Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: XSiQft49C+YrGD1cWk2Jrzh/S2vDpBozKlbDZ3FiJrM=
Subject key identifier: 8C:A1:D5:68:FC:F9:FC:AC:BF:48:5F:B8:68:2A:42:38:66:EE:B0:B7
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 01A0D64BACDBB336A78256DEF28737D57408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 02:01:18 +0000
Manifest this update: Fri 25 Sep 2026 02:01:18 +0000
Manifest next update: Sat 26 Sep 2026 02:01:18 +0000
Files and hashes: 1: 0HZFumgyvQaDDTRTrqWFDMHfuo8.roa (hash: 99s+y069IP+8cLI0Fct7Tuh7Nr9yOVSbyI/w/nS1ohM=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: bCZAoj5uDeixLzG7wl9i6vEPqPl+r7lUnqGRxfV/UPI=)
3: JfyoN48fk_c9ic3qKJlpVrYlm4U.roa (hash: YO7Xai4MFWdK4ki2bUDwA4JpC3JpucBc+HE0rjiH0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:ac:db:b3:36:a7:82:56:de:f2:87:37:d5:74:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Sep 25 02:01:18 2026 GMT
Not After : Sep 26 02:01:18 2026 GMT
Subject: CN=8ca1d568fcf9fcacbf485fb8682a423866eeb0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:11:79:25:cf:4b:93:ff:6d:74:a1:d4:e2:
17:98:ca:ec:da:d8:c6:da:ff:e1:3e:a9:7e:cb:28:
6e:57:02:6e:59:0a:99:70:07:20:cd:cd:2a:87:a0:
ba:d2:17:4a:30:5f:27:76:e3:87:3d:e8:aa:0f:99:
b1:16:e5:e0:6f:db:7f:f0:a2:dd:ad:0b:0c:18:20:
a5:0e:e8:77:3d:e5:43:58:b0:9e:c8:40:1e:bb:be:
96:4e:14:2d:8d:14:11:75:0b:bb:e8:5c:22:28:6f:
e7:f1:50:73:d7:ea:05:7e:aa:d6:42:23:c4:9b:34:
51:1e:00:7c:29:aa:a0:b1:ab:3b:0e:30:70:a7:a3:
cf:c3:af:62:d9:be:71:fb:8b:a9:ba:68:f8:99:4b:
fe:50:f3:7b:d6:07:ed:63:f5:53:57:82:a9:08:82:
96:11:42:05:f5:c9:5b:f0:ad:f8:35:b6:40:06:b8:
53:bd:a6:8c:29:59:d0:82:aa:6b:0d:0c:2d:76:c4:
9c:05:a4:84:00:37:83:8c:f3:c3:e8:ff:af:f5:db:
63:0e:b3:7a:26:5a:6b:eb:b3:e9:c3:0b:f8:d8:11:
06:ce:4c:51:4b:04:7c:ec:aa:b3:c7:51:42:14:06:
70:f4:bc:03:9d:89:fa:c7:d8:6a:b2:27:1f:1c:8b:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A1:D5:68:FC:F9:FC:AC:BF:48:5F:B8:68:2A:42:38:66:EE:B0:B7
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:97:00:e9:50:79:66:31:4e:82:b2:23:5c:c8:52:14:47:58:
15:e1:96:aa:c5:2d:21:20:c3:6b:14:fe:fd:be:45:91:04:0d:
b0:8c:b5:e8:85:3f:86:fb:65:be:92:cd:d4:1b:38:af:51:7f:
02:f6:74:e5:a7:04:ba:ed:ff:43:2a:cd:df:3a:9b:b8:a5:65:
82:5f:f4:82:a4:37:bd:32:fd:1a:45:1e:83:6d:b7:82:a8:03:
01:f5:56:03:6c:ce:a3:55:aa:35:46:22:04:7d:e5:75:dd:5e:
2b:1a:2c:ef:42:25:e4:4e:c6:88:c1:07:b1:a3:2e:84:e8:3b:
39:46:ad:c1:f6:9f:50:71:43:3a:72:0f:38:e8:44:fa:f3:62:
7c:b6:bd:ef:dd:e4:8d:68:55:84:29:4b:53:fd:da:56:d9:23:
55:03:0c:a7:dc:3a:23:5e:29:7c:f4:cc:1b:b9:e9:15:53:17:
b1:d6:ff:68:6f:0f:77:6a:58:08:ca:b6:7a:82:e4:59:c2:d6:
5c:5c:40:56:a6:96:08:d2:f6:80:db:f7:c9:48:b4:94:12:77:
11:59:be:dd:e7:2e:a5:1a:89:bb:b3:77:f1:90:b5:28:62:3d:
a8:c4:d8:ee:be:5d:b3:51:9a:70:49:e3:bb:cc:b9:d4:db:7e:
26:74:8b:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS6zbszanglbe8oc31XQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzIyMTM4YzBhZjgxYzVjYmY0M2E0ZjhkZGQ3YzhkZTEz
YzcyMzAwHhcNMjYwOTI1MDIwMTE4WhcNMjYwOTI2MDIwMTE4WjAzMTEwLwYDVQQD
Eyg4Y2ExZDU2OGZjZjlmY2FjYmY0ODVmYjg2ODJhNDIzODY2ZWViMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS0ReSXPS5P/bXSh1OIXmMrs2tjG
2v/hPql+yyhuVwJuWQqZcAcgzc0qh6C60hdKMF8nduOHPeiqD5mxFuXgb9t/8KLd
rQsMGCClDuh3PeVDWLCeyEAeu76WThQtjRQRdQu76FwiKG/n8VBz1+oFfqrWQiPE
mzRRHgB8Kaqgsas7DjBwp6PPw69i2b5x+4upumj4mUv+UPN71gftY/VTV4KpCIKW
EUIF9clb8K34NbZABrhTvaaMKVnQgqprDQwtdsScBaSEADeDjPPD6P+v9dtjDrN6
Jlpr67Ppwwv42BEGzkxRSwR87Kqzx1FCFAZw9LwDnYn6x9hqsicfHIs/uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyh1Wj8+fysv0hfuGgqQjhm7rC3MB8GA1UdIwQY
MBaAFO3CITjAr4HFy/Q6T43dfI3hPHIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYt
NTUzOGRjMGJiMDk5LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82NDlhZWItNzhkZC00MjJmLTg5YzYtNTUzOGRjMGJiMDk5
LzEvN2NJaE9NQ3ZnY1hMOURwUGpkMThqZUU4Y2pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpcA6VB5
ZjFOgrIjXMhSFEdYFeGWqsUtISDDaxT+/b5FkQQNsIy16IU/hvtlvpLN1Bs4r1F/
AvZ05acEuu3/QyrN3zqbuKVlgl/0gqQ3vTL9GkUeg223gqgDAfVWA2zOo1WqNUYi
BH3ldd1eKxos70Il5E7GiMEHsaMuhOg7OUatwfafUHFDOnIPOOhE+vNifLa9793k
jWhVhClLU/3aVtkjVQMMp9w6I14pfPTMG7npFVMXsdb/aG8Pd2pYCMq2eoLkWcLW
XFxAVqaWCNL2gNv3yUi0lBJ3EVm+3ecupRqJu7N38ZC1KGI9qMTY7r5ds1GacEnj
u8y51Nt+JnSLpA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:11:33 2026 by rpki-client