Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File: 7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier: gsSV0tXe/3rcSG5U/SR54d9NepboZxf8CFShh8jmSUg=
Subject key identifier: FB:D5:5C:2E:ED:9F:60:3C:4C:9B:CF:D2:5C:27:3F:79:BD:3D:79:0E
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial: 01A1DD9481CA1B6EB5346DA5167A42C4B068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number: 0FD6
Signing time: Sun 15 Nov 2026 05:00:59 +0000
Manifest this update: Sun 15 Nov 2026 05:00:59 +0000
Manifest next update: Mon 16 Nov 2026 05:00:59 +0000
Files and hashes: 1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: 3m0LYkb/VOYzDFR9nlmanQGWJlPRJsvZKrI2gDaTGUc=)
2: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (hash: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:81:ca:1b:6e:b5:34:6d:a5:16:7a:42:c4:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Validity
Not Before: Nov 15 05:00:59 2026 GMT
Not After : Nov 16 05:00:59 2026 GMT
Subject: CN=fbd55c2eed9f603c4c9bcfd25c273f79bd3d790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:2a:4e:e3:62:52:ad:9d:c0:93:46:a8:1b:
15:b4:8e:10:dd:18:cb:a7:9c:ed:14:d9:84:b9:9f:
c7:0d:7c:d4:25:13:f5:6a:84:99:d3:e0:8e:75:94:
6a:71:d3:f0:7f:1a:5e:87:21:dc:e4:d6:9a:12:98:
48:92:6e:9f:0f:17:ff:af:bc:ae:54:e4:b8:55:57:
02:1e:93:e5:42:79:19:3e:e0:c2:ea:32:a8:fc:d9:
07:c6:a6:b5:ca:9e:45:57:3e:38:19:0d:af:c1:44:
bb:6d:6c:2f:d2:34:6a:21:66:79:93:8f:0d:ce:92:
f4:cc:96:b6:9a:d0:50:35:fb:05:35:1d:59:df:ee:
48:92:d6:e5:8f:cb:da:9e:37:d8:57:28:8e:89:85:
0c:36:00:7e:d2:50:93:35:15:b9:e4:18:a3:61:2c:
ad:d0:28:6e:21:46:28:01:58:39:f5:17:c1:70:08:
81:9b:e2:9c:76:22:e2:f0:e3:f1:e2:71:e6:b9:c4:
cf:4d:34:fa:6c:4b:f6:19:30:42:d9:57:dd:be:ae:
66:cf:3e:f9:e2:d3:00:5b:48:8d:91:0b:fb:c4:f8:
37:26:0e:e0:df:e9:87:5d:a2:69:83:1c:04:3f:47:
45:63:1e:99:b0:f3:cb:53:d9:3d:3e:67:83:b1:67:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:5C:2E:ED:9F:60:3C:4C:9B:CF:D2:5C:27:3F:79:BD:3D:79:0E
X509v3 Authority Key Identifier:
keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3b:48:f8:94:1d:1a:5d:c6:f8:84:d8:1b:dd:16:b9:c5:c2:
b7:cf:98:57:8d:ac:96:39:7a:24:22:13:32:25:1c:a3:00:e8:
33:38:5c:d7:94:fe:e1:69:9d:93:8b:fe:3d:fb:8b:4a:da:86:
8b:94:84:2d:ad:8a:34:1e:39:8a:a7:90:a1:c8:aa:62:ae:19:
36:ea:1a:6f:40:48:a9:7f:78:29:cd:3c:a5:7f:c5:d7:a7:6a:
a9:7f:23:97:5c:97:dd:05:1a:ad:26:3e:8f:0c:9d:59:64:c1:
47:7c:f5:ad:d5:a0:63:d2:0a:38:3e:25:4c:c1:95:06:97:fb:
2b:2b:c5:9a:22:7d:8d:5b:d0:58:ae:c1:58:b8:20:d7:34:96:
56:af:40:fa:cf:9a:1d:38:4a:38:61:21:f1:7c:9d:d4:e0:aa:
2a:38:5e:f0:99:7a:a8:38:bf:55:7e:4c:ef:35:fa:10:fb:8c:
17:8b:25:d4:16:d1:b8:c4:7c:35:63:d8:e5:63:da:c8:f4:4b:
a1:b3:f3:e5:eb:29:38:d7:26:71:b1:fb:a7:0f:45:6a:1b:fd:
8e:f5:13:16:1a:22:64:2a:ad:87:79:71:92:66:e5:14:0a:68:
d0:f1:f7:61:4f:6d:b8:4a:2e:2e:a3:85:2a:4f:ee:f5:99:b9:
0d:b3:80:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlIHKG261NG2lFnpCxLBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTJhMTIyZGNmZmMyMjJmYTk5ODRiZjE2YjZmOWYxM2Y3
OGE1YTUwHhcNMjYxMTE1MDUwMDU5WhcNMjYxMTE2MDUwMDU5WjAzMTEwLwYDVQQD
EyhmYmQ1NWMyZWVkOWY2MDNjNGM5YmNmZDI1YzI3M2Y3OWJkM2Q3OTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6cqTuNiUq2dwJNGqBsVtI4Q3RjL
p5ztFNmEuZ/HDXzUJRP1aoSZ0+COdZRqcdPwfxpehyHc5NaaEphIkm6fDxf/r7yu
VOS4VVcCHpPlQnkZPuDC6jKo/NkHxqa1yp5FVz44GQ2vwUS7bWwv0jRqIWZ5k48N
zpL0zJa2mtBQNfsFNR1Z3+5Iktblj8vanjfYVyiOiYUMNgB+0lCTNRW55BijYSyt
0ChuIUYoAVg59RfBcAiBm+KcdiLi8OPx4nHmucTPTTT6bEv2GTBC2Vfdvq5mzz75
4tMAW0iNkQv7xPg3Jg7g3+mHXaJpgxwEP0dFYx6ZsPPLU9k9PmeDsWcBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvVXC7tn2A8TJvP0lwnP3m9PXkOMB8GA1UdIwQY
MBaAFO3ioSLc/8Ii+pmEvxa2+fE/eKWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgt
MjM1OWNiNjBhNTc0LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgtMjM1OWNiNjBhNTc0
LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDtI+JQd
Gl3G+ITYG90WucXCt8+YV42sljl6JCITMiUcowDoMzhc15T+4Wmdk4v+PfuLStqG
i5SELa2KNB45iqeQociqYq4ZNuoab0BIqX94Kc08pX/F16dqqX8jl1yX3QUarSY+
jwydWWTBR3z1rdWgY9IKOD4lTMGVBpf7KyvFmiJ9jVvQWK7BWLgg1zSWVq9A+s+a
HThKOGEh8Xyd1OCqKjhe8Jl6qDi/VX5M7zX6EPuMF4sl1BbRuMR8NWPY5WPayPRL
obPz5espONcmcbH7pw9Fahv9jvUTFhoiZCqth3lxkmblFApo0PH3YU9tuEouLqOF
Kk/u9Zm5DbOAdA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:05 2026 by rpki-client