
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: 3ImT0SPl+gvGt5XxSEqPKEhdYVnzwjREuLG91x9KkcA=
Subject key identifier: F6:DF:44:A2:86:B0:B7:27:54:A4:D3:0D:39:ED:FF:7B:09:42:44:D6
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 01A0CBC81B6BEAAC637DEAB259FC01C4C483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0E75
Signing time: Wed 23 Sep 2026 01:01:24 +0000
Manifest this update: Wed 23 Sep 2026 01:01:24 +0000
Manifest next update: Thu 24 Sep 2026 01:01:24 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: PbfCedXTGVGCDmXjFLoePNdgOYeiooufdz406BfxJ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:1b:6b:ea:ac:63:7d:ea:b2:59:fc:01:c4:c4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Sep 23 01:01:24 2026 GMT
Not After : Sep 24 01:01:24 2026 GMT
Subject: CN=f6df44a286b0b72754a4d30d39edff7b094244d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:c6:64:96:44:c1:62:f1:42:df:a5:fa:dd:
d3:6e:49:20:42:c8:bc:37:64:fc:d2:25:d3:76:44:
a7:2d:d9:3f:12:96:aa:f6:ff:d0:4e:0f:b7:58:84:
8b:4c:c8:87:1d:e9:66:f0:e3:ae:b3:b3:7d:43:8c:
0f:89:7b:16:d1:c1:c0:a5:20:a6:9e:fe:89:8c:b8:
39:d8:21:21:67:ef:d0:38:69:39:be:fa:15:31:72:
87:b1:1c:9c:fa:1e:35:a5:47:80:68:8f:9d:4d:7e:
5f:67:7a:0c:7e:fa:0b:8e:7b:33:e6:83:28:1d:94:
b8:6a:8a:e2:87:45:dc:16:9c:6f:79:51:c2:36:3e:
44:e3:5d:56:2e:27:4d:2f:23:e6:a1:98:a9:1b:dc:
1c:89:8d:e7:82:70:fb:73:66:9a:62:0c:59:b3:8d:
3c:1b:2e:13:41:eb:df:f0:1f:f2:21:f4:06:4c:90:
4e:c9:e2:bb:00:e5:be:4f:c0:cc:38:69:62:3d:53:
06:22:19:54:b1:a7:86:d5:84:8b:5c:3c:c2:d9:6f:
69:2d:a3:3d:1f:12:5b:b9:1f:37:47:bb:22:bf:f3:
b1:d9:3b:7a:c5:29:ae:f2:cc:f5:54:0d:eb:97:c9:
e2:fc:f4:66:1b:07:e7:18:65:a5:88:b2:f2:ff:01:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:44:A2:86:B0:B7:27:54:A4:D3:0D:39:ED:FF:7B:09:42:44:D6
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:df:cb:4b:82:37:b1:46:ef:49:ac:ef:26:44:fe:9b:ab:5e:
2d:f0:33:cf:c2:19:6c:10:70:2d:d2:8b:d2:20:15:b4:2e:b7:
0f:a9:82:68:69:23:d3:d8:2a:4d:45:e5:02:3c:3e:be:9d:15:
ad:23:c7:f6:9c:78:de:e4:d0:bd:2d:de:67:22:c3:16:07:b8:
f9:4c:d1:2e:cd:d6:ae:af:fe:6c:19:2b:90:75:40:90:f5:3a:
53:f3:30:0f:12:f4:85:54:b2:94:d8:55:97:a1:c3:97:f4:14:
f0:28:a1:83:47:13:62:17:0c:62:12:99:17:74:a6:2a:6b:4d:
ed:8f:00:df:87:c3:20:90:15:39:d3:48:bf:e7:41:59:05:68:
93:bf:8b:a7:72:42:41:b2:5f:94:db:28:2b:9b:6b:7f:e8:9a:
14:63:65:49:c1:b3:31:0c:e8:28:e0:a2:53:00:28:9b:37:51:
42:9f:74:04:47:55:24:98:52:8f:ef:44:25:4a:92:2b:18:18:
24:70:73:60:76:3a:7c:74:4f:7d:58:b0:40:0a:9c:e6:56:88:
16:c3:47:a0:41:d0:74:04:e4:f2:d2:18:09:a0:8b:7d:63:b5:
85:45:bb:8f:34:4c:f8:9e:77:37:87:3e:fa:98:bd:5f:37:f7:
4f:da:55:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLyBtr6qxjfeqyWfwBxMSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy
MzkwODEwHhcNMjYwOTIzMDEwMTI0WhcNMjYwOTI0MDEwMTI0WjAzMTEwLwYDVQQD
EyhmNmRmNDRhMjg2YjBiNzI3NTRhNGQzMGQzOWVkZmY3YjA5NDI0NGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaTGZJZEwWLxQt+l+t3TbkkgQsi8
N2T80iXTdkSnLdk/Epaq9v/QTg+3WISLTMiHHelm8OOus7N9Q4wPiXsW0cHApSCm
nv6JjLg52CEhZ+/QOGk5vvoVMXKHsRyc+h41pUeAaI+dTX5fZ3oMfvoLjnsz5oMo
HZS4aorih0XcFpxveVHCNj5E411WLidNLyPmoZipG9wciY3ngnD7c2aaYgxZs408
Gy4TQevf8B/yIfQGTJBOyeK7AOW+T8DMOGliPVMGIhlUsaeG1YSLXDzC2W9pLaM9
HxJbuR83R7siv/Ox2Tt6xSmu8sz1VA3rl8ni/PRmGwfnGGWliLLy/wGKHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbfRKKGsLcnVKTTDTnt/3sJQkTWMB8GA1UdIwQY
MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt
ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz
LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUt/LS4I3
sUbvSazvJkT+m6teLfAzz8IZbBBwLdKL0iAVtC63D6mCaGkj09gqTUXlAjw+vp0V
rSPH9px43uTQvS3eZyLDFge4+UzRLs3Wrq/+bBkrkHVAkPU6U/MwDxL0hVSylNhV
l6HDl/QU8Cihg0cTYhcMYhKZF3SmKmtN7Y8A34fDIJAVOdNIv+dBWQVok7+Lp3JC
QbJflNsoK5trf+iaFGNlScGzMQzoKOCiUwAomzdRQp90BEdVJJhSj+9EJUqSKxgY
JHBzYHY6fHRPfViwQAqc5laIFsNHoEHQdATk8tIYCaCLfWO1hUW7jzRM+J53N4c+
+pi9Xzf3T9pVMg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:03 2026 by rpki-client