Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: imETz9lr37yHbFZT9DftEC5Hd5fsd3pJrmxg41EO7sc=
Subject key identifier: 48:D4:79:1C:E9:E5:88:32:9E:28:05:06:0A:BD:8A:CB:A4:79:D4:1B
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 01A1D981625D7223A7B16CB61B644390D062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 1A25
Signing time: Sat 14 Nov 2026 10:01:37 +0000
Manifest this update: Sat 14 Nov 2026 10:01:37 +0000
Manifest next update: Sun 15 Nov 2026 10:01:37 +0000
Files and hashes: 1: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: +xsWxIV9YGuaVE/C3kag9cG7tDGk8ilPkdlOZGZmirs=)
2: WxQ64uv-zX-eye9sRlN7C2cRqwI.roa (hash: H3Nchr9jYSxejrjh37X3oEL6arcb0RjMrAm9O9pSwMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:62:5d:72:23:a7:b1:6c:b6:1b:64:43:90:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Nov 14 10:01:37 2026 GMT
Not After : Nov 15 10:01:37 2026 GMT
Subject: CN=48d4791ce9e588329e2805060abd8acba479d41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:ef:f6:42:70:69:36:e4:c8:9a:34:a0:61:
ca:97:23:1a:7b:9a:d1:31:ce:c9:5a:f6:9d:73:20:
5f:2a:23:01:1d:56:19:ad:7b:d7:fc:aa:14:ac:a0:
ca:d7:28:b8:23:b7:f8:37:e3:82:6c:20:ed:58:61:
10:ff:0d:76:68:ff:26:d3:f1:3b:b3:98:cf:fb:75:
60:57:ff:61:f2:b1:7f:3b:11:75:56:64:cd:fd:37:
24:8a:f0:d9:4b:23:5a:e8:87:f0:c9:0e:8c:dc:7d:
05:7e:fe:25:5f:d9:d1:12:a0:9a:ec:66:91:68:0a:
ef:ef:cb:fd:cd:05:6e:b6:f6:c6:23:0d:7f:7e:a8:
e0:24:26:28:ff:9a:51:4a:7d:7f:13:22:72:95:c4:
e7:fd:61:a6:ba:2a:f6:61:8f:8f:4c:b7:e5:d0:22:
ba:1a:50:8f:8d:3c:b3:7a:f5:ec:f4:b1:ee:7c:fc:
1e:2c:9f:06:74:b4:40:c3:22:67:55:46:ed:5e:34:
e0:35:d9:7a:29:df:e8:38:42:34:9b:dd:90:4e:92:
b3:4e:5b:2c:86:d7:e0:b2:54:83:05:19:43:5e:06:
ee:65:2c:51:29:5b:51:72:e4:67:98:0c:df:24:30:
b5:eb:e8:19:a6:8f:ab:3f:e4:ad:09:e6:70:36:00:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:79:1C:E9:E5:88:32:9E:28:05:06:0A:BD:8A:CB:A4:79:D4:1B
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ac:63:18:03:29:19:0c:42:f1:f4:08:df:a9:d9:cc:0f:8a:
a1:e4:d1:62:31:0c:14:7b:05:30:b9:c4:92:2d:17:58:b9:8c:
b5:52:c4:d4:b5:d2:88:23:47:73:54:ba:ab:49:c9:f6:c9:b5:
45:0e:61:be:fb:3a:17:0a:ff:77:31:66:64:68:f0:c3:2b:02:
5c:63:2a:f4:8f:ce:51:2b:3e:f4:69:4c:35:83:6a:46:f7:3c:
d6:db:18:3b:30:50:ff:30:ca:d0:22:ec:f4:57:70:de:dd:1e:
f7:aa:7c:73:d0:42:de:de:1a:8b:30:83:17:3c:92:49:2f:c8:
6c:b0:17:eb:0a:5d:7a:58:6e:a3:ec:e9:a1:7f:4f:83:3c:bf:
1f:c7:66:35:6e:19:10:26:ca:07:7b:a3:e5:e0:e7:cf:97:38:
ff:19:4d:1f:d8:a1:bf:0c:30:1a:bf:f0:67:9f:12:99:2a:b1:
35:df:00:ae:a3:10:a1:cc:95:f5:01:5d:0f:d4:c8:e4:95:7e:
e7:40:d8:9b:f2:69:e1:08:63:cc:de:af:ee:c4:a4:7e:b9:75:
a8:83:d3:db:da:af:88:48:de:7d:fd:4b:b2:2b:6d:24:2d:b6:
26:b8:88:43:2d:e0:87:24:d6:4a:6d:04:81:72:3d:4e:9d:2d:
fd:a3:46:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZgWJdciOnsWy2G2RDkNBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWUwMTg2YzY4MjMwMTRiYzJjNDJkMDRlYTY1MGJmNWNj
Yjk5NzYwHhcNMjYxMTE0MTAwMTM3WhcNMjYxMTE1MTAwMTM3WjAzMTEwLwYDVQQD
Eyg0OGQ0NzkxY2U5ZTU4ODMyOWUyODA1MDYwYWJkOGFjYmE0NzlkNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf3v9kJwaTbkyJo0oGHKlyMae5rR
Mc7JWvadcyBfKiMBHVYZrXvX/KoUrKDK1yi4I7f4N+OCbCDtWGEQ/w12aP8m0/E7
s5jP+3VgV/9h8rF/OxF1VmTN/TckivDZSyNa6IfwyQ6M3H0Ffv4lX9nREqCa7GaR
aArv78v9zQVutvbGIw1/fqjgJCYo/5pRSn1/EyJylcTn/WGmuir2YY+PTLfl0CK6
GlCPjTyzevXs9LHufPweLJ8GdLRAwyJnVUbtXjTgNdl6Kd/oOEI0m92QTpKzTlss
htfgslSDBRlDXgbuZSxRKVtRcuRnmAzfJDC16+gZpo+rP+StCeZwNgCEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjUeRzp5YgynigFBgq9isukedQbMB8GA1UdIwQY
MBaAFO2uAYbGgjAUvCxC0E6mUL9cy5l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEt
OGI3YTRhYmYxY2EyLzEvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yOWE1MmUtNThhMC00MjM4LWFlYjEtOGI3YTRhYmYxY2Ey
LzEvN2E0QmhzYUNNQlM4TEVMUVRxWlF2MXpMbVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaxjGAMp
GQxC8fQI36nZzA+KoeTRYjEMFHsFMLnEki0XWLmMtVLE1LXSiCNHc1S6q0nJ9sm1
RQ5hvvs6Fwr/dzFmZGjwwysCXGMq9I/OUSs+9GlMNYNqRvc81tsYOzBQ/zDK0CLs
9Fdw3t0e96p8c9BC3t4aizCDFzySSS/IbLAX6wpdelhuo+zpoX9Pgzy/H8dmNW4Z
ECbKB3uj5eDnz5c4/xlNH9ihvwwwGr/wZ58SmSqxNd8ArqMQocyV9QFdD9TI5JV+
50DYm/Jp4QhjzN6v7sSkfrl1qIPT29qviEjeff1LsittJC22JriIQy3ghyTWSm0E
gXI9Tp0t/aNGVg==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:55 2026 by rpki-client