Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: vhtC5xKj35c78j8zn9IvcPp0Uo8yjw1Uq+jrLyRsuQ4=
Subject key identifier: 2D:51:37:54:75:64:B0:BE:73:73:27:C6:5A:E9:7D:12:EC:14:95:86
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 01A0D3B86BDD1AD944E581E4A3D8ECBC9E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 14:01:13 +0000
Manifest this update: Thu 24 Sep 2026 14:01:13 +0000
Manifest next update: Fri 25 Sep 2026 14:01:13 +0000
Files and hashes: 1: 6ukkUq47_d2FjDn2mGzCVotpwug.roa (hash: BSpIOmqaO5YAgsvsZQqH6+DD7MhtSJv4k++NTBFYMhA=)
2: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: MdrMxEAjubAweqUKU4gz8ezOMOdSnFvSAVW3LxL/j8c=)
3: lOdlGRTCbIpEqR9qatoRPkmZsSo.roa (hash: puduhtYoMCBO2MogdQIQ/qqMbhZcm/6N0DD1bqrK4NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:6b:dd:1a:d9:44:e5:81:e4:a3:d8:ec:bc:9e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Sep 24 14:01:13 2026 GMT
Not After : Sep 25 14:01:13 2026 GMT
Subject: CN=2d5137547564b0be737327c65ae97d12ec149586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:66:63:74:d7:57:96:e4:a0:5b:55:69:54:
71:c3:46:45:6d:e5:78:65:db:1b:fa:ae:bb:09:24:
a9:e8:b3:71:50:b8:14:ef:b5:9c:30:5b:ff:aa:50:
41:d6:d5:7e:56:3f:3d:41:6a:3c:25:f2:1c:82:69:
e6:0e:e2:1a:9e:1d:e1:9e:8f:03:33:b8:0e:0d:07:
bd:7a:86:40:83:81:6d:b6:d7:df:93:37:48:00:ae:
78:fc:91:7a:ab:62:c7:e3:40:52:57:6b:6e:e8:74:
70:fe:c0:97:80:3b:d2:02:56:26:36:b7:d0:93:27:
24:e5:d0:e6:bb:c5:e2:26:2f:12:be:6f:0d:a2:a1:
6b:7f:7e:78:ee:f0:d4:49:3f:a5:e0:34:3d:89:01:
38:b7:ae:c3:f2:8f:7e:ba:9b:ab:da:93:b5:2e:12:
08:63:1f:c1:9a:2d:03:34:af:f6:0d:fd:98:48:65:
40:b1:95:bc:3a:94:80:f1:fe:fb:23:14:3e:67:8c:
28:fe:8f:c5:28:af:d3:25:d1:43:b8:24:e7:c8:3b:
4e:27:5c:66:72:44:b4:b1:16:ce:b4:ef:35:ca:5a:
76:b8:13:4b:bf:8d:a3:f3:b3:75:b1:f9:6f:87:4f:
98:b4:37:ed:87:bb:d6:e8:2e:63:10:2e:ff:21:aa:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:37:54:75:64:B0:BE:73:73:27:C6:5A:E9:7D:12:EC:14:95:86
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:85:fa:66:c6:e9:3e:4a:76:82:73:d0:9f:6a:3d:13:e7:d1:
fd:da:d4:95:28:29:8d:b0:72:56:e0:3d:6a:d7:23:97:bf:0d:
1f:47:a7:ae:f6:3a:53:70:77:87:b9:ff:65:8f:89:a9:21:d3:
aa:40:9a:91:58:07:fc:47:4c:b3:8c:f2:11:a8:0f:11:c4:bf:
fe:92:eb:47:70:50:e8:d4:96:10:a9:8a:47:8f:f9:f0:3a:b4:
54:76:7b:be:33:1f:52:3d:aa:55:28:89:59:d7:03:ea:22:43:
ad:ad:2c:94:4c:6f:d8:23:de:be:5e:6e:17:c7:19:29:1c:b4:
b9:a3:ad:8f:ca:e9:d4:b5:7e:07:61:aa:8e:b4:20:cd:dc:ef:
d8:94:93:0d:ac:19:fc:81:93:c4:60:da:62:72:ef:9a:a2:db:
ad:d0:e6:98:2d:87:42:49:9c:13:63:ca:8c:15:0f:41:5b:d2:
4e:af:56:9b:80:61:8d:fa:da:3d:78:b2:e8:c9:cb:48:38:aa:
e1:b9:73:63:4c:ab:57:3c:dc:df:88:2e:78:86:ff:c5:a8:f7:
f8:75:aa:f0:2d:b2:9d:3d:1f:8a:6d:c3:4a:a8:d4:06:10:ac:
39:47:66:80:c4:6d:d0:8b:23:13:88:e2:ca:36:fc:ad:ca:9d:
71:16:f7:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuGvdGtlE5YHko9jsvJ4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWIwODk5ZTM4YTk2YjU0ZmM0Y2JjZDEwZWY1MzljNTRl
ZDRkMzgwHhcNMjYwOTI0MTQwMTEzWhcNMjYwOTI1MTQwMTEzWjAzMTEwLwYDVQQD
EygyZDUxMzc1NDc1NjRiMGJlNzM3MzI3YzY1YWU5N2QxMmVjMTQ5NTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrhmY3TXV5bkoFtVaVRxw0ZFbeV4
Zdsb+q67CSSp6LNxULgU77WcMFv/qlBB1tV+Vj89QWo8JfIcgmnmDuIanh3hno8D
M7gODQe9eoZAg4FtttffkzdIAK54/JF6q2LH40BSV2tu6HRw/sCXgDvSAlYmNrfQ
kyck5dDmu8XiJi8Svm8NoqFrf3547vDUST+l4DQ9iQE4t67D8o9+upur2pO1LhII
Yx/Bmi0DNK/2Df2YSGVAsZW8OpSA8f77IxQ+Z4wo/o/FKK/TJdFDuCTnyDtOJ1xm
ckS0sRbOtO81ylp2uBNLv42j87N1sflvh0+YtDfth7vW6C5jEC7/IapqSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1RN1R1ZLC+c3MnxlrpfRLsFJWGMB8GA1UdIwQY
MBaAFO4bCJnjipa1T8TLzRDvU5xU7U04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMt
YWRmNmRhYjg4Yzg0LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjVhNDMtODE3Yi00NDliLWJjZmMtYWRmNmRhYjg4Yzg0
LzEvN2hzSW1lT0tsclZQeE12TkVPOVRuRlR0VFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4X6Zsbp
Pkp2gnPQn2o9E+fR/drUlSgpjbByVuA9atcjl78NH0enrvY6U3B3h7n/ZY+JqSHT
qkCakVgH/EdMs4zyEagPEcS//pLrR3BQ6NSWEKmKR4/58Dq0VHZ7vjMfUj2qVSiJ
WdcD6iJDra0slExv2CPevl5uF8cZKRy0uaOtj8rp1LV+B2GqjrQgzdzv2JSTDawZ
/IGTxGDaYnLvmqLbrdDmmC2HQkmcE2PKjBUPQVvSTq9Wm4BhjfraPXiy6MnLSDiq
4blzY0yrVzzc34gueIb/xaj3+HWq8C2ynT0fim3DSqjUBhCsOUdmgMRt0IsjE4ji
yjb8rcqdcRb3pw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:36 2026 by rpki-client