxlufLShwjkWHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRkNThjNzMwZjQ5MGM2YzY1MzBiNzUwYjUxOGU3OTNh
NDg3YTUwHhcNMjYwOTI0MTMwMzQyWhcNMjYwOTI1MTMwMzQyWjAzMTEwLwYDVQQD
EygyYWEzNWE5MDZlNGNiY2Q1ZWY2YmUwZTU5Yjg2YjlkMmJmMDY2MmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxOav48dqY2I9ZWfCGj+4iS2EB3f
n0s4Hbls3Tbwxy6LIAiMukoP9ppHIds6kSYdg6Qorg68YDribSCGTZRQrTaDekPU
y1OMtwbtnTWpUtHbor/7Jh7cIVhKJQfju0kvgjJT94RFIXosUgYJJhYPDgiQE9/j
2HxCKahfeXzqZfJwgXft5OqU7zoxH+PvtTZBuSW/yApOrkrQJ4KR9Nj2b9WSUEfg
RSsEtsP88wcUhqkrXxHwrNCDkMjwH+tQLTZPAMhVXSG5lyCzVXr5Vf6LNDc+rhyK
Msd+8kqnrsN3RDcBFKqTWuX+EWQG2K8E02sWiHFl2GgVlAnEVk1jXay1MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqjWpBuTLzV72vg5ZuGudK/BmLcMB8GA1UdIwQY
MBaAFO1t1YxzD0kMbGUwt1C1GOeTpIelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjkt
MGFhZWE2NjcwNjYzLzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjktMGFhZWE2NjcwNjYz
LzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyBrOdSIE
v/oQOKHuInfDo9in57+M5IaEfczqKAlHOWY1F0XTqRkg7GgwK8/SY+ZJEQyybmsX
RQReXUJuJji88ugeTMQC4QY9XYDota44P9SdHdIWKGD1nA/jJ2DmGyNqkCuWSY8e
PrZJZVHIFK5Od+KH926R1ktwdmwj1pcha/MI5q0dJnDY5WjSevV2lokUNXOPIEC8
/oSJX2Trax/ejwlWijhPvq22M5dlPh1ZFMt9Hw7Zdy2bZwbx7v7wociliWuTumdc
RVoWp3Z4SIK6o0zDJ4C/nBKxjC+8zrvSETBmoxYBdvuONY8hqZt8kvxHH7Uw4cKS
vQNGcZGbQDBoDA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:03:51 2026 by rpki-client