Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: G6E/EQM9ZPd2FDYsO/JXUNGDMNvYRiQPwus56zvBbww=
Subject key identifier: 46:49:42:F7:58:95:AC:41:67:0B:B8:00:3D:5A:F7:44:3D:B8:6C:06
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 01A0C1B125B70BE01DCF29787A28D3BAE1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1A84
Signing time: Mon 21 Sep 2026 02:00:07 +0000
Manifest this update: Mon 21 Sep 2026 02:00:07 +0000
Manifest next update: Tue 22 Sep 2026 02:00:07 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: YIQqe/UUm7VB8xnxpvVm7MPOd2eigQYjzbxhyZhNXQg=)
2: Gp76Gv-eHWRgRvhEjHqJ6icn00Q.roa (hash: BmL3M6inhKtEkTbjCk7s9if8HrybG3oAFNlmaOoxF0c=)
3: JnNygfiur-rHLJuAn1hkxLz25cQ.roa (hash: CEYmgo0zOa133sbdNYSecv5niw3ZeeRwnisUaeasxBY=)
4: UV-Za1MLDNSaG4DuH_q131i6c6o.roa (hash: /nY7i2nihg09pwfCz4ZETusOQgWbnKeEZAo2lp/8PQQ=)
5: XwwEduTGUdEUmzQ6Vn1Qh0lULKE.roa (hash: yP/C4oSHOkCL3b3u7lTD0ceM0Z9V/7tsggm9f4RRupE=)
6: bc8LaOm-Ug6E5hSvds9yGbuwrFA.roa (hash: RaZzZcOTQlGar1i6XUpTh++hxvp7YrNT3WX2Bc1Xmtk=)
7: gDu74A_Z1ksatoKHQD455fxsAx0.roa (hash: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig=)
8: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (hash: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:25:b7:0b:e0:1d:cf:29:78:7a:28:d3:ba:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Sep 21 02:00:07 2026 GMT
Not After : Sep 22 02:00:07 2026 GMT
Subject: CN=464942f75895ac41670bb8003d5af7443db86c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:87:fb:bf:34:61:87:37:6f:c2:dd:fa:39:16:
85:e4:8f:f4:24:da:30:dc:e0:b0:9a:b5:60:d3:06:
7f:7f:8c:be:aa:61:27:f0:97:74:19:54:69:5f:7b:
db:12:c5:10:0b:00:4e:c2:0c:68:10:4d:d6:ff:c2:
99:e3:e3:13:d1:5b:ac:db:7b:84:dd:b9:27:0f:97:
b7:33:a2:4a:88:4c:d5:41:19:46:33:04:c9:b4:0e:
51:2c:d1:4f:fa:e4:b5:a7:1a:5a:dc:c6:d3:d6:9c:
1b:d2:c0:3d:b2:f1:e7:8a:a5:97:1f:3a:07:f9:d5:
11:e1:bb:b3:b1:3b:07:72:e5:e2:74:55:fc:01:5a:
03:90:e5:63:70:98:83:2d:bd:24:c9:ae:c6:e1:85:
23:0f:60:b9:61:1c:e2:a1:e8:6f:44:e7:a6:62:2f:
f2:f6:f2:ec:e0:7c:e6:32:2b:2e:96:b7:25:8b:fd:
9d:ae:7e:3c:8c:20:59:fb:60:11:62:1f:41:18:74:
7f:9c:c0:ac:94:b0:ea:4f:59:b0:80:13:fc:e4:5e:
f6:b3:ef:61:25:18:e0:1f:d0:e5:43:04:56:f4:23:
df:84:e0:95:87:15:d4:5a:49:28:7c:f7:d4:6e:8a:
fa:e4:93:08:58:6f:c3:c3:e2:44:79:9b:5b:25:6f:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:42:F7:58:95:AC:41:67:0B:B8:00:3D:5A:F7:44:3D:B8:6C:06
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:fa:3c:78:bd:2e:de:54:79:2f:32:50:1c:38:55:ba:40:
27:36:ff:74:62:24:57:0c:e3:bd:21:79:c9:9e:e2:0c:bc:13:
de:31:54:c0:d6:75:e8:a1:20:3b:f3:96:49:5c:d7:4c:9e:a0:
3e:b4:dd:c9:0b:a1:2b:b0:6b:9f:66:04:5d:1a:39:34:de:af:
75:1e:83:73:f2:c3:08:c1:cb:74:3c:02:e9:89:83:19:e5:eb:
5d:02:18:07:ce:e5:7d:b7:11:68:16:98:ac:48:0d:7b:bf:93:
1a:2f:c7:f5:54:99:a7:4c:03:96:0c:b3:0f:d5:65:7d:27:c2:
5c:c0:45:2b:ae:76:54:d1:5f:5c:2f:08:88:1b:bb:ea:7a:7a:
f8:41:71:fe:a6:75:03:b6:13:ce:c0:85:a2:54:76:90:19:61:
4c:79:0d:7d:f7:4f:20:58:e7:a0:fb:ac:ee:86:f5:bf:80:b5:
27:f6:1e:f7:3e:b4:c7:6c:6c:c7:25:f2:08:03:6e:ac:8e:c2:
7d:ee:81:28:2d:39:41:f2:db:64:da:cf:2f:f3:1e:06:a4:e7:
54:a1:d9:16:60:15:80:43:54:7e:1c:16:df:57:bc:0e:87:b6:
86:6e:f4:38:6e:5e:43:7c:5f:50:34:4c:d8:4f:61:85:96:eb:
8f:22:3a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsSW3C+Adzyl4eijTuuHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2
NjIxYjkwHhcNMjYwOTIxMDIwMDA3WhcNMjYwOTIyMDIwMDA3WjAzMTEwLwYDVQQD
Eyg0NjQ5NDJmNzU4OTVhYzQxNjcwYmI4MDAzZDVhZjc0NDNkYjg2YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8of7vzRhhzdvwt36ORaF5I/0JNow
3OCwmrVg0wZ/f4y+qmEn8Jd0GVRpX3vbEsUQCwBOwgxoEE3W/8KZ4+MT0Vus23uE
3bknD5e3M6JKiEzVQRlGMwTJtA5RLNFP+uS1pxpa3MbT1pwb0sA9svHniqWXHzoH
+dUR4buzsTsHcuXidFX8AVoDkOVjcJiDLb0kya7G4YUjD2C5YRzioehvROemYi/y
9vLs4HzmMisulrcli/2drn48jCBZ+2ARYh9BGHR/nMCslLDqT1mwgBP85F72s+9h
JRjgH9DlQwRW9CPfhOCVhxXUWkkofPfUbor65JMIWG/Dw+JEeZtbJW/LewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZJQvdYlaxBZwu4AD1a90Q9uGwGMB8GA1UdIwQY
MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt
YzFhZGRkN2RlYmFhLzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh
LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjv6PHi9
Lt5UeS8yUBw4VbpAJzb/dGIkVwzjvSF5yZ7iDLwT3jFUwNZ16KEgO/OWSVzXTJ6g
PrTdyQuhK7Brn2YEXRo5NN6vdR6Dc/LDCMHLdDwC6YmDGeXrXQIYB87lfbcRaBaY
rEgNe7+TGi/H9VSZp0wDlgyzD9VlfSfCXMBFK652VNFfXC8IiBu76np6+EFx/qZ1
A7YTzsCFolR2kBlhTHkNffdPIFjnoPus7ob1v4C1J/Ye9z60x2xsxyXyCANurI7C
fe6BKC05QfLbZNrPL/MeBqTnVKHZFmAVgENUfhwW31e8Doe2hm70OG5eQ3xfUDRM
2E9hhZbrjyI6pg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:41:11 2026 by rpki-client