Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
File: 712SU70NJYyVsrNG5IUzyULMI7Q.mft (raw, json)
Hash identifier: sZ+HJv5BEB/R8AXFDjcZ6yLQG4sp6ap4BCtwuhyi7NM=
Subject key identifier: 1C:CB:40:87:27:D8:D1:A5:E3:4D:ED:EE:7A:64:4B:54:6E:D6:96:58
Authority key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Certificate issuer: /CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Certificate serial: 01A0EBF94036A50749E8A94437E574C1B20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
Manifest number: 0194
Signing time: Tue 29 Sep 2026 07:02:55 +0000
Manifest this update: Tue 29 Sep 2026 07:02:55 +0000
Manifest next update: Wed 30 Sep 2026 07:02:55 +0000
Files and hashes: 1: 712SU70NJYyVsrNG5IUzyULMI7Q.crl (hash: DLnLMk9YXFbPaV8l+70KRU3EIc7Ng8SDoA6M953eg4E=)
2: gcOeRtdhASpOXftyQUUQHnlSzHY.roa (hash: mRt09ink6QbROuNCA4WL011qJeqnMp6lFsCyZXUphZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:40:36:a5:07:49:e8:a9:44:37:e5:74:c1:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Validity
Not Before: Sep 29 07:02:55 2026 GMT
Not After : Sep 30 07:02:55 2026 GMT
Subject: CN=1ccb408727d8d1a5e34dedee7a644b546ed69658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:5f:2c:e8:f3:43:c1:7a:e4:90:f4:79:57:
88:55:63:ac:7c:98:3a:6e:86:92:36:c8:4f:3b:1b:
fc:98:5e:f3:55:d9:f6:44:4e:e9:cf:45:ab:45:0f:
8d:3d:9d:65:f3:cf:cc:a1:61:d2:cd:ea:c3:50:85:
d9:c7:ad:44:6f:9f:da:96:da:36:8d:0e:3b:27:a7:
4a:e4:56:4e:40:1b:f7:1b:b7:5e:6b:d3:3b:ba:68:
02:88:2f:ff:9b:8d:c9:be:e1:93:88:97:70:f3:41:
de:a7:5a:dd:f6:3c:48:04:ef:51:8b:66:38:ae:01:
48:20:51:dc:6a:8b:ff:4d:5b:59:a2:97:12:39:3c:
e7:1a:8a:4a:8c:98:fb:3e:52:03:57:23:77:35:fd:
70:ef:04:08:e0:fe:9e:5b:89:85:df:28:54:54:7b:
e6:64:c0:b6:8a:68:18:8d:85:3f:b0:30:22:00:a1:
48:75:d2:5a:35:f2:37:25:e1:de:83:af:7b:5a:ce:
07:45:39:cb:39:00:75:16:79:91:92:33:10:9b:e1:
d7:e7:5a:ba:16:7a:d1:ee:d3:11:dd:e9:bf:2f:6d:
e7:d0:1f:61:fb:0d:bf:2a:99:3e:19:ea:aa:de:2e:
87:1d:b4:ab:30:de:a7:18:8e:ff:58:27:0d:0e:f9:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:40:87:27:D8:D1:A5:E3:4D:ED:EE:7A:64:4B:54:6E:D6:96:58
X509v3 Authority Key Identifier:
keyid:EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:76:95:47:71:ab:0d:4a:91:81:34:3c:6c:86:0a:3c:06:99:
e1:56:bb:4c:9f:71:c4:e8:25:89:0b:67:f7:26:5c:aa:a6:b9:
3f:ad:af:d4:a1:c8:a5:97:91:28:f2:20:ef:cc:7c:99:04:21:
6a:b8:9b:c8:2a:84:2c:65:5c:05:95:09:5c:df:5b:cd:c8:85:
99:19:ff:66:85:e2:f3:9a:04:4f:d1:77:02:6c:6e:b7:80:e3:
59:e1:03:54:03:c4:b6:05:98:82:65:fa:ef:b4:80:c0:39:52:
d5:41:ff:80:8b:59:2f:fd:d6:02:39:77:b0:3a:09:35:36:7a:
0b:b4:df:62:d2:41:13:c2:f8:6b:a2:8b:87:93:12:74:cb:b7:
83:4b:71:c5:8b:e8:eb:90:44:ba:e9:db:bb:0d:96:ac:32:5b:
c8:64:08:c7:c3:4f:b7:87:5d:79:27:e4:16:94:a0:8b:94:94:
f8:9c:3f:11:23:f0:5f:ea:77:19:6d:6a:53:6d:d6:36:d0:c6:
dd:11:83:84:19:8b:ca:7f:2c:fe:9c:84:5a:57:c1:49:98:5e:
e9:2c:8a:d1:ac:0d:e1:a7:56:df:c3:43:a4:d4:98:7d:00:62:
3d:75:b3:f6:7b:f3:fc:7a:4c:ce:c4:03:2e:44:38:18:b7:56:
d0:4b:49:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDr+UA2pQdJ6KlEN+V0wbILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWQ5MjUzYmQwZDI1OGM5NWIyYjM0NmU0ODUzM2M5NDJj
YzIzYjQwHhcNMjYwOTI5MDcwMjU1WhcNMjYwOTMwMDcwMjU1WjAzMTEwLwYDVQQD
EygxY2NiNDA4NzI3ZDhkMWE1ZTM0ZGVkZWU3YTY0NGI1NDZlZDY5NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KBfLOjzQ8F65JD0eVeIVWOsfJg6
boaSNshPOxv8mF7zVdn2RE7pz0WrRQ+NPZ1l88/MoWHSzerDUIXZx61Eb5/alto2
jQ47J6dK5FZOQBv3G7dea9M7umgCiC//m43JvuGTiJdw80Hep1rd9jxIBO9Ri2Y4
rgFIIFHcaov/TVtZopcSOTznGopKjJj7PlIDVyN3Nf1w7wQI4P6eW4mF3yhUVHvm
ZMC2imgYjYU/sDAiAKFIddJaNfI3JeHeg697Ws4HRTnLOQB1FnmRkjMQm+HX51q6
FnrR7tMR3em/L23n0B9h+w2/Kpk+Geqq3i6HHbSrMN6nGI7/WCcNDvmN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzLQIcn2NGl403t7npkS1Ru1pZYMB8GA1UdIwQY
MBaAFO9dklO9DSWMlbKzRuSFM8lCzCO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzEyU1U3ME5KWXlWc3JORzVJVXp5VUxNSTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xNjE2MDEtOWY0OS00YzdjLTk5ZTMt
ODMyZmE0Nzc5ZTMwLzEvNzEyU1U3ME5KWXlWc3JORzVJVXp5VUxNSTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xNjE2MDEtOWY0OS00YzdjLTk5ZTMtODMyZmE0Nzc5ZTMw
LzEvNzEyU1U3ME5KWXlWc3JORzVJVXp5VUxNSTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHaVR3Gr
DUqRgTQ8bIYKPAaZ4Va7TJ9xxOgliQtn9yZcqqa5P62v1KHIpZeRKPIg78x8mQQh
aribyCqELGVcBZUJXN9bzciFmRn/ZoXi85oET9F3Amxut4DjWeEDVAPEtgWYgmX6
77SAwDlS1UH/gItZL/3WAjl3sDoJNTZ6C7TfYtJBE8L4a6KLh5MSdMu3g0txxYvo
65BEuunbuw2WrDJbyGQIx8NPt4ddeSfkFpSgi5SU+Jw/ESPwX+p3GW1qU23WNtDG
3RGDhBmLyn8s/pyEWlfBSZhe6SyK0awN4adW38NDpNSYfQBiPXWz9nvz/HpMzsQD
LkQ4GLdW0EtJ1g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:48:50 2026 by rpki-client