Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: 7jkbwQghfaHj3zygGRXVIl3RDK6vrkUaWUarglGyQM4=
Subject key identifier: E2:A3:76:FC:6E:B1:2D:4A:B7:57:3B:F9:1F:49:16:8C:BA:8F:23:83
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 01A10136745B22107A269D7CE5CB1D555268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 10:01:48 +0000
Manifest this update: Sat 03 Oct 2026 10:01:48 +0000
Manifest next update: Sun 04 Oct 2026 10:01:48 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: 3tHr2gRKCrsJZmi37H6gio6dOjE/+V+f25bv3f4jPPI=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:74:5b:22:10:7a:26:9d:7c:e5:cb:1d:55:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Oct 3 10:01:48 2026 GMT
Not After : Oct 4 10:01:48 2026 GMT
Subject: CN=e2a376fc6eb12d4ab7573bf91f49168cba8f2383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:ce:78:2d:53:dc:fb:9a:9f:9b:d8:51:e6:
1d:55:06:ad:ff:db:6d:95:42:90:77:a5:63:ee:1a:
77:27:00:19:1d:32:d1:80:3e:3b:2c:fd:6e:ac:41:
f8:9f:c0:69:10:c5:61:a9:9a:fe:1d:07:77:37:b2:
a6:2f:27:10:bc:cb:fb:a5:af:be:ad:79:12:73:b0:
cd:21:65:bb:d4:7f:5e:cd:fa:f0:68:d4:b7:c8:2f:
2d:86:dd:f3:20:99:a5:22:fe:0c:f5:d5:cd:2e:c9:
1a:cf:fd:bb:86:35:92:a9:3d:1c:42:86:76:12:8c:
17:f9:cb:cd:f8:6a:64:5c:9b:16:91:68:3c:d3:29:
7a:1b:53:f9:ce:0e:cd:0e:69:a6:39:6a:cb:8b:82:
01:98:2c:93:62:fd:41:e7:3c:85:1b:2b:4a:67:fa:
59:3a:72:fa:9e:14:f6:38:b9:62:6d:a6:b5:9f:21:
16:f5:2a:62:b7:74:ba:d9:f1:07:d7:1d:b4:28:19:
64:24:33:13:e7:cd:99:04:bf:ab:fb:57:e2:d8:2f:
07:c7:76:86:ac:a3:35:eb:e0:83:2a:17:4e:07:d6:
33:b7:8a:96:cd:42:d5:61:36:8f:c6:a3:52:5f:e7:
19:52:2a:5a:76:05:3f:1d:1c:b6:5d:35:be:97:60:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:76:FC:6E:B1:2D:4A:B7:57:3B:F9:1F:49:16:8C:BA:8F:23:83
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:2c:fe:cc:bd:89:17:f0:19:f4:b4:7e:dd:a1:b1:fc:89:
6f:ec:ec:20:54:1f:94:e4:f1:b5:23:ff:6f:01:84:e9:c7:7e:
43:f3:e4:10:05:37:5e:57:4b:99:ff:94:ad:4c:78:50:f0:14:
8e:51:39:67:66:a2:e3:c0:e2:be:8c:df:55:cf:15:c2:3c:89:
08:d7:45:76:9b:53:75:78:a0:a9:83:e4:0f:06:ba:1c:c1:37:
60:9a:b6:62:7b:19:80:88:bf:7b:76:1b:63:a8:7d:a9:df:ed:
64:54:53:37:35:0b:88:54:f5:ca:44:2c:1f:28:dc:ea:a6:78:
30:38:92:3e:e1:f8:ef:c4:e9:a5:70:dd:f8:75:01:e1:5f:0d:
64:b2:cf:c6:0a:2d:71:68:20:b2:c0:8f:4a:e4:51:73:f0:bc:
ef:8a:9b:7c:70:29:7d:3c:e9:fe:52:73:40:69:1b:cc:11:60:
df:9e:01:9c:f8:ff:9a:99:38:8d:84:57:44:74:bc:31:37:77:
96:ba:17:8d:6c:23:1a:79:57:3c:bb:b2:7a:df:78:f7:f5:2a:
f3:59:2d:22:4e:91:07:04:fe:80:91:a7:c1:88:2b:76:61:eb:
1d:f4:4e:41:2a:37:c1:5f:d4:4f:6a:cd:74:04:93:55:d4:7c:
b7:e9:f0:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNnRbIhB6Jp185csdVVJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjYxMDAzMTAwMTQ4WhcNMjYxMDA0MTAwMTQ4WjAzMTEwLwYDVQQD
EyhlMmEzNzZmYzZlYjEyZDRhYjc1NzNiZjkxZjQ5MTY4Y2JhOGYyMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgDOeC1T3Puan5vYUeYdVQat/9tt
lUKQd6Vj7hp3JwAZHTLRgD47LP1urEH4n8BpEMVhqZr+HQd3N7KmLycQvMv7pa++
rXkSc7DNIWW71H9ezfrwaNS3yC8tht3zIJmlIv4M9dXNLskaz/27hjWSqT0cQoZ2
EowX+cvN+GpkXJsWkWg80yl6G1P5zg7NDmmmOWrLi4IBmCyTYv1B5zyFGytKZ/pZ
OnL6nhT2OLlibaa1nyEW9Spit3S62fEH1x20KBlkJDMT582ZBL+r+1fi2C8Hx3aG
rKM16+CDKhdOB9Yzt4qWzULVYTaPxqNSX+cZUipadgU/HRy2XTW+l2A6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKjdvxusS1Kt1c7+R9JFoy6jyODMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWIs/sy9
iRfwGfS0ft2hsfyJb+zsIFQflOTxtSP/bwGE6cd+Q/PkEAU3XldLmf+UrUx4UPAU
jlE5Z2ai48DivozfVc8VwjyJCNdFdptTdXigqYPkDwa6HME3YJq2YnsZgIi/e3Yb
Y6h9qd/tZFRTNzULiFT1ykQsHyjc6qZ4MDiSPuH478TppXDd+HUB4V8NZLLPxgot
cWggssCPSuRRc/C874qbfHApfTzp/lJzQGkbzBFg354BnPj/mpk4jYRXRHS8MTd3
lroXjWwjGnlXPLuyet949/Uq81ktIk6RBwT+gJGnwYgrdmHrHfROQSo3wV/UT2rN
dASTVdR8t+nwcA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:15:33 2026 by rpki-client