Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: U8e5Mykpmm+otDUoL5RRLzSMqib+YNggh3DBw/lg53U=
Subject key identifier: 25:31:0B:E3:03:A6:8F:B0:84:E7:F1:36:C5:F2:75:F4:6B:DF:75:4D
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 01A0D5DEA2FD03882E55FFCC9B933175847C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 17B9
Signing time: Fri 25 Sep 2026 00:02:12 +0000
Manifest this update: Fri 25 Sep 2026 00:02:12 +0000
Manifest next update: Sat 26 Sep 2026 00:02:12 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: aKyMakrG3TAtlEP8qqidOqQxqsUTjOlVlEcxjw6/dL0=)
2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:a2:fd:03:88:2e:55:ff:cc:9b:93:31:75:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Sep 25 00:02:12 2026 GMT
Not After : Sep 26 00:02:12 2026 GMT
Subject: CN=25310be303a68fb084e7f136c5f275f46bdf754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:cb:59:72:de:2b:ec:3d:10:54:32:28:19:
d7:6a:70:a1:2f:ac:15:dc:1f:02:c5:bc:b6:c2:f6:
a7:42:58:c8:9a:c8:1f:13:42:75:30:df:f6:dc:8f:
94:24:8a:28:45:57:91:b5:05:45:26:dc:8b:7a:92:
72:95:b3:0b:dc:c3:9d:3f:13:2c:6d:1d:f5:52:80:
97:ac:44:76:80:6d:b5:7d:cd:0a:06:b3:ed:fa:96:
95:dd:45:26:7e:6f:f6:79:02:d6:52:c3:2a:ad:8a:
77:bd:91:2f:07:1e:10:ae:e0:80:2d:c2:34:c4:f3:
3c:61:72:48:fe:ed:24:3d:67:a7:0d:e6:95:1a:cf:
25:50:e3:0b:d6:8f:33:4c:34:d6:75:0c:37:84:0c:
04:60:de:eb:7a:be:15:fe:19:8b:01:94:04:f7:e3:
5f:d6:08:aa:1d:a5:82:12:ea:85:c9:a8:7a:1a:4d:
60:39:47:f8:e3:72:87:ea:65:ec:98:79:a9:0c:e6:
eb:ca:bc:7e:fe:a2:97:10:2c:e5:59:11:80:99:38:
98:f1:a3:d3:f8:06:21:17:dc:a2:bf:7b:aa:f8:e3:
98:14:b2:9a:59:61:6a:fd:8a:c9:3b:cf:bd:c4:ed:
37:5b:50:47:6a:7b:11:ea:98:79:1d:a9:3b:21:d8:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:0B:E3:03:A6:8F:B0:84:E7:F1:36:C5:F2:75:F4:6B:DF:75:4D
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:0f:69:a4:0e:73:1a:11:e2:33:1c:b8:04:02:57:73:1f:25:
78:7f:68:ea:01:5e:fd:aa:ae:0b:0b:00:61:3e:1c:7c:5f:77:
bd:91:3a:19:4d:3c:32:8a:ea:f4:86:b1:25:69:f7:ca:36:7d:
45:13:c5:ad:62:4b:03:6a:a1:be:ea:c4:27:25:fe:89:f6:b7:
5a:e9:f4:45:49:6f:f4:73:83:e7:b0:4c:bb:0e:1e:a8:ec:b0:
4c:8e:c6:aa:ac:fe:ad:4d:61:cc:6e:1e:de:96:07:02:0f:48:
eb:d5:e2:d9:36:69:5f:3f:89:b3:1d:ab:03:ad:15:a5:86:af:
a5:56:d4:bc:ac:81:05:f1:53:be:17:c8:0f:3b:a2:6a:45:8f:
7e:ca:74:dc:dd:c0:34:52:75:b6:94:e6:7e:a9:74:69:0f:0a:
fe:9e:d5:0e:2b:2e:61:fe:8a:0d:38:b7:55:4c:85:c0:f4:69:
bd:11:d0:ca:0f:7c:f6:55:03:19:82:33:07:ae:73:1c:b8:b6:
f7:89:b4:36:64:71:bd:be:d9:f3:06:51:b5:70:68:a6:de:97:
c2:0f:07:d9:40:8c:7b:43:f1:bd:ed:c0:06:ab:c7:b5:34:aa:
b5:f8:4c:71:74:74:55:91:a2:34:f8:b6:0e:58:11:92:f7:23:
b7:3e:57:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3qL9A4guVf/Mm5MxdYR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzU3NjAzYjE3MWFmMzRlMWM2MjMxZTVlODJlNzdmMmQ1
ODlkYjkwHhcNMjYwOTI1MDAwMjEyWhcNMjYwOTI2MDAwMjEyWjAzMTEwLwYDVQQD
EygyNTMxMGJlMzAzYTY4ZmIwODRlN2YxMzZjNWYyNzVmNDZiZGY3NTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4jLWXLeK+w9EFQyKBnXanChL6wV
3B8Cxby2wvanQljImsgfE0J1MN/23I+UJIooRVeRtQVFJtyLepJylbML3MOdPxMs
bR31UoCXrER2gG21fc0KBrPt+paV3UUmfm/2eQLWUsMqrYp3vZEvBx4QruCALcI0
xPM8YXJI/u0kPWenDeaVGs8lUOML1o8zTDTWdQw3hAwEYN7rer4V/hmLAZQE9+Nf
1giqHaWCEuqFyah6Gk1gOUf443KH6mXsmHmpDObryrx+/qKXECzlWRGAmTiY8aPT
+AYhF9yiv3uq+OOYFLKaWWFq/YrJO8+9xO03W1BHansR6ph5Hak7IdhQgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUxC+MDpo+whOfxNsXydfRr33VNMB8GA1UdIwQY
MBaAFOx1dgOxca804cYjHl6C538tWJ25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMt
ZDMwY2VmOTExNGI3LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84YzM3ZjAtYWYzYS00MDI0LTgwNDMtZDMwY2VmOTExNGI3
LzEvN0hWMkE3RnhyelRoeGlNZVhvTG5meTFZbmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0w9ppA5z
GhHiMxy4BAJXcx8leH9o6gFe/aquCwsAYT4cfF93vZE6GU08Morq9IaxJWn3yjZ9
RRPFrWJLA2qhvurEJyX+ifa3Wun0RUlv9HOD57BMuw4eqOywTI7Gqqz+rU1hzG4e
3pYHAg9I69Xi2TZpXz+Jsx2rA60VpYavpVbUvKyBBfFTvhfIDzuiakWPfsp03N3A
NFJ1tpTmfql0aQ8K/p7VDisuYf6KDTi3VUyFwPRpvRHQyg989lUDGYIzB65zHLi2
94m0NmRxvb7Z8wZRtXBopt6Xwg8H2UCMe0Pxve3ABqvHtTSqtfhMcXR0VZGiNPi2
DlgRkvcjtz5Xiw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:26 2026 by rpki-client