Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: eBAkSuuseMGBKtgI06k5lsWSVK+kbIQRSogjTLPLIhs=
Subject key identifier: 10:5C:70:8A:5F:15:F3:BB:5B:71:5E:32:8B:6A:45:7C:6C:7A:6C:65
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 01A0D45D7C042E9D60E0FBC8B5784A5C9949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 1A76
Signing time: Thu 24 Sep 2026 17:01:31 +0000
Manifest this update: Thu 24 Sep 2026 17:01:31 +0000
Manifest next update: Fri 25 Sep 2026 17:01:31 +0000
Files and hashes: 1: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (hash: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=)
2: aftA-bCSN_cfnaumewln08mRqyk.roa (hash: ewCgfj5ZHQWWUV5zhZ6e7KdXcICBairndqt6imFYbD4=)
3: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: /uwuMy2/JpwZe47mtY1svMddGWmuNCh4xvreiU/Y3v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:7c:04:2e:9d:60:e0:fb:c8:b5:78:4a:5c:99:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Sep 24 17:01:31 2026 GMT
Not After : Sep 25 17:01:31 2026 GMT
Subject: CN=105c708a5f15f3bb5b715e328b6a457c6c7a6c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:6f:f0:39:e9:13:97:dc:3c:8b:5a:69:72:
e3:9b:42:83:f6:09:ba:25:e0:c2:77:a0:66:c8:63:
f3:28:44:57:81:d0:a7:73:9d:dc:4c:29:3d:fb:af:
5b:82:6e:e2:76:21:f1:0c:08:e4:92:70:d9:f5:70:
3e:5b:dd:96:35:cf:bf:a1:86:e3:c9:6f:95:02:78:
4c:2a:19:4f:e3:a8:7c:b7:62:53:4f:18:0a:25:68:
00:59:98:c3:ee:42:fa:a1:06:3b:95:21:c5:92:bb:
11:87:4a:89:5f:d3:b5:01:33:e7:97:1c:a1:fc:72:
33:9c:d9:0c:78:34:eb:69:4e:0d:7a:9c:1d:3c:f6:
07:ba:6e:2a:22:28:9c:d3:a5:16:a6:21:61:55:4c:
51:d4:1e:ef:44:96:3d:fa:fe:c4:9e:e1:06:eb:9c:
2b:ea:8f:76:08:0f:a9:01:4f:9d:81:ba:21:13:3f:
76:2d:db:12:b0:6b:22:c6:b4:70:d4:17:72:c5:da:
d7:bf:8e:4d:c7:df:59:2d:f1:65:52:51:c5:64:63:
23:bb:6e:5e:fe:a3:7c:98:26:6e:97:a1:5b:99:79:
d3:7a:1f:c0:69:42:f6:ba:05:3c:50:a1:e9:d1:5b:
da:74:ee:75:cf:9b:7d:68:82:99:e3:c7:7a:9f:29:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5C:70:8A:5F:15:F3:BB:5B:71:5E:32:8B:6A:45:7C:6C:7A:6C:65
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:34:e8:86:20:dd:a6:35:51:04:25:d2:c2:1a:6d:8a:53:f4:
08:20:81:42:3d:11:af:61:45:f7:0a:b8:1b:21:e1:67:f3:c1:
8a:66:e4:6e:aa:8b:d0:dc:56:43:1d:41:56:de:33:4d:11:bd:
ff:2b:c4:71:d4:98:bc:8b:fb:d2:83:79:5c:f9:57:e2:f1:54:
b4:60:ce:71:5b:3f:9a:09:71:a1:bf:ef:44:71:fd:e8:81:91:
22:05:dc:ec:24:ca:90:a4:c9:19:34:56:3d:b8:67:03:d1:37:
87:ef:50:2c:7f:65:a9:df:68:f4:3a:f3:38:81:51:41:60:96:
36:0e:b9:82:25:13:01:fb:8a:b9:3a:eb:27:66:ed:74:d3:36:
14:00:2e:b7:af:37:f4:ae:d3:2f:19:1b:16:db:51:54:27:d0:
d7:88:23:0e:bd:5d:ed:6e:07:10:4d:0d:65:6d:c8:7e:86:90:
7d:c5:c5:e6:05:6a:27:8f:38:2f:f1:68:54:af:18:54:1e:50:
34:21:4f:17:19:b2:77:57:ff:da:73:ec:b8:1a:45:a7:57:99:
c2:96:1f:5b:34:ed:c4:f0:d9:66:19:0c:8f:71:58:97:4b:f9:
36:3d:d6:70:75:49:a7:12:ca:b9:da:ac:34:d4:5a:13:f6:b5:
9d:36:7b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXXwELp1g4PvItXhKXJlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZmNTRlYTliMTVhOGJkNGYzMzgyNTM4NmNiMjc3YjAz
NDM5ZGQwHhcNMjYwOTI0MTcwMTMxWhcNMjYwOTI1MTcwMTMxWjAzMTEwLwYDVQQD
EygxMDVjNzA4YTVmMTVmM2JiNWI3MTVlMzI4YjZhNDU3YzZjN2E2YzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7lv8DnpE5fcPItaaXLjm0KD9gm6
JeDCd6BmyGPzKERXgdCnc53cTCk9+69bgm7idiHxDAjkknDZ9XA+W92WNc+/oYbj
yW+VAnhMKhlP46h8t2JTTxgKJWgAWZjD7kL6oQY7lSHFkrsRh0qJX9O1ATPnlxyh
/HIznNkMeDTraU4NepwdPPYHum4qIiic06UWpiFhVUxR1B7vRJY9+v7EnuEG65wr
6o92CA+pAU+dgbohEz92LdsSsGsixrRw1BdyxdrXv45Nx99ZLfFlUlHFZGMju25e
/qN8mCZul6FbmXnTeh/AaUL2ugU8UKHp0VvadO51z5t9aIKZ48d6nynR8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBccIpfFfO7W3FeMotqRXxsemxlMB8GA1UdIwQY
MBaAFLO29U6psVqL1PM4JThssnewNDndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUt
MmY0NmU5MzE3Y2M2LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUtMmY0NmU5MzE3Y2M2
LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjTohiDd
pjVRBCXSwhptilP0CCCBQj0Rr2FF9wq4GyHhZ/PBimbkbqqL0NxWQx1BVt4zTRG9
/yvEcdSYvIv70oN5XPlX4vFUtGDOcVs/mglxob/vRHH96IGRIgXc7CTKkKTJGTRW
PbhnA9E3h+9QLH9lqd9o9DrzOIFRQWCWNg65giUTAfuKuTrrJ2btdNM2FAAut683
9K7TLxkbFttRVCfQ14gjDr1d7W4HEE0NZW3IfoaQfcXF5gVqJ484L/FoVK8YVB5Q
NCFPFxmyd1f/2nPsuBpFp1eZwpYfWzTtxPDZZhkMj3FYl0v5Nj3WcHVJpxLKudqs
NNRaE/a1nTZ7/w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:38 2026 by rpki-client