Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
File: CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft (raw, json)
Hash identifier: BNuOU0bzVRy33UuZyf5MX3u512SEM7O/lWe+FuytUg0=
Subject key identifier: 72:C2:2E:20:F3:E5:DA:5F:F6:CD:07:CF:65:BA:3B:53:7A:CA:E2:5D
Authority key identifier: 09:1C:04:01:E0:4C:6B:CB:BD:82:70:66:F6:FF:08:54:C7:97:0C:B6
Certificate issuer: /CN=091c0401e04c6bcbbd827066f6ff0854c7970cb6
Certificate serial: 01A0D501ECD3698ED86E2C24A9EDF1D95DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 20:01:08 +0000
Manifest this update: Thu 24 Sep 2026 20:01:08 +0000
Manifest next update: Fri 25 Sep 2026 20:01:08 +0000
Files and hashes: 1: CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl (hash: uDhEdVIU8yZqlqQFHaI/QqKBcNnJxpbmcFVyTz+aKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:ec:d3:69:8e:d8:6e:2c:24:a9:ed:f1:d9:5d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091c0401e04c6bcbbd827066f6ff0854c7970cb6
Validity
Not Before: Sep 24 20:01:08 2026 GMT
Not After : Sep 25 20:01:08 2026 GMT
Subject: CN=72c22e20f3e5da5ff6cd07cf65ba3b537acae25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:17:be:52:e9:28:bb:d5:7c:1c:9e:91:c5:
44:50:2b:78:a0:c8:df:e6:a7:73:74:87:93:ce:8c:
16:a0:c3:04:9f:16:e5:57:9f:f7:2d:d6:7f:fa:2b:
c1:f9:b2:d3:87:9b:d3:4e:32:98:33:c3:86:d6:3a:
62:59:12:ab:32:8f:ff:2b:b0:d7:43:62:5b:91:fa:
d0:ce:c8:67:c0:95:5e:33:dc:98:f4:1a:54:2a:b9:
98:52:53:dc:50:66:95:7c:18:f5:89:df:61:c1:ac:
6a:0a:06:49:31:2b:cb:52:0a:60:9a:1d:f9:59:11:
bc:88:c9:dc:4b:e7:f7:ec:2f:e2:dd:2a:38:75:00:
4d:81:bb:02:9a:94:3d:03:76:a3:8e:ad:d1:40:93:
f8:e5:70:a5:80:16:02:12:42:5d:c8:25:4e:08:2d:
8f:c8:e8:15:99:fd:e3:ba:eb:fe:56:e5:e2:e9:81:
a9:5a:36:b6:bc:5f:9f:9b:7a:5c:65:07:fc:32:95:
57:39:82:9f:55:ac:5c:71:c7:29:9d:c0:a1:cf:d1:
1e:9d:46:d3:42:c6:da:a3:98:fa:6c:5f:3b:26:00:
cd:92:d8:be:b6:42:68:81:ba:55:8d:38:73:ae:8a:
e3:36:8f:c3:25:27:63:b2:28:20:df:dc:cf:67:d4:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:2E:20:F3:E5:DA:5F:F6:CD:07:CF:65:BA:3B:53:7A:CA:E2:5D
X509v3 Authority Key Identifier:
keyid:09:1C:04:01:E0:4C:6B:CB:BD:82:70:66:F6:FF:08:54:C7:97:0C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRwEAeBMa8u9gnBm9v8IVMeXDLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bd9fd8-a346-459e-838a-b9122e521058/1/CRwEAeBMa8u9gnBm9v8IVMeXDLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7f:b9:9c:e4:42:3d:ca:36:4e:dd:33:d1:06:6c:52:24:5a:
5b:4e:65:f0:23:ea:17:3c:5d:b1:d8:40:3d:a9:16:13:bd:46:
57:ff:60:47:f0:99:9b:d6:0a:2c:70:36:e9:48:ce:fb:af:58:
a9:60:8b:b7:38:ed:9c:75:78:ec:5a:76:8c:3b:52:bd:bd:ca:
fb:46:44:6a:b5:e7:19:1e:e3:1a:b6:27:db:b0:8b:06:ae:fa:
3b:d8:9a:88:4f:4a:bf:ea:2a:5e:96:72:84:aa:3e:54:b8:80:
eb:e0:66:35:1f:12:66:36:b0:37:21:be:18:72:c1:aa:81:19:
35:e2:4a:77:03:45:dc:f2:71:33:bc:8c:0f:ca:3e:03:f3:37:
ae:0d:ce:9a:c4:04:b9:1b:9c:30:d4:dc:c8:09:19:68:f6:72:
de:f5:61:bf:e2:58:75:f4:f8:d4:31:74:59:cc:3c:8b:bd:94:
a1:d0:f9:8c:a4:58:09:74:ec:c1:48:7f:0c:38:f0:30:23:54:
58:d6:17:06:13:be:87:93:e2:c8:c0:15:64:f6:55:99:62:55:
7f:ed:c9:e8:e5:69:b1:aa:b2:dc:32:04:15:b6:8e:93:de:0b:
82:22:54:94:ab:f2:33:2a:30:1d:6a:6d:ac:71:3f:fb:17:b1:
5d:05:3e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAezTaY7Ybiwkqe3x2V2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWMwNDAxZTA0YzZiY2JiZDgyNzA2NmY2ZmYwODU0Yzc5
NzBjYjYwHhcNMjYwOTI0MjAwMTA4WhcNMjYwOTI1MjAwMTA4WjAzMTEwLwYDVQQD
Eyg3MmMyMmUyMGYzZTVkYTVmZjZjZDA3Y2Y2NWJhM2I1MzdhY2FlMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSkXvlLpKLvVfByekcVEUCt4oMjf
5qdzdIeTzowWoMMEnxblV5/3LdZ/+ivB+bLTh5vTTjKYM8OG1jpiWRKrMo//K7DX
Q2JbkfrQzshnwJVeM9yY9BpUKrmYUlPcUGaVfBj1id9hwaxqCgZJMSvLUgpgmh35
WRG8iMncS+f37C/i3So4dQBNgbsCmpQ9A3ajjq3RQJP45XClgBYCEkJdyCVOCC2P
yOgVmf3juuv+VuXi6YGpWja2vF+fm3pcZQf8MpVXOYKfVaxccccpncChz9EenUbT
Qsbao5j6bF87JgDNkti+tkJogbpVjThzrorjNo/DJSdjsigg39zPZ9SdrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLCLiDz5dpf9s0Hz2W6O1N6yuJdMB8GA1UdIwQY
MBaAFAkcBAHgTGvLvYJwZvb/CFTHlwy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1J3RUFlQk1hOHU5Z25CbTl2OElWTWVYRExZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iZDlmZDgtYTM0Ni00NTllLTgzOGEt
YjkxMjJlNTIxMDU4LzEvQ1J3RUFlQk1hOHU5Z25CbTl2OElWTWVYRExZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iZDlmZDgtYTM0Ni00NTllLTgzOGEtYjkxMjJlNTIxMDU4
LzEvQ1J3RUFlQk1hOHU5Z25CbTl2OElWTWVYRExZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3+5nORC
Pco2Tt0z0QZsUiRaW05l8CPqFzxdsdhAPakWE71GV/9gR/CZm9YKLHA26UjO+69Y
qWCLtzjtnHV47Fp2jDtSvb3K+0ZEarXnGR7jGrYn27CLBq76O9iaiE9Kv+oqXpZy
hKo+VLiA6+BmNR8SZjawNyG+GHLBqoEZNeJKdwNF3PJxM7yMD8o+A/M3rg3OmsQE
uRucMNTcyAkZaPZy3vVhv+JYdfT41DF0Wcw8i72UodD5jKRYCXTswUh/DDjwMCNU
WNYXBhO+h5PiyMAVZPZVmWJVf+3J6OVpsaqy3DIEFbaOk94LgiJUlKvyMyowHWpt
rHE/+xexXQU+3w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:03:17 2026 by rpki-client