Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: DWuSUyYBUYKIP0QIseBchOSo7Kwit17k15o3QDEbq4E=
Subject key identifier: F2:12:00:6C:B4:C6:5D:F9:7E:FE:73:34:15:D4:66:1B:ED:13:D6:21
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 01A0D7966989DE3455D911D9AFB2EB4CD6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 05E4
Signing time: Fri 25 Sep 2026 08:02:33 +0000
Manifest this update: Fri 25 Sep 2026 08:02:33 +0000
Manifest next update: Sat 26 Sep 2026 08:02:33 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: R9h0YnEaT7VlpwlJD1E/gkfbDCyl9pJZHScLWTuHH+M=)
2: bHM7HWlokuLAKGZUYW39_tqn2Fk.roa (hash: k5ZFTQBnrO/pZ+ljvAJJsNDjRf0esZ6TDnbCraHVTUQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:69:89:de:34:55:d9:11:d9:af:b2:eb:4c:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Sep 25 08:02:33 2026 GMT
Not After : Sep 26 08:02:33 2026 GMT
Subject: CN=f212006cb4c65df97efe733415d4661bed13d621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:cd:47:27:2a:da:3b:59:34:7a:d2:5d:83:
b9:08:63:64:44:1b:75:61:43:aa:69:54:66:69:bc:
07:5e:a6:3d:b9:11:47:7f:df:5c:f0:64:6b:6c:f1:
24:4b:1f:ba:33:8e:b7:cf:df:1c:00:c4:d5:06:e6:
85:66:29:74:ba:de:4d:84:75:d3:e2:69:72:b5:50:
1a:cf:fe:b3:4c:83:80:e6:a0:cb:80:b8:96:59:61:
21:9c:e3:5b:61:93:61:a9:0c:a4:b9:e9:d2:23:fb:
72:fa:49:5a:7c:f5:e2:b1:ea:24:e8:5c:80:f2:8a:
2b:9c:45:f4:3c:2d:17:48:09:26:59:7a:43:d7:1a:
ad:aa:17:a0:83:03:24:a6:a7:f8:1b:ce:53:41:aa:
55:98:16:77:2d:72:ae:1a:0a:84:51:00:6e:80:6a:
1b:71:7a:6d:49:64:89:b4:96:3e:4e:2f:dc:df:15:
e8:31:2b:77:f4:75:d3:1a:31:31:14:57:a0:fc:41:
92:03:97:32:63:76:fe:21:fa:11:7f:b5:91:f9:0e:
60:cb:16:05:3c:d9:dc:02:38:82:b8:e3:21:3d:02:
d0:0d:b0:47:66:5f:3d:e5:12:5d:55:23:89:c5:5e:
eb:dd:37:8a:7b:5f:67:09:b9:6f:c8:b4:85:aa:ae:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:00:6C:B4:C6:5D:F9:7E:FE:73:34:15:D4:66:1B:ED:13:D6:21
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:19:f4:e4:4a:c9:e8:c9:49:cd:d2:cd:6e:91:a2:83:fa:ce:
ff:41:16:ad:3d:c9:ce:f7:de:bd:d5:c0:e2:53:3f:a4:0b:3a:
42:cb:18:fc:cb:54:96:98:84:18:28:ad:02:9a:41:89:9a:31:
f1:49:8e:da:20:52:39:13:a4:f4:21:d6:d3:f9:8b:19:e0:ed:
78:4b:03:43:1f:ef:d7:94:eb:d2:25:39:25:cb:a9:35:44:2c:
52:01:2b:56:10:3d:5a:85:ed:ca:b0:cf:04:e7:96:db:96:03:
e9:9f:81:da:0a:ca:1c:34:ee:86:a3:9b:fb:59:69:fd:1b:4c:
20:fe:55:eb:a0:67:28:3b:42:f6:56:58:47:c7:1a:1f:32:3f:
dc:e7:da:a3:ef:da:8f:d6:18:eb:6a:c8:93:26:a7:79:42:ac:
7d:97:63:24:fd:c3:18:94:89:da:ca:af:8b:85:c8:30:50:24:
46:8c:97:3a:9e:c9:31:a1:b2:b6:9d:96:0e:1b:15:5e:bc:0c:
1b:2b:aa:7f:7d:cb:71:dd:29:88:4a:da:00:33:9a:f2:81:69:
24:76:5f:09:f1:d9:10:db:2d:3d:6e:99:ff:c5:34:86:e0:9a:
ff:50:15:a7:d0:bc:dd:4a:34:e5:bb:6f:e4:d7:77:4f:09:c5:
57:64:6c:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXlmmJ3jRV2RHZr7LrTNbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM1ZjRjODY4MGNlMGRiYTRhMDNkOTVlNjY1YzkzY2M5
OWNlYjkwHhcNMjYwOTI1MDgwMjMzWhcNMjYwOTI2MDgwMjMzWjAzMTEwLwYDVQQD
EyhmMjEyMDA2Y2I0YzY1ZGY5N2VmZTczMzQxNWQ0NjYxYmVkMTNkNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzLNRycq2jtZNHrSXYO5CGNkRBt1
YUOqaVRmabwHXqY9uRFHf99c8GRrbPEkSx+6M463z98cAMTVBuaFZil0ut5NhHXT
4mlytVAaz/6zTIOA5qDLgLiWWWEhnONbYZNhqQykuenSI/ty+klafPXiseok6FyA
8oornEX0PC0XSAkmWXpD1xqtqheggwMkpqf4G85TQapVmBZ3LXKuGgqEUQBugGob
cXptSWSJtJY+Ti/c3xXoMSt39HXTGjExFFeg/EGSA5cyY3b+IfoRf7WR+Q5gyxYF
PNncAjiCuOMhPQLQDbBHZl895RJdVSOJxV7r3TeKe19nCblvyLSFqq4YVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPISAGy0xl35fv5zNBXUZhvtE9YhMB8GA1UdIwQY
MBaAFOxTX0yGgM4NukoD2V5mXJPMmc65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMt
NDJmMmZmODU5MzczLzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMtNDJmMmZmODU5Mzcz
LzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehn05ErJ
6MlJzdLNbpGig/rO/0EWrT3JzvfevdXA4lM/pAs6QssY/MtUlpiEGCitAppBiZox
8UmO2iBSOROk9CHW0/mLGeDteEsDQx/v15Tr0iU5JcupNUQsUgErVhA9WoXtyrDP
BOeW25YD6Z+B2grKHDTuhqOb+1lp/RtMIP5V66BnKDtC9lZYR8caHzI/3Ofao+/a
j9YY62rIkyaneUKsfZdjJP3DGJSJ2sqvi4XIMFAkRoyXOp7JMaGytp2WDhsVXrwM
Gyuqf33Lcd0piEraADOa8oFpJHZfCfHZENstPW6Z/8U0huCa/1AVp9C83Uo05btv
5Nd3TwnFV2Rsnw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:55 2026 by rpki-client