Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: NzHnQ0aSCk7fgza/95hQKP3pG2GTu7hWtFiNm/l9s7c=
Subject key identifier: DC:3A:B9:10:3E:CB:1D:89:DA:8A:C3:37:36:2E:96:F7:E5:C3:84:36
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 01A132907B6009503A9DF490CA93EDA592EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 181F
Signing time: Tue 13 Oct 2026 00:01:31 +0000
Manifest this update: Tue 13 Oct 2026 00:01:31 +0000
Manifest next update: Wed 14 Oct 2026 00:01:31 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: cYITiwzeEuYPa0T7cyN3Gijj/9Yb/sDcUKPeLvQs678=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:7b:60:09:50:3a:9d:f4:90:ca:93:ed:a5:92:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Oct 13 00:01:31 2026 GMT
Not After : Oct 14 00:01:31 2026 GMT
Subject: CN=dc3ab9103ecb1d89da8ac337362e96f7e5c38436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:1a:d6:4a:72:17:48:2b:96:c7:2e:d6:14:
5e:17:a8:46:dc:35:be:68:98:91:f6:4d:6a:e1:09:
66:32:bb:7f:6c:56:28:03:6d:ff:77:6a:fa:de:4f:
3c:41:96:77:88:e1:ae:cb:77:be:bc:05:ad:a4:bb:
0b:18:9b:bf:11:f5:3a:cb:44:24:78:52:15:4a:60:
d6:02:66:52:a1:02:86:5e:c3:8d:00:55:0e:ce:fb:
0c:dd:de:8d:d4:99:ff:de:f3:05:04:04:eb:ad:f1:
2a:82:80:a4:21:85:b0:1d:fd:92:b4:19:ba:34:00:
3d:a0:55:76:c0:36:8e:02:bd:d8:86:de:eb:48:28:
50:98:63:af:fd:dd:2c:63:a6:02:6f:2b:8f:24:d4:
79:ea:37:9f:d5:fc:35:60:0a:31:4f:d8:c3:9f:ee:
85:12:d1:9e:e3:74:22:33:83:73:94:74:95:9c:9a:
98:d2:73:4c:30:47:da:5e:c7:95:e5:8f:94:bf:17:
09:b7:e2:f3:97:c6:db:dd:99:c3:c9:13:8d:1a:dc:
cc:42:6a:49:27:f3:41:48:3b:10:5a:ea:74:9d:e2:
3f:f1:2d:9f:4b:f1:e7:9b:7d:ad:e8:42:93:e7:8f:
d2:32:90:a1:e7:0f:c3:2a:4c:c1:b2:31:89:2b:82:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3A:B9:10:3E:CB:1D:89:DA:8A:C3:37:36:2E:96:F7:E5:C3:84:36
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dc:49:73:dc:29:8d:df:fa:a3:a1:1e:67:f9:62:59:1c:db:
9a:72:bb:9c:37:93:b0:f5:e0:84:ff:e3:2e:27:a9:17:19:b3:
8c:a0:71:4f:d8:a6:c4:d3:79:93:b2:fa:db:45:f8:00:89:ee:
99:4f:76:e1:3a:12:d8:3a:99:75:a6:ee:ff:37:92:5c:45:10:
7a:2d:3d:e6:c9:8f:66:3c:ad:ba:64:2e:bd:ec:9a:17:db:d1:
95:d9:92:a6:7a:be:54:c8:e4:14:fd:9e:bd:60:54:5c:d6:5d:
f6:86:29:f2:8d:a2:a7:25:1b:8d:2f:68:56:92:63:cd:b4:be:
09:ee:86:b5:5f:d6:d3:44:04:50:86:cc:95:bf:3e:cd:7c:c6:
da:3e:b1:dc:94:1b:df:9d:9f:ed:58:17:ea:27:b7:b0:ed:9a:
48:07:43:b4:28:36:c8:96:5e:53:b9:d3:13:49:0f:ab:47:10:
0a:21:02:e5:08:02:c2:2c:11:08:b2:4b:86:d9:3a:7d:24:22:
a8:63:bb:9d:01:e6:08:82:b4:72:e0:20:b5:d2:8a:1d:b9:84:
8e:e4:16:bf:01:5d:87:cb:59:9a:16:70:d5:b1:b6:0d:b3:0c:
8a:0f:54:0c:df:b4:2b:a7:b8:54:ab:b4:e2:84:5e:bf:42:dc:
82:3f:4f:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEykHtgCVA6nfSQypPtpZLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh
YTE0ODcwHhcNMjYxMDEzMDAwMTMxWhcNMjYxMDE0MDAwMTMxWjAzMTEwLwYDVQQD
EyhkYzNhYjkxMDNlY2IxZDg5ZGE4YWMzMzczNjJlOTZmN2U1YzM4NDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TEa1kpyF0grlscu1hReF6hG3DW+
aJiR9k1q4QlmMrt/bFYoA23/d2r63k88QZZ3iOGuy3e+vAWtpLsLGJu/EfU6y0Qk
eFIVSmDWAmZSoQKGXsONAFUOzvsM3d6N1Jn/3vMFBATrrfEqgoCkIYWwHf2StBm6
NAA9oFV2wDaOAr3Yht7rSChQmGOv/d0sY6YCbyuPJNR56jef1fw1YAoxT9jDn+6F
EtGe43QiM4NzlHSVnJqY0nNMMEfaXseV5Y+UvxcJt+Lzl8bb3ZnDyRONGtzMQmpJ
J/NBSDsQWup0neI/8S2fS/Hnm32t6EKT54/SMpCh5w/DKkzBsjGJK4LbewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw6uRA+yx2J2orDNzYulvflw4Q2MB8GA1UdIwQY
MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt
YzgxNWU1MGVjNWU3LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3
LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtxJc9wp
jd/6o6EeZ/liWRzbmnK7nDeTsPXghP/jLiepFxmzjKBxT9imxNN5k7L620X4AInu
mU924ToS2DqZdabu/zeSXEUQei095smPZjytumQuveyaF9vRldmSpnq+VMjkFP2e
vWBUXNZd9oYp8o2ipyUbjS9oVpJjzbS+Ce6GtV/W00QEUIbMlb8+zXzG2j6x3JQb
352f7VgX6ie3sO2aSAdDtCg2yJZeU7nTE0kPq0cQCiEC5QgCwiwRCLJLhtk6fSQi
qGO7nQHmCIK0cuAgtdKKHbmEjuQWvwFdh8tZmhZw1bG2DbMMig9UDN+0K6e4VKu0
4oRev0Lcgj9P3A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:29:58 2026 by rpki-client