Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier: 3f4gGEdxPwVWIPhYqHRaS8SlBfaQdW2dqweWA22CuKE=
Subject key identifier: 28:FE:64:D2:C1:5C:79:8E:43:54:DD:FA:5D:FA:34:18:08:3C:B4:8E
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial: 01A0C10D0F35CF161A4137A827F6B752ACFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number: 0EDC
Signing time: Sun 20 Sep 2026 23:00:53 +0000
Manifest this update: Sun 20 Sep 2026 23:00:53 +0000
Manifest next update: Mon 21 Sep 2026 23:00:53 +0000
Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: ImGdIzryZ3EjsU1QJRIY2jbqzpEqgl0+r/O47rbJ3Tw=)
2: FPqdZZMf-fAPrlSDgNZhOHhHZxU.roa (hash: 3JadQ2sVOsTDIpy9yP5IPOoHewm11RGCjoRS/5qYd6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:0f:35:cf:16:1a:41:37:a8:27:f6:b7:52:ac:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Validity
Not Before: Sep 20 23:00:53 2026 GMT
Not After : Sep 21 23:00:53 2026 GMT
Subject: CN=28fe64d2c15c798e4354ddfa5dfa3418083cb48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:82:88:e1:19:88:d5:b3:5c:43:cc:fe:cf:
92:c0:b5:ac:88:d2:9b:a1:61:fc:89:55:50:41:c6:
28:14:8e:d0:6b:43:fb:82:43:5e:b8:3f:77:e9:a7:
88:55:9b:be:f5:36:c3:70:4d:83:9c:02:54:d4:d7:
6e:f8:9f:2c:b4:47:49:eb:d3:ff:92:df:1e:92:16:
37:6f:e9:8f:aa:74:5d:d8:8f:c1:0b:d3:76:8e:e7:
9b:c8:81:5b:53:b6:46:84:af:0f:a0:32:ed:f5:5a:
45:eb:4d:af:aa:39:1f:d9:2b:af:12:a5:eb:88:30:
ed:d1:8a:ba:a8:83:1a:de:ef:35:b1:b4:58:b7:16:
e4:69:d0:9f:25:b2:c6:1d:6c:db:9e:64:64:93:4f:
af:17:76:dd:70:92:58:d1:32:7e:34:c6:df:dc:d0:
fa:d1:dc:ee:08:22:ca:bf:a7:9e:34:71:18:e3:d0:
c7:cf:ca:76:1c:33:09:6b:fa:3d:b3:4c:51:d8:e0:
e1:22:b7:4b:b3:71:52:e4:1b:7c:e5:d5:f0:d7:d0:
23:9c:fd:28:21:31:1a:31:0e:6e:12:68:57:a7:e8:
95:2a:8f:b9:8b:d8:c5:e1:03:39:ff:73:ff:7b:d6:
87:2a:27:6b:0d:48:be:06:d8:99:51:9d:52:ea:a5:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:64:D2:C1:5C:79:8E:43:54:DD:FA:5D:FA:34:18:08:3C:B4:8E
X509v3 Authority Key Identifier:
keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:6f:7b:eb:96:f1:86:ca:c5:80:29:fb:5b:2e:d8:06:20:
a7:2a:b1:6a:d6:0f:4d:04:cc:5e:1e:c0:68:74:ac:bf:2b:74:
f9:32:fb:d7:54:07:42:14:62:4d:ce:e7:0b:d8:92:e2:39:6f:
fd:10:95:18:12:db:2b:e7:d3:24:1d:67:48:63:7f:c6:68:4e:
9d:45:f3:a9:a4:3c:82:dd:57:6f:c1:b2:25:02:59:63:fd:8b:
8f:23:88:c4:8d:29:e6:8c:23:99:e6:41:14:c3:2d:6f:26:b9:
27:07:e0:35:46:6a:bd:d9:4b:64:29:e5:2f:91:ae:db:d5:28:
df:47:03:b6:ab:4d:ce:e9:9a:11:18:47:e4:4e:37:2e:27:d7:
a2:d2:b8:f6:09:7d:da:de:c8:1f:f5:e2:91:62:89:51:88:b9:
ba:c5:4a:9a:69:3d:ea:88:e6:69:b8:b5:b1:80:d1:c5:ae:50:
1f:44:e1:c0:b7:f5:9d:3a:28:64:f2:4e:46:0c:d6:a5:3f:a0:
5d:ca:0c:5f:1c:54:59:09:c8:e7:ec:ae:b2:8f:6a:1b:5c:37:
64:99:79:5a:82:9b:3e:be:04:91:ce:c3:83:0c:64:96:ba:aa:
c4:bf:47:50:76:af:b9:07:55:cf:d6:9a:50:e0:ce:bf:d4:c0:
87:15:84:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDQ81zxYaQTeoJ/a3Uqz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYTI2YzQwOGZjNjdiNzUyNzM0Y2M5OTdmMzYzMGRiYWY2
ZjYwNmYwHhcNMjYwOTIwMjMwMDUzWhcNMjYwOTIxMjMwMDUzWjAzMTEwLwYDVQQD
EygyOGZlNjRkMmMxNWM3OThlNDM1NGRkZmE1ZGZhMzQxODA4M2NiNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD+CiOEZiNWzXEPM/s+SwLWsiNKb
oWH8iVVQQcYoFI7Qa0P7gkNeuD936aeIVZu+9TbDcE2DnAJU1Ndu+J8stEdJ69P/
kt8ekhY3b+mPqnRd2I/BC9N2juebyIFbU7ZGhK8PoDLt9VpF602vqjkf2SuvEqXr
iDDt0Yq6qIMa3u81sbRYtxbkadCfJbLGHWzbnmRkk0+vF3bdcJJY0TJ+NMbf3ND6
0dzuCCLKv6eeNHEY49DHz8p2HDMJa/o9s0xR2ODhIrdLs3FS5Bt85dXw19AjnP0o
ITEaMQ5uEmhXp+iVKo+5i9jF4QM5/3P/e9aHKidrDUi+BtiZUZ1S6qV2KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj+ZNLBXHmOQ1Td+l36NBgIPLSOMB8GA1UdIwQY
MBaAFO2ibECPxnt1JzTMmX82MNuvb2BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTIt
OWQ0YTY2YWIzZmYyLzEvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTItOWQ0YTY2YWIzZmYy
LzEvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwlve+uW
8YbKxYAp+1su2AYgpyqxatYPTQTMXh7AaHSsvyt0+TL711QHQhRiTc7nC9iS4jlv
/RCVGBLbK+fTJB1nSGN/xmhOnUXzqaQ8gt1Xb8GyJQJZY/2LjyOIxI0p5owjmeZB
FMMtbya5JwfgNUZqvdlLZCnlL5Gu29Uo30cDtqtNzumaERhH5E43LifXotK49gl9
2t7IH/XikWKJUYi5usVKmmk96ojmabi1sYDRxa5QH0ThwLf1nTooZPJORgzWpT+g
XcoMXxxUWQnI5+yuso9qG1w3ZJl5WoKbPr4Ekc7DgwxklrqqxL9HUHavuQdVz9aa
UODOv9TAhxWE7Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:55:11 2026 by rpki-client