Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: dR6iicIsHYpvNIP9n5ympLBU7/9BLEvFpQ3r56dYS24=
Subject key identifier: 43:8D:96:D7:61:7D:6A:F8:5F:0D:BC:0D:59:21:D1:4A:AD:86:F7:B7
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 01A0D2371E72205A574D7CEB789DC191FB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0ED2
Signing time: Thu 24 Sep 2026 07:00:22 +0000
Manifest this update: Thu 24 Sep 2026 07:00:22 +0000
Manifest next update: Fri 25 Sep 2026 07:00:22 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: CeZ9oFgywit0PUwwD5r2ccaqDxUf409GXN6LicaM7+w=)
2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:1e:72:20:5a:57:4d:7c:eb:78:9d:c1:91:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Sep 24 07:00:22 2026 GMT
Not After : Sep 25 07:00:22 2026 GMT
Subject: CN=438d96d7617d6af85f0dbc0d5921d14aad86f7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:15:86:25:2d:1c:fa:50:64:1a:e1:4f:11:
50:04:bb:9f:a5:01:8f:d7:33:fa:02:4e:5f:b5:01:
5c:bb:3c:8d:f1:ee:75:15:90:1d:49:68:e7:5b:fb:
c8:c1:fb:a7:68:84:00:fd:b9:4b:1f:53:a4:82:17:
25:e4:f7:97:6e:58:c2:93:0b:80:b8:60:4b:fd:72:
88:e4:0b:7e:68:df:8b:ad:f7:d1:58:4b:0c:81:a5:
b4:03:3e:10:b2:8a:03:ce:f5:18:2f:cd:51:f2:7f:
01:ca:24:3a:c4:d8:0e:04:42:95:d0:b9:8f:80:f6:
03:9e:6a:3f:50:a0:e6:97:83:7c:1d:fe:7d:8c:07:
e8:e0:85:8c:25:3b:30:57:c8:dd:b0:04:58:d8:00:
c8:7b:e3:d9:6f:7b:a4:76:5a:47:2a:24:81:44:9d:
ac:7c:01:48:e6:44:56:3c:81:75:8d:92:c4:71:8d:
cf:d9:78:70:c2:53:77:18:07:ad:72:46:ce:b6:c3:
25:5d:5b:d2:bd:bb:e2:3b:a0:32:ff:dd:bf:e2:fd:
22:3e:06:e8:77:34:5c:b3:7f:5c:f1:2c:70:ff:d7:
76:a6:34:28:d0:c5:41:c0:30:a4:30:35:67:60:91:
03:67:f5:5c:d4:ee:a3:07:94:8b:4a:fe:cc:4f:a3:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:96:D7:61:7D:6A:F8:5F:0D:BC:0D:59:21:D1:4A:AD:86:F7:B7
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1e:ea:22:66:e7:06:00:cc:6b:5f:6c:59:51:a6:ad:b0:aa:
a6:88:80:32:e4:8e:3c:24:dc:55:57:41:c6:d5:e5:3d:8e:38:
c0:43:f7:ff:65:24:08:1f:60:94:25:16:ec:86:4f:d7:92:20:
6f:13:cd:f0:00:f1:ea:7b:43:e0:79:bc:9e:2e:79:dd:38:97:
e7:83:e4:f9:85:d3:b6:4a:a3:d7:ef:9c:db:5e:e2:fa:4f:d9:
aa:3a:36:7a:ca:8b:18:1a:42:fe:12:4d:77:65:f2:03:7b:ec:
16:f0:bc:ca:df:9d:43:cf:40:7e:06:34:54:7a:95:3b:de:56:
1d:4d:29:a3:42:ff:b8:96:67:13:e5:ba:a1:d2:d5:81:d1:14:
8d:f0:82:b1:b7:2b:e8:3b:3b:df:44:24:62:9e:f9:97:d3:35:
7c:00:97:db:c9:4d:2c:79:31:fe:dd:ae:07:31:5e:db:51:36:
78:d2:f5:63:bc:85:02:53:64:d5:08:fc:c6:bf:66:aa:4a:de:
2e:3c:63:2d:a6:e9:5e:1b:31:c6:ae:b8:e5:61:8d:97:2e:39:
cd:22:d7:26:c7:c8:85:f7:9c:98:8b:f7:56:3f:81:cb:45:1e:
d7:40:ab:b5:35:81:1b:42:77:18:11:e1:00:f7:15:bd:dd:66:
83:20:83:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSNx5yIFpXTXzreJ3BkftRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWRhYTYzMzkxMDNiZGI1NTY2ZDgzMjcxZDNjNDdjMDA1
YzI1MGQwHhcNMjYwOTI0MDcwMDIyWhcNMjYwOTI1MDcwMDIyWjAzMTEwLwYDVQQD
Eyg0MzhkOTZkNzYxN2Q2YWY4NWYwZGJjMGQ1OTIxZDE0YWFkODZmN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuckVhiUtHPpQZBrhTxFQBLufpQGP
1zP6Ak5ftQFcuzyN8e51FZAdSWjnW/vIwfunaIQA/blLH1Okghcl5PeXbljCkwuA
uGBL/XKI5At+aN+LrffRWEsMgaW0Az4QsooDzvUYL81R8n8ByiQ6xNgOBEKV0LmP
gPYDnmo/UKDml4N8Hf59jAfo4IWMJTswV8jdsARY2ADIe+PZb3ukdlpHKiSBRJ2s
fAFI5kRWPIF1jZLEcY3P2XhwwlN3GAetckbOtsMlXVvSvbviO6Ay/92/4v0iPgbo
dzRcs39c8Sxw/9d2pjQo0MVBwDCkMDVnYJEDZ/Vc1O6jB5SLSv7MT6Ou0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEONltdhfWr4Xw28DVkh0Uqthve3MB8GA1UdIwQY
MBaAFO6tqmM5EDvbVWbYMnHTxHwAXCUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMt
MjE0MmMwYzQzODVmLzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMtMjE0MmMwYzQzODVm
LzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB7qImbn
BgDMa19sWVGmrbCqpoiAMuSOPCTcVVdBxtXlPY44wEP3/2UkCB9glCUW7IZP15Ig
bxPN8ADx6ntD4Hm8ni553TiX54Pk+YXTtkqj1++c217i+k/Zqjo2esqLGBpC/hJN
d2XyA3vsFvC8yt+dQ89AfgY0VHqVO95WHU0po0L/uJZnE+W6odLVgdEUjfCCsbcr
6Ds730QkYp75l9M1fACX28lNLHkx/t2uBzFe21E2eNL1Y7yFAlNk1Qj8xr9mqkre
LjxjLabpXhsxxq645WGNly45zSLXJsfIhfecmIv3Vj+By0Ue10CrtTWBG0J3GBHh
APcVvd1mgyCDGg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:29:38 2026 by rpki-client