
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: jTX3s6k/t9L2/Gv3XXXLHEHEVrMeguyCRMVdbMnWBj8=
Subject key identifier: BB:7B:E6:0F:F4:66:61:FB:DC:9C:A6:D6:10:E5:E4:D4:DE:7E:7E:80
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 01A0D1923E399697BDBE5A865230360AD2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 15B1
Signing time: Thu 24 Sep 2026 04:00:17 +0000
Manifest this update: Thu 24 Sep 2026 04:00:17 +0000
Manifest next update: Fri 25 Sep 2026 04:00:17 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: L1Murpr7Ol2c/r94uJpr/uhhMwudlI5YX118CxN93qM=)
2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:3e:39:96:97:bd:be:5a:86:52:30:36:0a:d2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Sep 24 04:00:17 2026 GMT
Not After : Sep 25 04:00:17 2026 GMT
Subject: CN=bb7be60ff46661fbdc9ca6d610e5e4d4de7e7e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:01:13:f2:47:fb:de:b8:f4:98:5d:f7:69:
e3:fc:c8:29:88:db:2e:6b:64:d2:23:2c:39:db:15:
85:02:8d:59:bf:a9:c6:46:5c:17:b9:9c:ee:44:d3:
12:65:4c:7a:dc:bc:e4:71:4a:4c:da:ca:f3:f8:d5:
55:7e:13:f8:80:26:7c:c2:91:fa:23:28:ef:a2:94:
68:6b:99:03:42:f9:63:b5:aa:04:58:3f:83:1f:d8:
f5:00:24:73:6f:0e:ef:99:1f:c8:23:a2:b5:b6:1f:
46:72:e6:1c:b2:dd:39:22:6e:b3:2b:52:cb:75:0a:
1e:b7:74:ea:45:7c:fb:ec:09:a2:6a:9e:e5:5c:7c:
69:bd:f6:3b:94:2f:8b:55:86:e0:1b:b3:56:1c:47:
41:b9:65:f4:6d:9a:f9:55:02:51:ae:11:6c:f0:66:
c2:db:cd:a8:33:bb:e0:98:a7:34:25:55:13:d6:5c:
da:dd:49:b9:de:c8:5c:ef:bc:f2:92:d8:9d:1c:9b:
fe:8a:5a:36:c5:23:ff:2d:a9:fe:9c:02:42:cc:57:
0b:9c:60:3e:d6:b9:28:95:a2:e9:64:54:32:f2:2e:
a2:0c:39:fa:0c:52:d3:ea:fb:f6:e8:70:07:2b:75:
89:c7:80:cf:af:2e:88:5b:9a:d2:35:7f:74:b4:6c:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7B:E6:0F:F4:66:61:FB:DC:9C:A6:D6:10:E5:E4:D4:DE:7E:7E:80
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b1:a7:30:a9:66:b3:94:7a:43:cc:68:3e:42:0a:ea:65:a3:
e8:26:91:d0:32:3d:fb:e5:b9:49:b1:5b:ed:e8:56:9b:9b:87:
83:4e:ed:00:a1:b0:f3:fc:8e:db:e7:b6:9c:0e:af:3c:db:dd:
c8:43:53:bd:b5:cf:6a:56:af:15:8d:f3:de:c6:fa:24:25:18:
0b:3d:25:24:be:df:64:e0:e1:6f:4a:c8:c5:eb:ab:e9:7c:66:
21:ea:ff:b2:ba:7f:31:cd:e8:45:95:1b:f6:c4:bc:0f:4f:6f:
01:2d:f1:8b:f5:a6:77:c6:83:c7:e3:51:47:59:10:88:a1:d4:
54:bc:b2:f6:52:5e:1c:d8:1b:85:c8:c5:e1:84:7f:f7:e3:22:
bb:50:92:90:a8:7d:65:64:12:08:25:9b:41:a3:a9:3c:d6:16:
52:67:35:cb:d4:16:49:cb:0b:f6:16:0d:8b:99:e1:45:d4:66:
91:27:51:c1:69:c9:3e:fb:36:92:d0:e3:fb:55:0c:2a:6d:5a:
7d:32:fd:9b:9f:3e:20:f5:75:41:9f:3a:1e:b2:f6:71:f8:2f:
1e:95:d5:3f:e9:bd:3e:05:d6:6d:52:fe:72:79:c9:9e:35:fa:
89:a1:81:b9:17:c9:fa:4c:82:a2:22:27:82:c3:de:0f:11:2a:
8b:30:1b:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkj45lpe9vlqGUjA2CtLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOGZmOTZlYWUyZDQ0OGVjNzg0OWQxNzNiNTUyZjE1ZjBm
NzA0YzEwHhcNMjYwOTI0MDQwMDE3WhcNMjYwOTI1MDQwMDE3WjAzMTEwLwYDVQQD
EyhiYjdiZTYwZmY0NjY2MWZiZGM5Y2E2ZDYxMGU1ZTRkNGRlN2U3ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdcBE/JH+9649Jhd92nj/MgpiNsu
a2TSIyw52xWFAo1Zv6nGRlwXuZzuRNMSZUx63LzkcUpM2srz+NVVfhP4gCZ8wpH6
IyjvopRoa5kDQvljtaoEWD+DH9j1ACRzbw7vmR/II6K1th9GcuYcst05Im6zK1LL
dQoet3TqRXz77Amiap7lXHxpvfY7lC+LVYbgG7NWHEdBuWX0bZr5VQJRrhFs8GbC
282oM7vgmKc0JVUT1lza3Um53shc77zyktidHJv+ilo2xSP/Lan+nAJCzFcLnGA+
1rkolaLpZFQy8i6iDDn6DFLT6vv26HAHK3WJx4DPry6IW5rSNX90tGzlUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt75g/0ZmH73Jym1hDl5NTefn6AMB8GA1UdIwQY
MBaAFOyP+W6uLUSOx4SdFztVLxXw9wTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMt
NmYxYzk3NGU4NjM3LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hMTZhY2MtMWRmYi00YjJmLWIyNDMtNmYxYzk3NGU4NjM3
LzEvN0lfNWJxNHRSSTdIaEowWE8xVXZGZkQzQk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLGnMKlm
s5R6Q8xoPkIK6mWj6CaR0DI9++W5SbFb7ehWm5uHg07tAKGw8/yO2+e2nA6vPNvd
yENTvbXPalavFY3z3sb6JCUYCz0lJL7fZODhb0rIxeur6XxmIer/srp/Mc3oRZUb
9sS8D09vAS3xi/Wmd8aDx+NRR1kQiKHUVLyy9lJeHNgbhcjF4YR/9+Miu1CSkKh9
ZWQSCCWbQaOpPNYWUmc1y9QWScsL9hYNi5nhRdRmkSdRwWnJPvs2ktDj+1UMKm1a
fTL9m58+IPV1QZ86HrL2cfgvHpXVP+m9PgXWbVL+cnnJnjX6iaGBuRfJ+kyCoiIn
gsPeDxEqizAbZQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:28:19 2026 by rpki-client