
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: VYuVI5/q8JH5j8DjWhJlIySA/2A6N7vkIZbsCMii61A=
Subject key identifier: 95:78:2E:B1:C0:40:EE:28:8B:5E:C5:AC:FD:1C:C2:65:13:06:82:E1
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 01A0C3A026E759BD86B5067248F7D5DC6F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 08F8
Signing time: Mon 21 Sep 2026 11:00:47 +0000
Manifest this update: Mon 21 Sep 2026 11:00:47 +0000
Manifest next update: Tue 22 Sep 2026 11:00:47 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: zpn9tI0k2Z1ufDE6svWlmdAXR/zriBEWVz3+jdy6VQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:26:e7:59:bd:86:b5:06:72:48:f7:d5:dc:6f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Sep 21 11:00:47 2026 GMT
Not After : Sep 22 11:00:47 2026 GMT
Subject: CN=95782eb1c040ee288b5ec5acfd1cc265130682e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:b9:e3:0f:a5:2a:24:86:4d:e6:a9:eb:4f:
b1:ab:17:4a:a6:ff:2e:71:67:7a:a3:eb:03:f3:5e:
42:73:86:16:85:a4:4b:6b:4e:63:f3:29:06:06:43:
cd:37:98:5d:e9:6f:b9:99:b3:6c:87:0a:f4:c8:d7:
7b:41:de:19:99:62:85:f6:75:15:cc:21:a5:7f:3c:
bd:da:64:0f:8f:61:be:0c:93:9b:69:49:61:70:61:
65:1b:a9:a7:13:93:40:35:51:7b:f4:f3:ee:24:6f:
38:16:2a:32:67:ff:9d:c7:32:0f:09:de:f0:92:63:
aa:fd:72:f1:24:7e:47:6b:db:9a:1e:68:6d:c6:a8:
5e:5c:86:2c:77:aa:4d:70:b6:82:68:4c:e8:94:d7:
a2:19:d8:aa:3a:a6:61:7c:93:ce:4b:58:1e:b9:6d:
10:0b:d5:c5:c9:42:b3:b1:94:e9:c0:2f:e3:01:34:
a7:f7:be:67:bc:b7:95:68:e5:c5:04:42:37:1d:a0:
ef:a8:15:7f:0c:11:fa:7d:1a:47:15:cd:1b:59:bb:
e4:3a:9c:8d:43:c3:83:2b:05:09:14:39:12:79:21:
c8:1d:2f:52:f4:07:95:58:9b:26:33:c6:d8:05:36:
6a:77:43:f1:1a:ff:cf:42:9a:c1:45:5c:e4:4d:db:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:2E:B1:C0:40:EE:28:8B:5E:C5:AC:FD:1C:C2:65:13:06:82:E1
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:a8:89:d5:f4:b2:62:63:7d:07:fd:fc:48:09:cf:a0:1c:
27:1a:0d:f2:f6:bc:ff:df:6a:74:68:cb:ed:f2:b7:03:e4:05:
5f:a5:6b:35:ff:d9:49:26:85:e9:13:3c:87:f7:ba:ad:11:39:
bf:53:d2:e1:6c:39:02:30:d1:ee:81:a9:06:8d:35:40:32:3a:
b3:1e:ef:c9:58:82:56:52:d9:0c:7c:d7:33:88:25:9b:bb:52:
de:38:e2:a7:d2:6d:3e:93:0e:4d:10:2d:7c:58:ca:ca:9b:c0:
38:35:11:21:c7:1c:5e:34:64:86:84:88:10:5a:51:9d:43:05:
5b:86:bb:32:02:a0:64:3b:d9:5b:7e:9b:99:e1:2e:4f:6a:29:
4a:68:8c:24:1c:6d:7b:50:6a:ab:bd:d2:c8:cb:61:43:b1:3a:
4c:38:11:da:56:00:2f:48:cf:c4:0a:62:a3:8e:ac:2e:56:d9:
c4:e2:ea:4b:f0:85:81:e0:d7:41:97:5a:ba:24:ee:40:5d:45:
f9:ff:e9:d3:65:e8:da:19:f3:81:93:17:00:f7:f4:8a:a5:ce:
cc:b6:8f:8a:71:7a:72:ef:1b:b0:00:59:0b:e7:ed:eb:c1:7f:
c1:e1:97:ca:3a:73:ef:76:90:fd:8d:5d:79:78:22:dc:b4:ab:
38:a9:fc:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoCbnWb2GtQZySPfV3G+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDBkYTFiNGUzMGZmYmIzMmE0ZTRhNGI3YWQ3MzFjMDMx
ZTQ0MjkwHhcNMjYwOTIxMTEwMDQ3WhcNMjYwOTIyMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg5NTc4MmViMWMwNDBlZTI4OGI1ZWM1YWNmZDFjYzI2NTEzMDY4MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ui54w+lKiSGTeap60+xqxdKpv8u
cWd6o+sD815Cc4YWhaRLa05j8ykGBkPNN5hd6W+5mbNshwr0yNd7Qd4ZmWKF9nUV
zCGlfzy92mQPj2G+DJObaUlhcGFlG6mnE5NANVF79PPuJG84FioyZ/+dxzIPCd7w
kmOq/XLxJH5Ha9uaHmhtxqheXIYsd6pNcLaCaEzolNeiGdiqOqZhfJPOS1geuW0Q
C9XFyUKzsZTpwC/jATSn975nvLeVaOXFBEI3HaDvqBV/DBH6fRpHFc0bWbvkOpyN
Q8ODKwUJFDkSeSHIHS9S9AeVWJsmM8bYBTZqd0PxGv/PQprBRVzkTds4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV4LrHAQO4oi17FrP0cwmUTBoLhMB8GA1UdIwQY
MBaAFO5A2htOMP+7MqTkpLetcxwDHkQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEt
M2Q2NTc4MTQwZmMxLzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzYyMjktNWVkNS00ZjJkLWIyMDEtM2Q2NTc4MTQwZmMx
LzEvN2tEYUcwNHdfN3N5cE9Ta3Q2MXpIQU1lUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSeoidX0
smJjfQf9/EgJz6AcJxoN8va8/99qdGjL7fK3A+QFX6VrNf/ZSSaF6RM8h/e6rRE5
v1PS4Ww5AjDR7oGpBo01QDI6sx7vyViCVlLZDHzXM4glm7tS3jjip9JtPpMOTRAt
fFjKypvAODURIcccXjRkhoSIEFpRnUMFW4a7MgKgZDvZW36bmeEuT2opSmiMJBxt
e1Bqq73SyMthQ7E6TDgR2lYAL0jPxApio46sLlbZxOLqS/CFgeDXQZdauiTuQF1F
+f/p02Xo2hnzgZMXAPf0iqXOzLaPinF6cu8bsABZC+ft68F/weGXyjpz73aQ/Y1d
eXgi3LSrOKn8rw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:31:48 2026 by rpki-client