Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: IQPvUnufs/pEVnK1OzIiraseGyHJT7zRCPl/KHVHoSM=
Subject key identifier: 65:3C:C1:16:92:E9:23:A8:55:EF:86:F3:B1:F0:81:AC:0A:22:B2:0A
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 01A0D8DF828DF994EFF1CBD61F574187AC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 1131
Signing time: Fri 25 Sep 2026 14:02:01 +0000
Manifest this update: Fri 25 Sep 2026 14:02:01 +0000
Manifest next update: Sat 26 Sep 2026 14:02:01 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: BJGc7Uu6CReLB+F4nzyMqr//DBj86e1jdo2An57s9G0=)
2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:82:8d:f9:94:ef:f1:cb:d6:1f:57:41:87:ac:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Sep 25 14:02:01 2026 GMT
Not After : Sep 26 14:02:01 2026 GMT
Subject: CN=653cc11692e923a855ef86f3b1f081ac0a22b20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:ce:a3:80:8b:be:e9:fd:9b:8b:94:6d:03:
cf:a8:68:2d:54:fa:d8:08:b0:43:a1:a7:0e:5c:74:
21:6f:71:91:5e:e4:ee:1e:87:2c:0a:97:83:e1:83:
60:a0:c0:34:88:5c:de:ff:b4:4c:9b:62:93:e9:9c:
e5:75:75:22:49:af:4d:2b:5b:d4:67:6f:ea:d5:33:
47:d6:f6:e7:e6:48:93:48:33:1b:a5:8e:9d:b4:2c:
87:b1:aa:5b:4b:99:8f:b7:20:34:d2:d1:bc:e2:c1:
5c:4a:a6:8d:f2:0b:97:20:09:e4:43:9f:0b:35:79:
a0:5b:ff:d4:ed:b3:41:b4:0f:c9:c7:db:d6:a3:e9:
a2:13:ce:fc:0d:2e:13:15:b6:86:1c:b8:fc:07:ad:
78:b7:a4:72:d9:ae:25:40:e0:6a:f3:bc:f3:b8:f6:
4d:23:6c:51:3f:9d:bf:99:f5:9e:7b:a5:db:21:f3:
b1:c8:89:39:3b:0d:a6:b7:18:f3:1f:7f:2d:5e:b4:
dc:0f:b3:69:49:9f:05:10:64:68:5a:62:f5:91:6e:
a9:cf:a8:70:29:4a:2c:b4:37:5b:51:64:d6:8b:37:
db:33:98:7a:39:01:76:f9:f1:5b:38:38:53:08:7e:
57:07:af:b0:06:61:e0:7b:92:a2:20:16:3c:56:e2:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:C1:16:92:E9:23:A8:55:EF:86:F3:B1:F0:81:AC:0A:22:B2:0A
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:74:5e:b2:a9:23:ff:90:2a:bb:e4:3b:5e:f5:53:09:99:
5f:04:3f:1c:89:be:e5:c2:9a:5a:e2:c7:b1:d7:25:36:5a:da:
f7:2f:c4:7c:54:c2:2a:47:b3:0b:73:e2:d5:8d:df:7d:1e:73:
60:24:2a:ee:c2:4e:e4:c3:f1:71:c3:c0:4d:38:b2:44:3f:1f:
73:39:ed:ab:0a:45:67:bd:66:f4:0d:2d:b6:42:37:f9:d2:bd:
4e:0f:d2:3f:f0:45:13:31:28:33:a2:85:5f:04:0a:db:6d:e4:
3d:4b:4b:64:29:f9:e1:bb:ba:89:42:35:b1:b0:0d:a4:96:bd:
48:27:d4:3e:d4:2f:a2:98:a3:fc:bd:b1:ea:e5:29:6b:e7:b8:
d8:36:33:0d:6a:33:76:43:1e:44:84:e8:9f:02:4a:92:51:99:
dd:f1:85:63:ba:4f:78:04:fd:f8:07:96:cd:90:b5:2b:be:19:
1d:25:9c:eb:e5:92:10:63:fe:dd:31:95:de:6c:20:63:f0:99:
f2:ed:de:26:1c:4c:5b:1b:64:2a:1e:3e:f6:13:3b:ec:ba:96:
e5:d3:73:16:19:29:b8:8c:a2:1b:f9:43:80:b4:c6:f8:72:a1:
27:4e:cc:33:92:99:03:57:c4:84:b7:fd:ab:31:a1:45:8e:ef:
a5:fb:ce:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY34KN+ZTv8cvWH1dBh6x+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5
YTYyNWQwHhcNMjYwOTI1MTQwMjAxWhcNMjYwOTI2MTQwMjAxWjAzMTEwLwYDVQQD
Eyg2NTNjYzExNjkyZTkyM2E4NTVlZjg2ZjNiMWYwODFhYzBhMjJiMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc3Oo4CLvun9m4uUbQPPqGgtVPrY
CLBDoacOXHQhb3GRXuTuHocsCpeD4YNgoMA0iFze/7RMm2KT6ZzldXUiSa9NK1vU
Z2/q1TNH1vbn5kiTSDMbpY6dtCyHsapbS5mPtyA00tG84sFcSqaN8guXIAnkQ58L
NXmgW//U7bNBtA/Jx9vWo+miE878DS4TFbaGHLj8B614t6Ry2a4lQOBq87zzuPZN
I2xRP52/mfWee6XbIfOxyIk5Ow2mtxjzH38tXrTcD7NpSZ8FEGRoWmL1kW6pz6hw
KUostDdbUWTWizfbM5h6OQF2+fFbODhTCH5XB6+wBmHge5KiIBY8VuKmMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU8wRaS6SOoVe+G87HwgawKIrIKMB8GA1UdIwQY
MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt
OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5
LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUp0XrKp
I/+QKrvkO171UwmZXwQ/HIm+5cKaWuLHsdclNlra9y/EfFTCKkezC3Pi1Y3ffR5z
YCQq7sJO5MPxccPATTiyRD8fczntqwpFZ71m9A0ttkI3+dK9Tg/SP/BFEzEoM6KF
XwQK223kPUtLZCn54bu6iUI1sbANpJa9SCfUPtQvopij/L2x6uUpa+e42DYzDWoz
dkMeRITonwJKklGZ3fGFY7pPeAT9+AeWzZC1K74ZHSWc6+WSEGP+3TGV3mwgY/CZ
8u3eJhxMWxtkKh4+9hM77LqW5dNzFhkpuIyiG/lDgLTG+HKhJ07MM5KZA1fEhLf9
qzGhRY7vpfvOpw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:19:57 2026 by rpki-client