Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
File: 7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft (raw, json)
Hash identifier: 36HNp7YQRN3J/3AnOzyV/0UyATShplBw8Afn+Tzfwiw=
Subject key identifier: AA:08:E4:7A:AD:4D:5C:88:11:5F:23:33:53:4D:9C:F5:E8:A5:52:F2
Authority key identifier: EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF
Certificate issuer: /CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
Certificate serial: 01A0CE91D3BB6C497833A40A8DCC3BDD3FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
Manifest number: 0130
Signing time: Wed 23 Sep 2026 14:00:58 +0000
Manifest this update: Wed 23 Sep 2026 14:00:58 +0000
Manifest next update: Thu 24 Sep 2026 14:00:58 +0000
Files and hashes: 1: 7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl (hash: CR+HKBfAGl8FBg/k/QZ7mxH7hacdvy0iufMd1ODd26I=)
2: Ijn8-P6TGDIDFNlQB8DmmxgPL1I.roa (hash: gpvXxQg5tH99OjYIfkw0uUChypTbhupMYAjwAZjaKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:d3:bb:6c:49:78:33:a4:0a:8d:cc:3b:dd:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
Validity
Not Before: Sep 23 14:00:58 2026 GMT
Not After : Sep 24 14:00:58 2026 GMT
Subject: CN=aa08e47aad4d5c88115f2333534d9cf5e8a552f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:ab:74:26:16:1e:11:69:70:19:f9:3a:99:
cb:53:b0:24:eb:18:f6:64:55:4d:59:9c:c2:2c:13:
9a:47:77:2b:7e:37:25:f0:9f:21:13:d1:79:43:19:
18:17:ed:1d:8f:af:44:b2:85:8f:5b:11:d2:ac:c2:
60:e5:35:39:2b:4a:78:e5:11:27:cc:f2:c7:50:88:
e3:22:02:bb:27:98:d4:75:8c:fe:48:29:28:c2:6f:
a3:57:f3:e5:38:f4:1f:a8:f4:e7:f2:7b:2c:25:34:
3e:95:84:b7:b7:02:e4:6e:1f:2e:25:3e:97:58:65:
90:f9:26:c5:f7:c5:9a:ff:3a:61:29:3f:18:ba:bc:
7e:c0:22:5e:ab:e1:ba:38:66:fa:b1:58:ae:5b:b1:
7a:71:74:d4:cc:c8:6e:8d:86:7b:da:08:d3:be:98:
d2:9e:72:60:40:5b:9e:e7:d2:86:a2:64:d1:6b:ed:
20:96:6c:32:1b:50:1f:77:44:7a:45:e3:2b:66:aa:
8a:92:39:8e:9e:58:68:a3:72:e1:b2:88:f7:e4:17:
1f:52:5e:a1:9a:76:f2:12:41:d7:04:74:c7:47:c9:
e7:e2:30:68:90:c4:f2:1f:49:c2:b1:a3:9a:6b:78:
bb:b5:fa:db:5b:c0:b9:f6:b9:ca:4d:18:c8:7f:26:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:08:E4:7A:AD:4D:5C:88:11:5F:23:33:53:4D:9C:F5:E8:A5:52:F2
X509v3 Authority Key Identifier:
keyid:EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:27:af:4e:4f:cf:09:bf:c4:9b:f1:79:1b:8a:ac:cb:61:ec:
3f:5d:2c:b3:da:ce:5d:ff:56:8e:37:f9:7d:1a:11:b1:3f:95:
3e:e6:24:36:41:6e:ff:8e:5d:4a:a5:a1:3e:d3:e0:0e:13:c5:
a5:a1:f0:d1:bc:eb:97:42:97:57:1a:6c:16:0b:b4:b5:bb:a8:
e2:16:34:e2:c6:13:2b:9d:f1:12:ee:1c:15:64:de:57:f2:d4:
62:66:47:45:6e:c5:00:d4:58:d2:6b:b9:f9:22:c0:3e:16:7a:
76:da:f2:92:f1:78:c5:66:60:a5:b8:30:ae:20:c6:3c:96:d0:
3d:d9:43:3d:e8:a8:56:1b:33:d8:5a:9d:db:5f:42:cb:de:b6:
57:4f:e1:b1:80:21:72:d8:fb:64:f9:98:86:1b:87:a6:5a:9b:
33:70:48:31:07:4c:3f:97:36:75:aa:77:f2:17:73:db:8c:80:
20:fe:44:55:29:37:7b:52:31:a4:c9:39:f3:45:ac:10:3d:8c:
39:db:58:24:84:37:c1:90:16:e0:31:75:52:bc:f9:b4:bd:b1:
3f:64:a9:e6:25:e2:e8:87:06:4b:8b:e7:19:3b:23:f0:5a:3e:
5a:87:36:2d:62:60:27:4e:21:2f:46:75:01:b8:8f:61:22:15:
a1:e8:9d:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkdO7bEl4M6QKjcw73T/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjFiN2E2YWMzMThjYzMzMGZhNWViMjRlMGZkMjQ4MzYw
MTk2ZWYwHhcNMjYwOTIzMTQwMDU4WhcNMjYwOTI0MTQwMDU4WjAzMTEwLwYDVQQD
EyhhYTA4ZTQ3YWFkNGQ1Yzg4MTE1ZjIzMzM1MzRkOWNmNWU4YTU1MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt2rdCYWHhFpcBn5OpnLU7Ak6xj2
ZFVNWZzCLBOaR3crfjcl8J8hE9F5QxkYF+0dj69EsoWPWxHSrMJg5TU5K0p45REn
zPLHUIjjIgK7J5jUdYz+SCkowm+jV/PlOPQfqPTn8nssJTQ+lYS3twLkbh8uJT6X
WGWQ+SbF98Wa/zphKT8Yurx+wCJeq+G6OGb6sViuW7F6cXTUzMhujYZ72gjTvpjS
nnJgQFue59KGomTRa+0glmwyG1Afd0R6ReMrZqqKkjmOnlhoo3Lhsoj35BcfUl6h
mnbyEkHXBHTHR8nn4jBokMTyH0nCsaOaa3i7tfrbW8C59rnKTRjIfyYy6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoI5HqtTVyIEV8jM1NNnPXopVLyMB8GA1UdIwQY
MBaAFOxht6asMYzDMPpesk4P0kg2AZbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dHM3Bxd3hqTU13LWw2eVRnX1NTRFlCbHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mZjQ3NjItMjJlMS00YjJkLTk3MzMt
NTI4MGI5YWQxZDBlLzEvN0dHM3Bxd3hqTU13LWw2eVRnX1NTRFlCbHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mZjQ3NjItMjJlMS00YjJkLTk3MzMtNTI4MGI5YWQxZDBl
LzEvN0dHM3Bxd3hqTU13LWw2eVRnX1NTRFlCbHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyevTk/P
Cb/Em/F5G4qsy2HsP10ss9rOXf9Wjjf5fRoRsT+VPuYkNkFu/45dSqWhPtPgDhPF
paHw0bzrl0KXVxpsFgu0tbuo4hY04sYTK53xEu4cFWTeV/LUYmZHRW7FANRY0mu5
+SLAPhZ6dtrykvF4xWZgpbgwriDGPJbQPdlDPeioVhsz2Fqd219Cy962V0/hsYAh
ctj7ZPmYhhuHplqbM3BIMQdMP5c2dap38hdz24yAIP5EVSk3e1IxpMk580WsED2M
OdtYJIQ3wZAW4DF1Urz5tL2xP2Sp5iXi6IcGS4vnGTsj8Fo+Woc2LWJgJ04hL0Z1
AbiPYSIVoeidYQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:45 2026 by rpki-client