
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier: mIIyviSEt8xMUkEM9HHTLI8NqmhbvUqFG0+zk6HQEfE=
Subject key identifier: AC:48:7E:13:B4:39:85:8F:B7:98:6F:F5:DB:54:B9:CC:3C:78:E4:BC
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer: /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial: 01A0D382BC2DA0B453D3CE7908BB6BE5430E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number: 03F3
Signing time: Thu 24 Sep 2026 13:02:35 +0000
Manifest this update: Thu 24 Sep 2026 13:02:35 +0000
Manifest next update: Fri 25 Sep 2026 13:02:35 +0000
Files and hashes: 1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: RHFtCU//I7To9o7ga56KTACTim6jGO056Kfp8yhswyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:bc:2d:a0:b4:53:d3:ce:79:08:bb:6b:e5:43:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda8529160585381f07801656ffc4c551298449f
Validity
Not Before: Sep 24 13:02:35 2026 GMT
Not After : Sep 25 13:02:35 2026 GMT
Subject: CN=ac487e13b439858fb7986ff5db54b9cc3c78e4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:44:f2:74:5a:3a:d1:ec:76:7f:13:93:cf:
08:56:cc:c8:c8:6d:81:02:ea:b5:67:2f:0f:6a:bb:
c3:a3:69:a0:6c:03:bb:00:69:56:ad:1d:37:67:d2:
37:3c:2f:44:d1:6a:b5:da:58:40:c8:bb:7f:3e:6a:
6d:49:c6:99:40:15:08:b6:e3:0e:b1:d0:1a:ca:75:
c9:8d:43:ce:43:d4:e3:01:d4:9e:e6:74:33:5d:46:
2b:b3:83:f4:d3:ec:fe:ea:5f:69:49:d1:c0:bf:b7:
98:3f:02:02:49:77:87:7f:36:a0:3f:a3:16:67:df:
7b:67:fc:c9:6e:48:11:9d:2e:06:33:30:ee:fe:da:
a7:4f:68:a4:35:27:70:cc:6a:a8:91:9e:73:86:4a:
54:00:32:cf:94:08:48:9e:a9:ee:23:64:eb:2e:12:
51:02:4b:6a:02:28:d8:91:6e:67:08:33:a2:af:ec:
2d:01:9a:14:26:e4:29:c4:61:da:37:4e:1c:22:2b:
70:a5:7b:ff:87:12:36:16:7e:ef:6d:23:3a:27:e3:
e0:32:03:3c:8d:eb:b4:2c:11:e7:1c:b6:d3:83:78:
48:b2:a6:cf:a4:01:1b:e3:7d:17:48:e6:88:9b:b2:
87:70:96:a1:f9:4e:a9:b8:00:2d:68:ca:94:eb:23:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:7E:13:B4:39:85:8F:B7:98:6F:F5:DB:54:B9:CC:3C:78:E4:BC
X509v3 Authority Key Identifier:
keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3d:b0:5a:8b:70:b9:11:92:2b:10:e8:86:1c:ce:94:b9:5e:
3a:a0:a7:04:21:de:9e:6a:0b:28:87:ca:70:c7:c6:90:72:47:
e5:ea:4a:3c:99:ef:8f:8b:80:07:8b:61:32:a6:b1:b5:88:57:
7a:d0:fe:ff:e2:37:7e:c2:ac:d7:59:d4:c2:cd:f2:1c:5b:8d:
5d:58:1f:b0:19:fe:b2:11:6b:08:c1:74:22:c9:47:ff:7c:f9:
57:66:b3:0c:3c:8c:11:8c:e7:bf:3d:0b:b2:dd:07:ca:17:e0:
96:84:ce:e2:b5:a0:75:ca:96:ee:dc:3c:2d:cb:82:e5:5c:43:
6f:99:3a:52:55:9c:5d:fe:d1:8e:63:b7:b5:88:75:9d:22:4a:
d1:0f:f5:d4:8e:43:88:bc:ab:52:04:ef:8a:1d:ce:1f:dd:0c:
d7:e3:63:4d:86:2e:bd:89:f9:42:28:e8:ec:1a:5e:e7:f5:66:
55:8c:73:1f:72:db:76:74:27:a6:2a:d4:49:94:d7:55:4f:e4:
5c:aa:a8:64:af:a7:ba:9a:8f:fc:8b:25:cb:8d:8b:0b:ab:5a:
ca:82:65:e5:d3:7d:8f:97:59:45:53:22:11:b5:cc:5d:95:1c:
90:1b:ef:98:02:e6:91:7e:c0:cf:00:a2:b7:06:73:4f:be:b8:
39:6e:84:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTgrwtoLRT0855CLtr5UMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYTg1MjkxNjA1ODUzODFmMDc4MDE2NTZmZmM0YzU1MTI5
ODQ0OWYwHhcNMjYwOTI0MTMwMjM1WhcNMjYwOTI1MTMwMjM1WjAzMTEwLwYDVQQD
EyhhYzQ4N2UxM2I0Mzk4NThmYjc5ODZmZjVkYjU0YjljYzNjNzhlNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f5E8nRaOtHsdn8Tk88IVszIyG2B
Auq1Zy8ParvDo2mgbAO7AGlWrR03Z9I3PC9E0Wq12lhAyLt/PmptScaZQBUItuMO
sdAaynXJjUPOQ9TjAdSe5nQzXUYrs4P00+z+6l9pSdHAv7eYPwICSXeHfzagP6MW
Z997Z/zJbkgRnS4GMzDu/tqnT2ikNSdwzGqokZ5zhkpUADLPlAhInqnuI2TrLhJR
AktqAijYkW5nCDOir+wtAZoUJuQpxGHaN04cIitwpXv/hxI2Fn7vbSM6J+PgMgM8
jeu0LBHnHLbTg3hIsqbPpAEb430XSOaIm7KHcJah+U6puAAtaMqU6yO1/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxIfhO0OYWPt5hv9dtUucw8eOS8MB8GA1UdIwQY
MBaAFO2oUpFgWFOB8HgBZW/8TFUSmESfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FoU2tXQllVNEh3ZUFGbGJfeE1WUktZUko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zZWQ4OWYtZTY0NS00ZjNjLWJhMmMt
Nzg5ZmQ0YmE4YzIyLzEvN2FoU2tXQllVNEh3ZUFGbGJfeE1WUktZUko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zZWQ4OWYtZTY0NS00ZjNjLWJhMmMtNzg5ZmQ0YmE4YzIy
LzEvN2FoU2tXQllVNEh3ZUFGbGJfeE1WUktZUko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD2wWotw
uRGSKxDohhzOlLleOqCnBCHenmoLKIfKcMfGkHJH5epKPJnvj4uAB4thMqaxtYhX
etD+/+I3fsKs11nUws3yHFuNXVgfsBn+shFrCMF0IslH/3z5V2azDDyMEYznvz0L
st0HyhfgloTO4rWgdcqW7tw8LcuC5VxDb5k6UlWcXf7RjmO3tYh1nSJK0Q/11I5D
iLyrUgTvih3OH90M1+NjTYYuvYn5Qijo7Bpe5/VmVYxzH3LbdnQnpirUSZTXVU/k
XKqoZK+nupqP/Isly42LC6tayoJl5dN9j5dZRVMiEbXMXZUckBvvmALmkX7AzwCi
twZzT764OW6EUg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:24 2026 by rpki-client