Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: eQN9L9icL/AQaIROrawtYSUSqbvc3PMwHneAtGsdwGU=
Subject key identifier: AC:F0:35:03:83:72:94:8F:4C:A4:2E:6E:04:72:13:84:27:71:A9:7B
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 01A0D0EDA6CD78D6EAD2DA1AE0B8F7F2EB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 01:00:30 +0000
Manifest this update: Thu 24 Sep 2026 01:00:30 +0000
Manifest next update: Fri 25 Sep 2026 01:00:30 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: vnXdaPLEE5hqLV1ux59OQM/Y8jg4z9gFTCC30e1xMe4=)
2: dDrbN1EnOvhkFc0_xZRFXvcNr40.roa (hash: 4F6zFoAlaZyrQw6r2Sapl4Rve7y38xHZ2sxhWgQcUxI=)
3: vqQIJ63USJ6tNbfIvkmeDNaWV-8.roa (hash: OsN69G3y8PdNZsFJ8bznX8F2lLtEi2mXTwt/+VGM68k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:a6:cd:78:d6:ea:d2:da:1a:e0:b8:f7:f2:eb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Sep 24 01:00:30 2026 GMT
Not After : Sep 25 01:00:30 2026 GMT
Subject: CN=acf035038372948f4ca42e6e047213842771a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:34:3e:33:4e:93:e6:e3:3a:7e:6a:7a:04:
0a:20:7b:cb:cb:42:cb:d7:06:f1:88:6c:fd:2c:95:
fc:cf:d7:72:99:54:a1:5a:02:92:6b:89:73:22:8c:
0b:2d:a0:60:95:4b:d2:10:e0:c4:f4:c6:d2:6b:67:
14:2a:db:11:58:0f:85:60:52:52:82:b7:b6:93:f3:
df:f7:e4:6e:36:10:f7:c6:11:ca:41:77:a0:01:fc:
a0:b0:1b:31:aa:1c:c1:2d:18:5c:5e:fb:14:b3:67:
90:a7:f3:67:f0:f4:69:04:33:b6:b9:ab:36:5d:cc:
c6:0e:69:19:1a:64:1c:c0:bb:b6:ad:d6:b8:94:a4:
1f:03:2c:78:43:85:2a:8e:e3:dc:61:1e:43:e8:d7:
7e:41:c8:5d:c0:c4:0c:6b:58:b3:cf:f2:64:01:ad:
8b:e7:50:be:3a:d4:0d:a9:eb:51:e2:4c:c4:18:10:
c3:51:c9:a1:b6:39:8c:ee:6a:42:1c:81:38:07:71:
5f:88:99:cf:7a:58:83:48:aa:c8:98:3e:ed:3c:5e:
77:8a:67:0f:2e:36:d2:b6:cf:17:0f:01:55:2b:e2:
47:77:fd:42:26:68:c4:c2:12:4b:f4:ef:90:35:64:
67:66:98:57:6f:68:87:a0:6e:81:15:69:66:c8:3c:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:35:03:83:72:94:8F:4C:A4:2E:6E:04:72:13:84:27:71:A9:7B
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8a:df:70:e4:c3:28:6b:09:98:22:2a:60:22:95:03:63:12:
25:51:35:9d:01:50:27:16:23:39:fa:a6:b5:84:70:8f:b2:04:
87:4d:95:fa:02:64:c2:a7:f2:83:d4:97:8e:61:1d:ec:86:f2:
81:ee:e6:f2:d6:84:a9:73:7a:f7:6b:56:52:8d:bb:42:7b:38:
43:bf:53:f0:ec:49:9d:26:dc:2d:6b:db:d2:17:c8:95:d8:34:
27:19:2d:c8:d2:11:ec:38:ca:2f:44:7a:8d:7b:f7:8a:e7:59:
f8:58:5c:0c:51:87:6b:04:cd:31:9c:c5:b1:08:d3:93:96:cb:
30:b6:5d:ce:9f:f3:18:6e:26:99:c8:8f:40:09:40:92:b8:72:
19:3e:8a:97:f7:b6:8f:5d:c0:55:c3:cc:dd:ef:0d:00:f5:f9:
5e:93:29:3a:c8:16:fb:d3:39:72:1c:84:1b:72:2d:54:83:bf:
95:89:b5:7d:d5:47:48:03:ba:22:5e:2b:67:0a:81:9e:2e:eb:
58:8a:d2:c1:64:26:3e:3b:1f:85:75:44:9a:05:40:37:4f:e1:
0f:1a:da:62:c8:c2:ff:90:8e:df:7e:cd:b5:52:aa:cd:c3:1b:
c7:67:63:1e:63:17:8d:ad:21:f3:f8:a7:72:e3:5e:83:6b:4e:
e9:a1:7b:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7abNeNbq0toa4Lj38us/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkM2ZmNzgzNjUzMGQxYzQ3NGY0ZDA4OGI2YjM2MjI0ZmJm
Njk4MmQwHhcNMjYwOTI0MDEwMDMwWhcNMjYwOTI1MDEwMDMwWjAzMTEwLwYDVQQD
EyhhY2YwMzUwMzgzNzI5NDhmNGNhNDJlNmUwNDcyMTM4NDI3NzFhOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e80PjNOk+bjOn5qegQKIHvLy0LL
1wbxiGz9LJX8z9dymVShWgKSa4lzIowLLaBglUvSEODE9MbSa2cUKtsRWA+FYFJS
gre2k/Pf9+RuNhD3xhHKQXegAfygsBsxqhzBLRhcXvsUs2eQp/Nn8PRpBDO2uas2
XczGDmkZGmQcwLu2rda4lKQfAyx4Q4UqjuPcYR5D6Nd+QchdwMQMa1izz/JkAa2L
51C+OtQNqetR4kzEGBDDUcmhtjmM7mpCHIE4B3FfiJnPeliDSKrImD7tPF53imcP
LjbSts8XDwFVK+JHd/1CJmjEwhJL9O+QNWRnZphXb2iHoG6BFWlmyDwNtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzwNQODcpSPTKQubgRyE4Qncal7MB8GA1UdIwQY
MBaAFO0/94NlMNHEdPTQiLazYiT79pgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDkt
ZjNlMjRlMDc1ZTM1LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YWRlOWItMzIxNi00ZmVmLTgwNDktZjNlMjRlMDc1ZTM1
LzEvN1RfM2cyVXcwY1IwOU5DSXRyTmlKUHYybUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYrfcOTD
KGsJmCIqYCKVA2MSJVE1nQFQJxYjOfqmtYRwj7IEh02V+gJkwqfyg9SXjmEd7Iby
ge7m8taEqXN692tWUo27Qns4Q79T8OxJnSbcLWvb0hfIldg0JxktyNIR7DjKL0R6
jXv3iudZ+FhcDFGHawTNMZzFsQjTk5bLMLZdzp/zGG4mmciPQAlAkrhyGT6Kl/e2
j13AVcPM3e8NAPX5XpMpOsgW+9M5chyEG3ItVIO/lYm1fdVHSAO6Il4rZwqBni7r
WIrSwWQmPjsfhXVEmgVAN0/hDxraYsjC/5CO337NtVKqzcMbx2djHmMXja0h8/in
cuNeg2tO6aF7Hg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:43:50 2026 by rpki-client