Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
File: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft (raw, json)
Hash identifier: V1zMDyuaoyHalJgmxH3CfeDT8hq1zdfZcACjGaYikxM=
Subject key identifier: EA:91:8C:A6:AA:80:65:49:CC:DF:29:24:A0:70:9D:49:05:8C:C2:6C
Authority key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Certificate issuer: /CN=983750f247069679b83eedfd7bd565ea46789a60
Certificate serial: 01A0D3EF1937A07EB71A2587CD79E85A0493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:00:57 +0000
Manifest this update: Thu 24 Sep 2026 15:00:57 +0000
Manifest next update: Fri 25 Sep 2026 15:00:57 +0000
Files and hashes: 1: P9PKZAt5djm7FdGsrSvgtxYkacg.roa (hash: ugWkvKLaNhrHSnXEVwNyBj9pWu4yB48C3daCoDS8DQk=)
2: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl (hash: bXFQYrhBfrjV9FH9ilMddrKMsWZcqQ5x/SHktU1qTek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:19:37:a0:7e:b7:1a:25:87:cd:79:e8:5a:04:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983750f247069679b83eedfd7bd565ea46789a60
Validity
Not Before: Sep 24 15:00:57 2026 GMT
Not After : Sep 25 15:00:57 2026 GMT
Subject: CN=ea918ca6aa806549ccdf2924a0709d49058cc26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:77:f2:31:47:8e:51:aa:ee:5c:2d:75:1d:
03:0c:eb:16:80:c8:2f:af:ef:97:34:47:1e:54:ae:
6e:11:b0:a9:3c:80:83:5a:59:78:41:c8:59:a8:14:
1c:7b:d5:dd:e6:d5:88:a0:c7:33:85:ab:78:81:45:
86:5a:d8:0e:dc:05:8f:ec:f0:04:b8:68:23:99:35:
f2:7a:c4:9b:a4:6a:5b:2c:86:0e:fb:85:b7:27:d5:
32:fa:79:4b:8c:aa:5c:40:81:6c:8e:d7:1c:c5:fd:
4c:ea:d5:6b:76:fb:04:3e:1f:12:08:02:20:2b:c6:
ad:d9:74:23:a9:9b:37:16:79:42:57:ac:d8:48:f8:
a2:ed:fa:13:dd:a3:91:05:82:43:95:06:d3:93:b4:
28:87:cf:a8:6c:4a:ac:d5:68:3c:e8:75:38:d0:e3:
ca:d2:47:62:c1:cd:48:70:c8:86:c2:b1:2e:2c:db:
6f:91:a2:a9:ac:e5:7e:ae:ed:9b:2a:65:8f:7c:53:
f7:25:20:6a:04:b4:17:8c:8c:85:23:c4:8b:96:10:
b7:f2:21:ab:58:28:a9:51:b7:4a:22:e1:de:c8:77:
1b:47:0e:19:f3:f2:26:a5:ae:1d:ae:a7:c4:34:03:
5e:38:40:04:53:98:7e:68:d3:6f:dd:bc:21:39:7d:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:8C:A6:AA:80:65:49:CC:DF:29:24:A0:70:9D:49:05:8C:C2:6C
X509v3 Authority Key Identifier:
keyid:98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ee:ff:c2:80:a5:3e:61:21:51:e6:34:12:c5:af:c4:32:da:
27:2a:9b:3a:ab:05:6b:e8:ec:89:92:1d:0a:e6:59:e2:13:31:
b2:4f:6d:66:fd:d0:30:bd:f6:d6:63:ce:94:cf:ba:6b:63:30:
c0:c5:65:d4:2b:8a:7a:a1:fa:d8:bd:a8:96:6a:25:7d:df:0e:
65:0f:0e:bc:25:bf:49:93:b7:2e:db:13:70:0c:43:86:50:de:
d8:ba:57:76:c1:bb:ed:8e:fd:fb:80:00:53:28:bb:f6:cb:47:
78:59:95:4d:81:c3:4c:13:d0:75:f0:db:0d:05:02:75:3b:24:
67:bf:51:85:1f:29:a0:ee:d4:ae:09:88:bf:89:70:6a:64:a8:
84:77:1f:03:20:30:22:4d:c7:bc:d6:4e:e7:e0:1c:db:4c:ee:
58:bf:a4:24:72:f5:ef:29:4a:c3:d5:8f:86:da:53:52:74:40:
da:52:50:74:25:fb:14:b1:cb:7b:ca:14:b9:c7:4e:f9:fd:e2:
01:06:67:36:20:e3:2c:3a:fe:45:b1:4c:46:c1:ac:fc:9e:c3:
12:4e:01:f8:73:3a:45:c6:55:5b:2a:b5:94:5e:70:df:05:db:
4f:87:af:20:58:34:99:88:d6:f9:7d:31:13:36:6c:7d:7e:de:
91:40:81:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT7xk3oH63GiWHzXnoWgSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Mzc1MGYyNDcwNjk2NzliODNlZWRmZDdiZDU2NWVhNDY3
ODlhNjAwHhcNMjYwOTI0MTUwMDU3WhcNMjYwOTI1MTUwMDU3WjAzMTEwLwYDVQQD
EyhlYTkxOGNhNmFhODA2NTQ5Y2NkZjI5MjRhMDcwOWQ0OTA1OGNjMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcJ38jFHjlGq7lwtdR0DDOsWgMgv
r++XNEceVK5uEbCpPICDWll4QchZqBQce9Xd5tWIoMczhat4gUWGWtgO3AWP7PAE
uGgjmTXyesSbpGpbLIYO+4W3J9Uy+nlLjKpcQIFsjtccxf1M6tVrdvsEPh8SCAIg
K8at2XQjqZs3FnlCV6zYSPii7foT3aORBYJDlQbTk7Qoh8+obEqs1Wg86HU40OPK
0kdiwc1IcMiGwrEuLNtvkaKprOV+ru2bKmWPfFP3JSBqBLQXjIyFI8SLlhC38iGr
WCipUbdKIuHeyHcbRw4Z8/Impa4drqfENANeOEAEU5h+aNNv3bwhOX1AmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqRjKaqgGVJzN8pJKBwnUkFjMJsMB8GA1UdIwQY
MBaAFJg3UPJHBpZ5uD7t/XvVZepGeJpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbURkUThrY0dsbm00UHUzOWU5Vmw2a1o0bW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt
NTY2NzQxOWY0NGU4LzEvbURkUThrY0dsbm00UHUzOWU5Vmw2a1o0bW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4
LzEvbURkUThrY0dsbm00UHUzOWU5Vmw2a1o0bW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+7/woCl
PmEhUeY0EsWvxDLaJyqbOqsFa+jsiZIdCuZZ4hMxsk9tZv3QML321mPOlM+6a2Mw
wMVl1CuKeqH62L2olmolfd8OZQ8OvCW/SZO3LtsTcAxDhlDe2LpXdsG77Y79+4AA
Uyi79stHeFmVTYHDTBPQdfDbDQUCdTskZ79RhR8poO7UrgmIv4lwamSohHcfAyAw
Ik3HvNZO5+Ac20zuWL+kJHL17ylKw9WPhtpTUnRA2lJQdCX7FLHLe8oUucdO+f3i
AQZnNiDjLDr+RbFMRsGs/J7DEk4B+HM6RcZVWyq1lF5w3wXbT4evIFg0mYjW+X0x
EzZsfX7ekUCBeQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:49:35 2026 by rpki-client