Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: OpChapug+m5p4of8W/d+VJiqfmYAwPI0PWikRc4DmcI=
Subject key identifier: 2E:56:21:BD:4F:11:7E:45:DE:A4:B3:E5:D7:82:4E:1D:A7:16:11:94
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 01A0CFA49F95A5AD6D088670381E0986CEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 19:01:07 +0000
Manifest this update: Wed 23 Sep 2026 19:01:07 +0000
Manifest next update: Thu 24 Sep 2026 19:01:07 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: 7765rtngDjXXnlEjFWG+1AQ2Qu0LKu2Gn03kJHOoaTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:9f:95:a5:ad:6d:08:86:70:38:1e:09:86:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Sep 23 19:01:07 2026 GMT
Not After : Sep 24 19:01:07 2026 GMT
Subject: CN=2e5621bd4f117e45dea4b3e5d7824e1da7161194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:e5:81:55:80:4f:29:59:ce:0d:c5:86:8c:
dc:7e:f7:3b:9a:a8:ae:9d:0b:10:74:c5:0f:bb:78:
e5:49:b0:f0:f7:c1:eb:2f:3c:fb:18:be:24:a5:53:
e7:51:d3:7b:12:c1:88:5c:52:6c:60:cf:91:65:d8:
62:cc:08:1c:e1:f4:6a:09:d4:80:ea:a8:24:af:2a:
ad:2f:18:83:52:20:28:ec:f5:69:96:e4:9a:45:6d:
21:2f:bf:5f:b7:22:39:5f:97:81:4d:84:54:7f:19:
7b:11:af:16:6b:fd:ad:37:a6:11:12:5e:96:8a:1f:
c1:ea:ad:f3:90:c7:41:f9:46:27:b8:2b:c9:08:aa:
68:ff:6d:61:4f:95:5f:1a:9f:d7:04:41:c8:f9:8d:
d7:fe:32:87:fb:3b:9f:95:2c:db:46:77:43:f1:c6:
5e:18:2a:df:19:85:51:e0:4a:62:0b:32:5b:bc:98:
3a:5c:a7:1d:c2:c1:47:f3:a8:1d:4d:4e:62:d5:f1:
ab:e9:57:9d:ef:a4:7b:f4:7f:a2:ae:87:b9:4c:af:
06:aa:f3:8a:86:3c:d8:96:0a:69:ec:03:76:72:87:
d8:9e:84:db:74:53:70:fe:c1:fd:8e:9c:e4:0c:d1:
21:b1:37:f5:74:ce:e7:a0:4d:ff:80:26:51:b1:09:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:21:BD:4F:11:7E:45:DE:A4:B3:E5:D7:82:4E:1D:A7:16:11:94
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:98:b7:f5:12:37:9f:31:65:c5:63:de:b7:c5:9a:dd:06:
c1:a6:b4:76:b7:09:56:fe:6d:5f:79:b3:7e:bf:85:c9:74:2a:
de:99:35:0f:f0:f2:d1:ba:e7:f3:68:7f:ca:fb:5e:62:c1:1c:
67:28:40:f4:67:00:b4:43:b6:47:52:14:86:41:90:aa:b3:77:
66:0c:55:f4:67:ec:06:f9:d2:72:01:bc:16:24:1d:f5:ec:39:
98:98:97:f0:6e:9c:52:87:bf:e5:48:69:8e:01:07:f8:8b:30:
60:8f:9c:02:c5:47:c2:a6:44:b9:06:a6:a1:db:b3:47:db:b7:
f1:4b:e6:b1:5b:53:d2:f1:ff:02:1f:06:0a:ac:a3:97:c0:59:
06:d6:35:fc:78:e8:09:f5:b1:0a:d0:cd:eb:07:4e:16:24:ad:
1c:04:d9:5a:39:f5:a1:55:ff:36:88:60:1f:52:c0:a0:41:8b:
55:57:33:1b:ab:20:c3:83:5b:63:8b:d1:91:d5:43:4b:46:de:
a4:2d:94:b6:9b:d6:07:01:32:ab:60:c0:06:79:5b:37:e8:f4:
fd:95:39:9c:b7:51:7c:43:04:5d:24:de:c6:15:8c:30:bd:0b:
b2:35:d4:ef:97:41:b9:93:19:0f:cb:9d:69:cd:ef:ce:52:20:
53:1e:38:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpJ+Vpa1tCIZwOB4Jhs6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDUxYmYxZTJhNTMwMDBiYzIzMDYwNTYwZjJjYzBiMzlk
NDk2ZWYwHhcNMjYwOTIzMTkwMTA3WhcNMjYwOTI0MTkwMTA3WjAzMTEwLwYDVQQD
EygyZTU2MjFiZDRmMTE3ZTQ1ZGVhNGIzZTVkNzgyNGUxZGE3MTYxMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dvlgVWATylZzg3Fhozcfvc7mqiu
nQsQdMUPu3jlSbDw98HrLzz7GL4kpVPnUdN7EsGIXFJsYM+RZdhizAgc4fRqCdSA
6qgkryqtLxiDUiAo7PVpluSaRW0hL79ftyI5X5eBTYRUfxl7Ea8Wa/2tN6YREl6W
ih/B6q3zkMdB+UYnuCvJCKpo/21hT5VfGp/XBEHI+Y3X/jKH+zuflSzbRndD8cZe
GCrfGYVR4EpiCzJbvJg6XKcdwsFH86gdTU5i1fGr6Ved76R79H+iroe5TK8GqvOK
hjzYlgpp7AN2cofYnoTbdFNw/sH9jpzkDNEhsTf1dM7noE3/gCZRsQkgrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5WIb1PEX5F3qSz5deCTh2nFhGUMB8GA1UdIwQY
MBaAFO3VG/HipTAAvCMGBWDyzAs51JbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEt
Yzc1N2IxNWYxY2NmLzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDMwNDAtZmJhMS00NTJlLWI3OWEtYzc1N2IxNWYxY2Nm
LzEvN2RVYjhlS2xNQUM4SXdZRllQTE1Dem5VbHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtqYt/US
N58xZcVj3rfFmt0Gwaa0drcJVv5tX3mzfr+FyXQq3pk1D/Dy0brn82h/yvteYsEc
ZyhA9GcAtEO2R1IUhkGQqrN3ZgxV9GfsBvnScgG8FiQd9ew5mJiX8G6cUoe/5Uhp
jgEH+IswYI+cAsVHwqZEuQamoduzR9u38UvmsVtT0vH/Ah8GCqyjl8BZBtY1/Hjo
CfWxCtDN6wdOFiStHATZWjn1oVX/NohgH1LAoEGLVVczG6sgw4NbY4vRkdVDS0be
pC2UtpvWBwEyq2DABnlbN+j0/ZU5nLdRfEMEXSTexhWMML0LsjXU75dBuZMZD8ud
ac3vzlIgUx44jQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:35 2026 by rpki-client