Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: p0jlC9E6OhkmnViBbUT+mV8fVTv5evBPGa1FZfthbx0=
Subject key identifier: B5:84:8C:B6:AB:2F:53:FD:75:A4:80:6B:70:C3:A0:A1:75:BB:23:40
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 01A0C77CBA5322F7E704E619647618FF3D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 05:00:35 +0000
Manifest this update: Tue 22 Sep 2026 05:00:35 +0000
Manifest next update: Wed 23 Sep 2026 05:00:35 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: llym8wqhKLep8fcBF5mzfVsoMfs2911OHyeUlXvKIhE=)
2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:ba:53:22:f7:e7:04:e6:19:64:76:18:ff:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Sep 22 05:00:35 2026 GMT
Not After : Sep 23 05:00:35 2026 GMT
Subject: CN=b5848cb6ab2f53fd75a4806b70c3a0a175bb2340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:da:e5:ea:6f:e3:7c:f4:c1:d0:a2:2a:13:33:
bb:16:d5:bc:61:bb:4d:77:12:7f:45:5e:b6:4b:79:
9c:e7:91:0d:12:c2:57:86:fa:48:8c:90:dc:87:8f:
d7:f6:b4:4f:dd:b3:1e:72:43:f6:4c:0e:08:fa:f0:
d1:d7:d9:11:f9:58:29:e0:3f:ad:b2:0b:83:fe:0e:
f7:9c:9a:94:e2:eb:5e:1f:b7:4a:99:82:e9:21:28:
d9:92:c4:72:23:b6:73:b1:5a:42:d7:ec:54:30:98:
46:95:bb:0c:65:cd:86:85:51:c2:bf:19:65:7f:4d:
76:be:7b:76:6e:2e:6a:fe:a9:1b:6a:4d:7b:d9:6a:
2c:5e:10:4b:0b:db:24:7f:e3:f6:49:f5:93:d9:d8:
95:50:6b:f2:c7:f0:90:30:f9:4b:7f:c8:19:e5:0d:
8b:0d:f4:80:8b:06:6c:aa:e7:b2:64:91:31:b0:ce:
3f:0e:ad:86:39:bb:c8:7f:a3:6b:fa:0c:16:b5:8d:
b3:3c:b4:05:62:9d:21:86:dd:ab:0b:22:e8:99:8e:
82:1f:09:ae:26:58:59:7a:f9:f5:33:93:8a:c9:56:
df:28:fe:c1:d4:d3:91:b6:46:67:a7:ac:55:e5:4d:
66:e5:ae:c9:0f:82:b0:f8:6f:48:43:11:59:ae:ca:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:8C:B6:AB:2F:53:FD:75:A4:80:6B:70:C3:A0:A1:75:BB:23:40
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:af:24:b1:82:a9:61:9d:1c:35:a9:36:64:f0:20:db:12:8f:
16:83:f4:77:c2:74:5e:62:00:23:86:82:bb:55:0a:0e:8c:70:
99:77:b7:4b:42:bb:06:9e:bb:e3:5e:02:2d:de:b7:f5:29:6b:
81:83:95:07:57:2d:09:2f:6c:2c:c4:03:28:a6:4b:a0:14:6d:
b3:d4:58:3a:2b:aa:d3:a2:75:8f:4a:00:d3:1c:98:98:cd:f9:
9d:74:c9:d2:e1:98:aa:32:ca:62:fd:5e:90:99:09:62:57:52:
97:df:59:58:03:58:56:51:a8:2d:11:c0:0c:20:9f:9f:74:6a:
56:d9:ce:75:a6:b5:46:50:0a:d2:03:67:76:e1:15:3b:86:29:
54:c3:a0:2c:41:ba:63:6c:38:d1:e8:5d:71:7b:fe:12:66:0e:
b4:33:eb:c2:22:a9:23:9f:0e:81:db:71:16:0c:dd:44:a3:c8:
96:08:a8:a8:62:6d:4a:7a:63:cb:44:0c:69:bd:54:d0:a5:bb:
17:57:55:2e:60:83:e8:08:09:a0:4e:f2:9d:2e:3b:35:4c:69:
e0:75:e6:f1:17:4c:5f:d9:dc:be:4d:69:d0:f7:1e:a4:c0:ff:
39:0a:af:30:dc:c6:6e:7d:ff:a5:a9:99:f3:14:65:04:ef:40:
eb:3e:c3:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfLpTIvfnBOYZZHYY/z1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey
ODAzN2UwHhcNMjYwOTIyMDUwMDM1WhcNMjYwOTIzMDUwMDM1WjAzMTEwLwYDVQQD
EyhiNTg0OGNiNmFiMmY1M2ZkNzVhNDgwNmI3MGMzYTBhMTc1YmIyMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9rl6m/jfPTB0KIqEzO7FtW8YbtN
dxJ/RV62S3mc55ENEsJXhvpIjJDch4/X9rRP3bMeckP2TA4I+vDR19kR+Vgp4D+t
sguD/g73nJqU4uteH7dKmYLpISjZksRyI7ZzsVpC1+xUMJhGlbsMZc2GhVHCvxll
f012vnt2bi5q/qkbak172WosXhBLC9skf+P2SfWT2diVUGvyx/CQMPlLf8gZ5Q2L
DfSAiwZsqueyZJExsM4/Dq2GObvIf6Nr+gwWtY2zPLQFYp0hht2rCyLomY6CHwmu
JlhZevn1M5OKyVbfKP7B1NORtkZnp6xV5U1m5a7JD4Kw+G9IQxFZrsr6uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWEjLarL1P9daSAa3DDoKF1uyNAMB8GA1UdIwQY
MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt
MTBmY2VkNWZkNGVlLzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl
LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmK8ksYKp
YZ0cNak2ZPAg2xKPFoP0d8J0XmIAI4aCu1UKDoxwmXe3S0K7Bp67414CLd639Slr
gYOVB1ctCS9sLMQDKKZLoBRts9RYOiuq06J1j0oA0xyYmM35nXTJ0uGYqjLKYv1e
kJkJYldSl99ZWANYVlGoLRHADCCfn3RqVtnOdaa1RlAK0gNnduEVO4YpVMOgLEG6
Y2w40ehdcXv+EmYOtDPrwiKpI58OgdtxFgzdRKPIlgioqGJtSnpjy0QMab1U0KW7
F1dVLmCD6AgJoE7ynS47NUxp4HXm8RdMX9ncvk1p0PcepMD/OQqvMNzGbn3/pamZ
8xRlBO9A6z7DkA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:11:36 2026 by rpki-client