Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
File: 7m9I_I5rX9kh3jgFehSgwJioJjs.mft (raw, json)
Hash identifier: pqUhhzduaDsoBysYiiY9y4yqkwU55RVtIy9L/o51I1k=
Subject key identifier: F0:EC:56:27:DD:02:34:6F:F4:73:6B:15:A1:9F:28:BE:97:9D:32:D8
Authority key identifier: EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
Certificate issuer: /CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Certificate serial: 01A11A876C4DC6FF6D206C3276B3B9765A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
Manifest number: AA
Signing time: Thu 08 Oct 2026 08:00:44 +0000
Manifest this update: Thu 08 Oct 2026 08:00:44 +0000
Manifest next update: Fri 09 Oct 2026 08:00:44 +0000
Files and hashes: 1: 7m9I_I5rX9kh3jgFehSgwJioJjs.crl (hash: rlvD6GwSCZLoeBA8u0xzlvIohuZDy/fHnB7uHO9oAJg=)
2: 9wwtrRgapHggpmafOoIRakXKgWA.roa (hash: 9XxZ7od9E/OVY/WT96L7AW+I7c7a65w9SdFXeI4vrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:6c:4d:c6:ff:6d:20:6c:32:76:b3:b9:76:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Validity
Not Before: Oct 8 08:00:44 2026 GMT
Not After : Oct 9 08:00:44 2026 GMT
Subject: CN=f0ec5627dd02346ff4736b15a19f28be979d32d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:4c:34:2c:5d:13:6b:3b:49:d5:79:d0:8d:
b1:6a:94:62:5d:0a:34:5d:ae:d7:4a:a6:fa:d4:33:
c1:3e:b7:dd:48:21:0b:03:38:8f:21:f9:00:60:6d:
19:b0:3d:75:f6:3f:fe:fe:ba:1b:87:89:dd:f2:04:
8b:7c:9a:63:89:98:07:ae:14:82:b3:40:33:ce:7d:
19:29:8c:62:ef:04:a3:de:e6:f0:f7:51:88:75:20:
9a:e3:89:68:c5:f6:75:a4:b4:88:9c:ef:d4:0b:29:
54:f4:c9:a5:2a:20:77:db:5e:c6:92:24:de:2c:32:
90:c2:b4:d5:a3:7e:7c:a6:e1:56:80:93:2d:d3:54:
41:91:3d:9b:2d:c1:5a:9f:ba:31:ba:31:dc:0e:67:
06:e7:a9:a3:8a:cd:e1:47:00:8d:03:50:ea:cc:72:
b0:f0:b8:38:4d:75:9f:8c:38:63:b1:bb:f1:e2:2a:
a0:da:c1:05:0e:1e:ac:c0:61:4b:c1:29:d2:cd:a9:
05:5f:2d:1c:92:b3:9f:1d:e1:e0:ee:01:ac:15:66:
f2:2c:c7:ac:7f:4e:ff:46:b8:a4:28:92:b3:77:62:
d9:60:82:fa:f8:b7:dd:26:21:4f:81:87:b4:a6:4d:
8a:08:6d:88:ab:1f:31:d8:f8:6e:ce:0d:a5:2b:8a:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:56:27:DD:02:34:6F:F4:73:6B:15:A1:9F:28:BE:97:9D:32:D8
X509v3 Authority Key Identifier:
keyid:EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5f:ff:e4:eb:f7:f4:99:55:7e:22:e3:77:6a:de:ab:f4:73:
73:a3:16:19:ec:96:51:6c:21:24:2c:79:5a:b8:86:0b:49:30:
6b:c1:cb:84:bb:b0:c3:5a:67:89:ad:b8:47:e5:8a:58:e3:59:
7d:7d:b8:35:ab:a2:0b:2e:68:6e:ef:c6:73:44:7c:33:de:da:
74:a5:fa:48:17:c4:2f:c2:4f:2e:1c:9b:fc:5c:ca:57:47:04:
db:ab:3d:88:a6:98:4b:1c:43:50:a0:79:79:32:be:31:24:6a:
70:93:7b:39:67:41:1a:70:29:c2:bc:eb:d0:96:58:d6:2f:83:
c2:2c:0d:bd:63:71:1f:2f:fb:6b:f0:74:e3:b4:4b:87:ce:dc:
3c:76:d3:df:47:9b:92:e5:0d:0e:15:9c:6c:77:bd:2e:37:4b:
d8:a9:8f:8f:25:28:20:97:28:0c:31:73:d7:eb:aa:91:e7:f1:
3c:59:ce:f2:0f:0c:19:83:62:42:d4:3c:cb:a9:9a:da:e3:d7:
77:55:42:ea:7e:be:1b:bd:0d:cb:70:fe:21:48:03:a8:d6:13:
e2:a9:f6:fc:c6:73:fd:da:c7:0c:03:6c:91:5f:cb:89:28:5c:
e7:fb:08:c6:f9:98:56:59:d3:ba:fc:6b:13:94:cb:14:ff:08:
44:89:36:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEah2xNxv9tIGwydrO5dloRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0OGZjOGU2YjVmZDkyMWRlMzgwNTdhMTRhMGMwOThh
ODI2M2IwHhcNMjYxMDA4MDgwMDQ0WhcNMjYxMDA5MDgwMDQ0WjAzMTEwLwYDVQQD
EyhmMGVjNTYyN2RkMDIzNDZmZjQ3MzZiMTVhMTlmMjhiZTk3OWQzMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIBMNCxdE2s7SdV50I2xapRiXQo0
Xa7XSqb61DPBPrfdSCELAziPIfkAYG0ZsD119j/+/robh4nd8gSLfJpjiZgHrhSC
s0Azzn0ZKYxi7wSj3ubw91GIdSCa44loxfZ1pLSInO/UCylU9MmlKiB3217GkiTe
LDKQwrTVo358puFWgJMt01RBkT2bLcFan7oxujHcDmcG56mjis3hRwCNA1DqzHKw
8Lg4TXWfjDhjsbvx4iqg2sEFDh6swGFLwSnSzakFXy0ckrOfHeHg7gGsFWbyLMes
f07/RrikKJKzd2LZYIL6+LfdJiFPgYe0pk2KCG2Iqx8x2Phuzg2lK4pNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDsVifdAjRv9HNrFaGfKL6XnTLYMB8GA1UdIwQY
MBaAFO5vSPyOa1/ZId44BXoUoMCYqCY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205SV9JNXJYOWtoM2pnRmVoU2d3SmlvSmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMTYwNTUtMDczNy00MjM2LTkwYTUt
N2IzNTg2OThjOTg4LzEvN205SV9JNXJYOWtoM2pnRmVoU2d3SmlvSmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMTYwNTUtMDczNy00MjM2LTkwYTUtN2IzNTg2OThjOTg4
LzEvN205SV9JNXJYOWtoM2pnRmVoU2d3SmlvSmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtl//5Ov3
9JlVfiLjd2req/Rzc6MWGeyWUWwhJCx5WriGC0kwa8HLhLuww1pnia24R+WKWONZ
fX24NauiCy5obu/Gc0R8M97adKX6SBfEL8JPLhyb/FzKV0cE26s9iKaYSxxDUKB5
eTK+MSRqcJN7OWdBGnApwrzr0JZY1i+DwiwNvWNxHy/7a/B047RLh87cPHbT30eb
kuUNDhWcbHe9LjdL2KmPjyUoIJcoDDFz1+uqkefxPFnO8g8MGYNiQtQ8y6ma2uPX
d1VC6n6+G70Ny3D+IUgDqNYT4qn2/MZz/drHDANskV/LiShc5/sIxvmYVlnTuvxr
E5TLFP8IRIk2+w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:59:38 2026 by rpki-client