Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: 0kI2DTZQ/SngixqAJph6th/82JSAU5OWihbbIoEuW88=
Subject key identifier: 59:27:2B:68:89:BE:EA:F0:A6:E7:AA:C2:A3:7A:41:46:BB:A1:5D:B4
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 01A0D1C939625F3B0B82EA2E6296C166B012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 05E1
Signing time: Thu 24 Sep 2026 05:00:20 +0000
Manifest this update: Thu 24 Sep 2026 05:00:20 +0000
Manifest next update: Fri 25 Sep 2026 05:00:20 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: HU9hWyPF61OiuL4PVcf8qIKOOheXLseTwJXjtkXFy90=)
2: bHM7HWlokuLAKGZUYW39_tqn2Fk.roa (hash: k5ZFTQBnrO/pZ+ljvAJJsNDjRf0esZ6TDnbCraHVTUQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:39:62:5f:3b:0b:82:ea:2e:62:96:c1:66:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Sep 24 05:00:20 2026 GMT
Not After : Sep 25 05:00:20 2026 GMT
Subject: CN=59272b6889beeaf0a6e7aac2a37a4146bba15db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:52:49:84:23:a1:64:b7:0c:69:59:21:58:
f2:d3:94:84:19:6e:f1:6f:94:3c:17:4e:41:07:20:
02:6f:46:53:30:0b:35:9f:d2:11:55:b3:b7:c1:f6:
c7:f1:a1:5f:9d:22:60:47:bc:94:20:b1:b9:9f:77:
7c:ea:02:f0:c8:77:1a:c5:3f:63:1f:37:91:bb:fa:
f3:53:98:f8:0d:4a:bb:ab:29:99:72:b2:20:03:db:
51:85:62:e5:32:6a:84:04:6b:de:93:a3:6f:0f:e2:
6e:92:62:fa:7d:d7:f0:e5:db:90:f0:61:d5:69:2a:
de:60:08:ce:00:0c:20:25:0e:61:29:e8:df:8d:26:
1f:8b:2b:19:a5:2c:ac:79:f4:e9:78:d0:3d:72:eb:
07:0b:ac:c0:11:09:1f:33:78:94:9b:3b:d4:31:45:
5b:a4:9e:8d:8d:df:32:87:f6:28:bb:71:97:d7:5f:
a6:e1:e3:d9:c8:1a:e5:d6:93:a1:84:8e:57:c5:13:
a8:0f:59:59:99:07:d4:2e:c2:e8:2a:d7:db:08:d4:
be:0d:00:76:c5:9f:7c:d1:bf:ff:7c:09:46:0f:d0:
6a:f0:2b:e8:3d:0f:e4:27:2f:9a:20:1a:fa:0f:f5:
a8:74:15:c2:cb:ca:52:c8:38:c4:66:0a:96:f2:fc:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:2B:68:89:BE:EA:F0:A6:E7:AA:C2:A3:7A:41:46:BB:A1:5D:B4
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3f:d4:c1:cd:17:ae:9e:ad:60:ff:4d:04:77:f7:97:cf:df:
03:dd:1d:9f:40:b1:4c:c5:a8:98:c9:54:67:36:21:f5:9a:49:
88:26:5e:6b:8c:5b:5c:bd:58:ef:44:da:28:d5:ec:e5:42:2d:
a0:5e:20:5a:83:60:81:e1:ad:40:d1:87:ce:2e:21:9d:c6:87:
fc:47:7d:df:14:f6:7d:80:0b:d0:b1:64:ea:13:3a:4d:38:09:
ff:3d:ae:da:52:a9:52:7b:12:c2:95:e4:14:2c:f1:ef:6b:5d:
34:e1:61:76:e7:38:1b:7d:28:28:0b:11:53:3a:71:4a:34:15:
91:f6:34:83:61:29:50:1e:9b:65:1e:c4:dc:e7:ae:f7:ac:dd:
cd:e3:34:e7:dc:50:ce:54:c0:ec:b1:46:2d:fb:35:66:95:25:
b7:3b:b2:1c:4e:fc:34:3f:32:2c:d2:81:fb:5b:53:de:6c:d6:
82:61:06:e6:ce:45:43:1d:a7:60:b6:68:4e:64:85:9e:32:84:
c7:ce:39:af:5b:f6:93:01:03:ed:b2:9d:70:5d:a8:55:25:51:
ab:45:73:c0:a8:8d:05:c2:f1:36:fa:47:71:7c:6d:e2:dd:32:
13:31:33:dd:cf:91:27:ff:dd:9f:35:40:d7:e8:07:89:49:fe:
fc:3c:50:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyTliXzsLguouYpbBZrASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM1ZjRjODY4MGNlMGRiYTRhMDNkOTVlNjY1YzkzY2M5
OWNlYjkwHhcNMjYwOTI0MDUwMDIwWhcNMjYwOTI1MDUwMDIwWjAzMTEwLwYDVQQD
Eyg1OTI3MmI2ODg5YmVlYWYwYTZlN2FhYzJhMzdhNDE0NmJiYTE1ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZdSSYQjoWS3DGlZIVjy05SEGW7x
b5Q8F05BByACb0ZTMAs1n9IRVbO3wfbH8aFfnSJgR7yUILG5n3d86gLwyHcaxT9j
HzeRu/rzU5j4DUq7qymZcrIgA9tRhWLlMmqEBGvek6NvD+JukmL6fdfw5duQ8GHV
aSreYAjOAAwgJQ5hKejfjSYfiysZpSysefTpeNA9cusHC6zAEQkfM3iUmzvUMUVb
pJ6Njd8yh/You3GX11+m4ePZyBrl1pOhhI5XxROoD1lZmQfULsLoKtfbCNS+DQB2
xZ980b//fAlGD9Bq8CvoPQ/kJy+aIBr6D/WodBXCy8pSyDjEZgqW8vwrJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFknK2iJvurwpueqwqN6QUa7oV20MB8GA1UdIwQY
MBaAFOxTX0yGgM4NukoD2V5mXJPMmc65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMt
NDJmMmZmODU5MzczLzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMtNDJmMmZmODU5Mzcz
LzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj/Uwc0X
rp6tYP9NBHf3l8/fA90dn0CxTMWomMlUZzYh9ZpJiCZea4xbXL1Y70TaKNXs5UIt
oF4gWoNggeGtQNGHzi4hncaH/Ed93xT2fYAL0LFk6hM6TTgJ/z2u2lKpUnsSwpXk
FCzx72tdNOFhduc4G30oKAsRUzpxSjQVkfY0g2EpUB6bZR7E3Oeu96zdzeM059xQ
zlTA7LFGLfs1ZpUltzuyHE78ND8yLNKB+1tT3mzWgmEG5s5FQx2nYLZoTmSFnjKE
x845r1v2kwED7bKdcF2oVSVRq0VzwKiNBcLxNvpHcXxt4t0yEzEz3c+RJ//dnzVA
1+gHiUn+/DxQ8w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:14 2026 by rpki-client