Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
File: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft (raw, json)
Hash identifier: SWZZs5CPzcXmjxYBOmGQyjjyzaw/UCSPJ5vwzG1Pu/o=
Subject key identifier: A8:72:06:22:4D:D4:6A:B8:E0:01:97:C1:54:CE:E1:C0:C4:3D:CD:80
Authority key identifier: EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
Certificate issuer: /CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Certificate serial: 01A0CFA48422038CD6C6478D997D8E2F165F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
Manifest number: 171D
Signing time: Wed 23 Sep 2026 19:01:00 +0000
Manifest this update: Wed 23 Sep 2026 19:01:00 +0000
Manifest next update: Thu 24 Sep 2026 19:01:00 +0000
Files and hashes: 1: 7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl (hash: w647QVnqIVFsoFlu54Be/PLhnKyCrP5mK4Q1u2HIaxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:84:22:03:8c:d6:c6:47:8d:99:7d:8e:2f:16:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf5d512f91044b786a15589a624a8d8cb929e48
Validity
Not Before: Sep 23 19:01:00 2026 GMT
Not After : Sep 24 19:01:00 2026 GMT
Subject: CN=a87206224dd46ab8e00197c154cee1c0c43dcd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:f2:54:2d:1e:49:61:74:c7:1d:8d:b6:d1:
47:df:a0:56:cb:15:85:5a:b3:a5:a5:88:2f:0d:5b:
28:9e:95:23:63:c0:8f:71:75:5f:3f:6c:91:25:fe:
98:d3:1e:9d:d5:7d:b1:41:da:ae:69:79:53:2c:3b:
4f:d4:18:3d:44:f9:8e:66:dd:8e:22:d1:76:13:fa:
5b:78:f4:f1:a3:65:04:20:2f:28:0d:c6:00:87:24:
69:8f:eb:91:59:ac:8a:fe:fc:e5:fe:eb:16:27:6c:
46:bb:27:e9:e9:ca:28:e9:4b:fc:fa:5d:1a:10:35:
0d:fa:ff:34:bb:38:a4:82:3e:6b:c4:79:52:80:6a:
6d:2f:4a:79:27:91:c7:7f:38:e2:1e:23:ae:60:ae:
a1:78:17:f3:43:67:07:69:4f:d4:f5:12:fe:5f:9f:
f1:02:2d:d5:db:04:8f:d5:d5:04:88:e4:47:ea:a9:
60:0a:0d:4f:73:a3:4a:f2:f9:25:76:83:3d:e8:70:
e4:71:ad:1f:dd:b9:f4:cd:e9:fe:17:47:0c:3d:32:
bd:80:53:06:85:5b:b5:cc:41:7c:d9:26:60:34:4b:
6b:ac:ea:33:c1:4a:e4:13:a9:27:32:d3:6a:4d:8c:
28:59:e1:41:70:04:75:28:88:ee:94:6b:28:52:93:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:06:22:4D:D4:6A:B8:E0:01:97:C1:54:CE:E1:C0:C4:3D:CD:80
X509v3 Authority Key Identifier:
keyid:EC:F5:D5:12:F9:10:44:B7:86:A1:55:89:A6:24:A8:D8:CB:92:9E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PXVEvkQRLeGoVWJpiSo2MuSnkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d4dfa-fe4a-4563-8cbe-c1481df7da41/1/7PXVEvkQRLeGoVWJpiSo2MuSnkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b0:ce:b9:66:e1:7d:87:a4:1d:84:f7:c7:17:ec:c6:5a:22:
4b:d5:e2:93:3e:e1:38:8f:68:d4:aa:c7:f7:91:6f:28:a1:66:
8a:79:85:fd:f4:8f:b5:85:e2:b0:a4:b8:66:e6:7c:ea:8d:10:
f1:6b:33:42:25:a2:92:0a:70:76:c7:69:1e:c3:d5:38:4a:e4:
46:52:6f:44:32:8e:29:34:cb:57:ac:da:c2:21:f8:88:ca:9b:
fb:bf:aa:19:ba:3e:75:68:5e:d5:24:c7:2a:f6:3b:b8:6c:6b:
a5:8a:59:82:89:89:82:95:17:ef:8b:77:fc:26:56:0a:2a:ae:
91:16:6c:f6:be:fe:65:05:5a:7f:bd:99:ee:d8:7d:c5:f7:e3:
14:1d:6d:52:14:d5:12:df:29:40:00:43:56:72:21:f9:a5:b9:
da:31:3e:2b:0d:33:50:df:4f:cd:59:10:26:6d:63:ca:6b:95:
76:2d:7b:78:8e:7b:41:4e:86:6f:40:f5:50:61:b8:26:b6:9b:
20:f5:2a:8d:5e:46:57:0d:56:b7:37:61:76:68:13:1e:cc:94:
41:8e:93:52:67:48:c5:76:d6:59:b7:25:7b:19:e4:39:95:cc:
34:19:7f:50:c4:23:b5:01:04:6c:68:6c:65:83:cb:68:48:33:
2c:61:57:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpIQiA4zWxkeNmX2OLxZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjVkNTEyZjkxMDQ0Yjc4NmExNTU4OWE2MjRhOGQ4Y2I5
MjllNDgwHhcNMjYwOTIzMTkwMTAwWhcNMjYwOTI0MTkwMTAwWjAzMTEwLwYDVQQD
EyhhODcyMDYyMjRkZDQ2YWI4ZTAwMTk3YzE1NGNlZTFjMGM0M2RjZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2zyVC0eSWF0xx2NttFH36BWyxWF
WrOlpYgvDVsonpUjY8CPcXVfP2yRJf6Y0x6d1X2xQdquaXlTLDtP1Bg9RPmOZt2O
ItF2E/pbePTxo2UEIC8oDcYAhyRpj+uRWayK/vzl/usWJ2xGuyfp6coo6Uv8+l0a
EDUN+v80uzikgj5rxHlSgGptL0p5J5HHfzjiHiOuYK6heBfzQ2cHaU/U9RL+X5/x
Ai3V2wSP1dUEiORH6qlgCg1Pc6NK8vkldoM96HDkca0f3bn0zen+F0cMPTK9gFMG
hVu1zEF82SZgNEtrrOozwUrkE6knMtNqTYwoWeFBcAR1KIjulGsoUpPR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhyBiJN1Gq44AGXwVTO4cDEPc2AMB8GA1UdIwQY
MBaAFOz11RL5EES3hqFViaYkqNjLkp5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUt
YzE0ODFkZjdkYTQxLzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zZDRkZmEtZmU0YS00NTYzLThjYmUtYzE0ODFkZjdkYTQx
LzEvN1BYVkV2a1FSTGVHb1ZXSnBpU28yTXVTbmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLDOuWbh
fYekHYT3xxfsxloiS9Xikz7hOI9o1KrH95FvKKFminmF/fSPtYXisKS4ZuZ86o0Q
8WszQiWikgpwdsdpHsPVOErkRlJvRDKOKTTLV6zawiH4iMqb+7+qGbo+dWhe1STH
KvY7uGxrpYpZgomJgpUX74t3/CZWCiqukRZs9r7+ZQVaf72Z7th9xffjFB1tUhTV
Et8pQABDVnIh+aW52jE+Kw0zUN9PzVkQJm1jymuVdi17eI57QU6Gb0D1UGG4Jrab
IPUqjV5GVw1WtzdhdmgTHsyUQY6TUmdIxXbWWbclexnkOZXMNBl/UMQjtQEEbGhs
ZYPLaEgzLGFXMw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:59:58 2026 by rpki-client