Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: SVKOvXaZdP0vIOzodRQKe2HprdL2MefSdaFd176FdeQ=
Subject key identifier: BF:7B:0F:29:A2:28:3D:EB:B3:75:48:29:44:F1:ED:51:B4:78:FD:38
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 01A0D26E0DBDFE03C2E165F3BA6E6C43BB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0E93
Signing time: Thu 24 Sep 2026 08:00:22 +0000
Manifest this update: Thu 24 Sep 2026 08:00:22 +0000
Manifest next update: Fri 25 Sep 2026 08:00:22 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: h42sKWfmyTnCS6hUArKWHPPMrh3nedtkptHwj+hT9F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:0d:bd:fe:03:c2:e1:65:f3:ba:6e:6c:43:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Sep 24 08:00:22 2026 GMT
Not After : Sep 25 08:00:22 2026 GMT
Subject: CN=bf7b0f29a2283debb375482944f1ed51b478fd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:2e:fc:bf:47:e2:78:4f:92:2a:0e:8b:1d:
eb:7f:0d:3f:99:d9:b9:a4:74:c0:04:f2:78:d1:10:
07:05:e4:f9:c4:98:02:a0:9b:87:6a:77:4b:c1:65:
ca:d1:fb:33:60:e8:20:fc:7b:f6:3a:73:bb:d0:9e:
85:d2:49:aa:ab:a0:a2:86:3c:8d:ba:fb:0d:89:29:
1f:b6:17:f1:00:33:94:08:59:5c:ea:61:eb:80:5f:
4a:3f:90:09:c0:43:d7:07:38:8e:84:89:33:41:56:
ef:bb:6c:04:1b:02:4b:a2:4b:55:ff:34:4f:e6:a1:
6d:eb:e3:97:97:1d:17:c1:ae:3f:f0:60:21:b4:59:
7c:86:41:eb:ba:af:6e:18:78:26:d8:a7:9e:63:f3:
c6:fd:2c:51:59:2f:1b:17:10:cf:8f:56:7a:bb:01:
ee:15:24:42:b1:fc:b8:d4:db:a0:66:ef:f2:0e:d6:
c5:5a:2f:cf:a8:bf:2a:f9:85:87:b1:28:fb:19:ce:
0f:bb:c6:24:25:7b:de:e3:8d:35:ae:4d:51:4d:bf:
6b:70:e6:af:b1:4a:78:99:c1:a2:90:b0:bd:54:9c:
a5:ee:93:35:97:2f:c9:c3:0d:49:cb:24:68:87:37:
bb:82:5d:65:a0:ae:de:93:8e:79:b1:63:55:b9:cb:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7B:0F:29:A2:28:3D:EB:B3:75:48:29:44:F1:ED:51:B4:78:FD:38
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1f:b5:23:0d:af:f6:8f:72:be:8c:c6:59:5a:f5:72:8a:69:
7c:43:af:1a:59:e2:a4:08:e3:52:b8:ca:98:11:03:50:c8:0b:
8f:2b:a6:e1:64:2f:90:b4:ff:75:7d:8e:e6:e7:30:8b:a6:0d:
f8:09:5d:26:d9:2b:fe:2b:53:f4:33:3d:54:90:60:81:f1:12:
7e:78:11:57:18:6e:b9:ba:37:3c:e6:c4:11:45:6f:53:08:31:
9e:1c:e9:83:1c:77:15:30:f6:7f:e8:c2:40:80:76:4a:86:4e:
fd:9a:12:96:d5:48:a8:b3:9d:9d:7b:88:ac:bb:d1:c2:b3:d0:
33:fd:76:6c:be:6f:86:d3:c8:72:d4:5b:9b:d5:ba:c1:1b:32:
24:08:c7:e7:f7:20:80:1d:ab:d5:65:0f:73:9b:6b:6e:20:ae:
76:f0:36:3d:e2:b4:10:23:1a:ea:03:62:03:87:1c:9a:9d:c4:
2f:a3:cc:30:fc:7d:1b:6c:f0:7d:59:e9:06:af:f5:77:a3:35:
cc:20:e7:20:74:bb:aa:d4:22:91:14:a6:ec:09:aa:91:f6:78:
05:fa:3e:42:1b:12:b6:b7:fc:5c:d1:c8:9c:ee:c8:31:28:c3:
2a:b7:57:37:3c:cf:71:15:d6:6d:86:f8:ce:8e:84:27:a4:f5:
d8:da:0f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbg29/gPC4WXzum5sQ7snMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNjhiNjY0Y2NkNTBjYTc2N2Q0NmZmYjM0ZjUzYTA2ZDEy
MGI1MjMwHhcNMjYwOTI0MDgwMDIyWhcNMjYwOTI1MDgwMDIyWjAzMTEwLwYDVQQD
EyhiZjdiMGYyOWEyMjgzZGViYjM3NTQ4Mjk0NGYxZWQ1MWI0NzhmZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHEu/L9H4nhPkioOix3rfw0/mdm5
pHTABPJ40RAHBeT5xJgCoJuHandLwWXK0fszYOgg/Hv2OnO70J6F0kmqq6CihjyN
uvsNiSkfthfxADOUCFlc6mHrgF9KP5AJwEPXBziOhIkzQVbvu2wEGwJLoktV/zRP
5qFt6+OXlx0Xwa4/8GAhtFl8hkHruq9uGHgm2KeeY/PG/SxRWS8bFxDPj1Z6uwHu
FSRCsfy41NugZu/yDtbFWi/PqL8q+YWHsSj7Gc4Pu8YkJXve4401rk1RTb9rcOav
sUp4mcGikLC9VJyl7pM1ly/Jww1JyyRohze7gl1loK7ek455sWNVucunUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL97DymiKD3rs3VIKUTx7VG0eP04MB8GA1UdIwQY
MBaAFO5otmTM1QynZ9Rv+zT1OgbRILUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUt
ZGVkN2FjMjUyNTQ0LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iYTc2ZWMtNWQxYS00Mzc1LTg0OWUtZGVkN2FjMjUyNTQ0
LzEvN21pMlpNelZES2RuMUdfN05QVTZCdEVndFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR+1Iw2v
9o9yvozGWVr1coppfEOvGlnipAjjUrjKmBEDUMgLjyum4WQvkLT/dX2O5ucwi6YN
+AldJtkr/itT9DM9VJBggfESfngRVxhuubo3PObEEUVvUwgxnhzpgxx3FTD2f+jC
QIB2SoZO/ZoSltVIqLOdnXuIrLvRwrPQM/12bL5vhtPIctRbm9W6wRsyJAjH5/cg
gB2r1WUPc5trbiCudvA2PeK0ECMa6gNiA4ccmp3EL6PMMPx9G2zwfVnpBq/1d6M1
zCDnIHS7qtQikRSm7AmqkfZ4Bfo+QhsStrf8XNHInO7IMSjDKrdXNzzPcRXWbYb4
zo6EJ6T12NoP8w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:09:09 2026 by rpki-client