Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
File: s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft (raw, json)
Hash identifier: 9eueftCLpyX12+ag0EWc4XQqjbqQ+YYMqh2TLO0KqXM=
Subject key identifier: 42:F7:32:D7:CA:43:B6:12:EE:7E:69:4E:C9:CF:6B:10:78:3D:1F:E2
Authority key identifier: B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
Certificate issuer: /CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Certificate serial: 01A0C85971B4B9C2CD3F145584BD1C5A54C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:39 +0000
Manifest this update: Tue 22 Sep 2026 09:01:39 +0000
Manifest next update: Wed 23 Sep 2026 09:01:39 +0000
Files and hashes: 1: AlGAx9Fl6hfEZYbR82KN63CXdsA.asa (hash: dmP6VBHZrQsaHkli3FETSb10i/VF3suE+WLsSAtxktk=)
2: CJWICYUF8PQfPfv_l-YsbRABMGA.roa (hash: ckHVpf/nWip1+cSgGyvEj2vXDYp/OYjzyt+VU9SRBuw=)
3: s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl (hash: RydyTKXycnmTYWCf0COo192Y3CygsiYswKtpuZucWic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:71:b4:b9:c2:cd:3f:14:55:84:bd:1c:5a:54:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Validity
Not Before: Sep 22 09:01:39 2026 GMT
Not After : Sep 23 09:01:39 2026 GMT
Subject: CN=42f732d7ca43b612ee7e694ec9cf6b10783d1fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:8d:49:7d:b6:5e:b5:2a:0c:92:f5:62:22:
1f:c8:77:20:77:4f:e5:95:be:c6:56:8b:a1:05:12:
39:ed:24:09:21:ed:47:7e:ed:89:b2:31:7d:0d:37:
57:c9:2f:3b:0c:01:09:81:75:27:ee:25:7a:d4:f5:
22:ec:68:2c:b6:88:85:c1:15:ed:55:a8:04:58:45:
72:7b:7e:04:2b:ae:96:d1:e3:07:cb:cf:a4:25:6c:
5e:ee:c7:3a:b1:7f:c3:59:7e:2d:71:2c:3a:b4:e4:
99:e6:38:6f:a2:03:b4:eb:d2:d1:e5:f7:b6:48:43:
15:33:80:ae:0c:76:fe:bf:6b:16:77:a2:a9:cb:9c:
b8:f5:0a:9b:1a:5a:d0:82:f4:0b:06:98:ba:00:88:
86:1a:9a:95:79:3d:96:19:b9:5d:4a:19:70:dc:6a:
14:40:1e:28:4e:ed:fa:3e:27:4c:df:a0:f5:e5:07:
4d:a8:7d:11:81:12:77:bf:8b:22:47:cd:6e:4c:74:
67:7a:54:2e:8d:38:a4:a6:b2:bf:49:64:87:5e:4c:
ee:b6:0e:ad:d1:27:91:d4:0e:1b:a5:60:5e:e2:0c:
08:b9:ea:a5:17:91:e5:79:27:2c:21:c2:f4:c9:e1:
d9:07:63:bc:5b:9d:e6:75:a1:7f:eb:4b:ec:dc:95:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:32:D7:CA:43:B6:12:EE:7E:69:4E:C9:CF:6B:10:78:3D:1F:E2
X509v3 Authority Key Identifier:
keyid:B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e9:6a:0b:21:45:be:fb:88:3a:99:e3:71:d2:0b:26:39:ec:
b4:24:77:d2:af:84:c4:35:94:0d:1c:ba:83:e7:ae:12:ad:b1:
22:dc:13:75:f9:cb:eb:6a:e1:7e:65:b5:c8:2f:09:c8:b5:0e:
e6:22:c4:02:56:53:96:32:f9:97:0e:c9:d8:a0:4a:97:30:92:
8b:f9:56:8e:f5:e3:0f:0e:e7:62:a9:fa:98:42:85:da:fd:c2:
22:b6:25:d9:1e:9e:60:87:2d:b7:00:1f:08:47:b9:01:a5:88:
f4:79:1e:d6:92:35:ff:cf:b8:73:59:19:21:a2:1c:41:16:68:
d6:94:81:40:d8:10:f9:e2:d8:cc:c3:dd:f5:a7:52:f4:dc:23:
42:be:22:d7:d0:e3:1e:3e:8a:2e:12:33:1d:a0:e6:66:0b:e5:
bf:65:e2:c2:f2:bc:97:0e:69:24:57:f1:16:93:be:b2:8f:82:
b6:f5:f2:e5:03:a1:59:c2:02:02:b0:4e:28:ef:ba:14:82:52:
86:29:1a:42:4c:a7:c9:c5:25:72:15:e1:72:e5:51:6d:a3:75:
fb:5a:ac:ec:73:58:12:b4:27:54:aa:af:b7:41:d5:10:cf:74:
63:48:7a:07:00:41:ed:f8:61:83:dc:3d:8f:34:5d:be:6e:52:
aa:98:04:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWXG0ucLNPxRVhL0cWlTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVhNzU0NGZiYjk4Nzk4MGEzZmYxYzcxZWJmM2ZiMWNm
NmFjOWUwHhcNMjYwOTIyMDkwMTM5WhcNMjYwOTIzMDkwMTM5WjAzMTEwLwYDVQQD
Eyg0MmY3MzJkN2NhNDNiNjEyZWU3ZTY5NGVjOWNmNmIxMDc4M2QxZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VmNSX22XrUqDJL1YiIfyHcgd0/l
lb7GVouhBRI57SQJIe1Hfu2JsjF9DTdXyS87DAEJgXUn7iV61PUi7GgstoiFwRXt
VagEWEVye34EK66W0eMHy8+kJWxe7sc6sX/DWX4tcSw6tOSZ5jhvogO069LR5fe2
SEMVM4CuDHb+v2sWd6Kpy5y49QqbGlrQgvQLBpi6AIiGGpqVeT2WGbldShlw3GoU
QB4oTu36PidM36D15QdNqH0RgRJ3v4siR81uTHRnelQujTikprK/SWSHXkzutg6t
0SeR1A4bpWBe4gwIueqlF5HleScsIcL0yeHZB2O8W53mdaF/60vs3JVsxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL3MtfKQ7YS7n5pTsnPaxB4PR/iMB8GA1UdIwQY
MBaAFLO1p1RPu5h5gKP/HHHr8/sc9qyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdXblZFLTdtSG1Bb184Y2NldnoteHoycko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQt
ZWY4OGIyY2ZlODcyLzEvczdXblZFLTdtSG1Bb184Y2NldnoteHoycko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQtZWY4OGIyY2ZlODcy
LzEvczdXblZFLTdtSG1Bb184Y2NldnoteHoycko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+lqCyFF
vvuIOpnjcdILJjnstCR30q+ExDWUDRy6g+euEq2xItwTdfnL62rhfmW1yC8JyLUO
5iLEAlZTljL5lw7J2KBKlzCSi/lWjvXjDw7nYqn6mEKF2v3CIrYl2R6eYIcttwAf
CEe5AaWI9Hke1pI1/8+4c1kZIaIcQRZo1pSBQNgQ+eLYzMPd9adS9NwjQr4i19Dj
Hj6KLhIzHaDmZgvlv2XiwvK8lw5pJFfxFpO+so+CtvXy5QOhWcICArBOKO+6FIJS
hikaQkynycUlchXhcuVRbaN1+1qs7HNYErQnVKqvt0HVEM90Y0h6BwBB7fhhg9w9
jzRdvm5SqpgELw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:49:34 2026 by rpki-client