Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: tBBIAurGOQiouB7kZ18xbBeWxKVvD5nESaPiVVAXiAE=
Subject key identifier: DC:3B:8A:C1:6B:BE:64:BD:CE:C0:1B:49:98:6E:88:0A:7E:E0:6E:C3
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 01A0C3D70370AE9DDEF027FD3D87FB74D910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 12A8
Signing time: Mon 21 Sep 2026 12:00:43 +0000
Manifest this update: Mon 21 Sep 2026 12:00:43 +0000
Manifest next update: Tue 22 Sep 2026 12:00:43 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: 4qZzONJvgfNyG8N4ELUDy2c7Wlg2WtZateZ/ZNi9e+0=)
2: xkug34IJaWSwOfn5zGdas0MixZ4.roa (hash: IepgvoNLMpyof9xTWeZX3c1cPMLbQuZpVjyEywQxdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:03:70:ae:9d:de:f0:27:fd:3d:87:fb:74:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Sep 21 12:00:43 2026 GMT
Not After : Sep 22 12:00:43 2026 GMT
Subject: CN=dc3b8ac16bbe64bdcec01b49986e880a7ee06ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:77:46:fe:ca:90:01:af:a3:4e:4b:e5:2a:
45:61:23:80:d0:e6:d6:76:0c:11:bb:79:00:e4:52:
be:0c:9c:aa:59:8d:8b:7a:bc:33:c4:e4:40:33:10:
8c:d3:e0:25:f8:18:de:fe:34:86:26:5f:1a:3b:9f:
fc:45:ff:00:32:02:e8:06:db:60:ed:b3:c1:43:a4:
89:97:7b:ae:6c:64:31:d4:74:db:7b:46:f5:8c:2b:
41:f0:de:6b:c1:73:44:94:bd:f8:a2:df:e9:f2:6c:
8e:19:9b:03:4c:f8:35:d8:e5:f2:d5:75:27:69:5e:
1e:bd:8f:e5:3c:3d:dd:d9:9c:00:f1:11:c2:89:de:
28:c8:24:13:46:af:1c:ed:76:51:38:f2:69:fc:79:
16:a3:08:aa:a3:a9:53:0e:89:fc:6c:3c:6c:4b:2f:
d6:5c:42:61:ef:f0:c8:41:46:7f:9d:fb:98:86:33:
21:a8:d1:2f:c0:6b:6d:6b:48:a2:8b:47:8b:8e:58:
b0:2c:80:15:b1:d0:0d:9a:da:5e:f8:c1:6d:7d:6e:
b7:ba:7e:d6:f5:37:5d:7b:58:65:c2:17:8c:88:d4:
72:cf:39:ac:9d:7f:16:f2:c0:83:d2:ac:6a:78:1a:
08:67:5a:5e:1b:34:b0:51:4e:fe:35:e7:98:70:26:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:8A:C1:6B:BE:64:BD:CE:C0:1B:49:98:6E:88:0A:7E:E0:6E:C3
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8e:1c:b0:d0:98:dd:14:63:71:5b:c3:3c:72:df:af:73:89:
3d:51:d6:82:bb:24:b9:df:b6:70:d7:99:b6:6a:ff:7a:97:e6:
40:1e:dd:6e:13:73:bc:e0:bd:71:ab:6b:80:fa:10:cf:5d:5c:
ce:10:ec:e2:85:91:b2:61:71:ef:d4:e9:cc:56:1c:b3:45:ed:
ab:13:b3:78:58:16:19:90:16:33:9c:75:6d:a4:89:9d:97:07:
76:3a:cf:2d:a2:ff:11:87:98:ec:62:90:88:ed:63:df:ca:38:
de:82:0f:70:4a:9b:b1:09:de:47:8e:c3:3b:c7:07:f7:42:7c:
ef:ad:bc:ad:ea:59:e4:b8:8c:00:b9:e6:df:2f:d2:8b:6e:b5:
d4:0e:4d:14:c6:6e:55:7f:a1:00:86:2f:1f:bb:99:c7:fb:89:
da:3b:d5:27:e8:27:39:cc:12:1c:2c:84:6b:f6:4f:f8:65:7b:
77:8f:fb:d7:e6:01:b0:92:36:d1:7d:27:e9:e6:b3:2f:d1:db:
f2:3b:43:65:89:25:5c:a0:cb:47:b9:62:3c:64:f2:d8:4e:b1:
62:c1:e6:e7:47:bd:fa:00:82:7c:68:fb:ba:a3:30:2d:42:20:
2a:33:1c:74:8f:d4:bd:d4:75:a3:1d:e6:59:20:44:8c:5c:f8:
96:e8:a2:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1wNwrp3e8Cf9PYf7dNkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYzQ1ZmNhZGM0YzkzM2FjOGZmNGUwYjQzNGE1YmZiNTY3
YjY1YTEwHhcNMjYwOTIxMTIwMDQzWhcNMjYwOTIyMTIwMDQzWjAzMTEwLwYDVQQD
EyhkYzNiOGFjMTZiYmU2NGJkY2VjMDFiNDk5ODZlODgwYTdlZTA2ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx93Rv7KkAGvo05L5SpFYSOA0ObW
dgwRu3kA5FK+DJyqWY2LerwzxORAMxCM0+Al+Bje/jSGJl8aO5/8Rf8AMgLoBttg
7bPBQ6SJl3uubGQx1HTbe0b1jCtB8N5rwXNElL34ot/p8myOGZsDTPg12OXy1XUn
aV4evY/lPD3d2ZwA8RHCid4oyCQTRq8c7XZROPJp/HkWowiqo6lTDon8bDxsSy/W
XEJh7/DIQUZ/nfuYhjMhqNEvwGtta0iii0eLjliwLIAVsdANmtpe+MFtfW63un7W
9Tdde1hlwheMiNRyzzmsnX8W8sCD0qxqeBoIZ1peGzSwUU7+NeeYcCbVvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw7isFrvmS9zsAbSZhuiAp+4G7DMB8GA1UdIwQY
MBaAFOzEX8rcTJM6yP9OC0NKW/tWe2WhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQt
ZTA3NmY4Y2NiOGI5LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQtZTA3NmY4Y2NiOGI5
LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEI4csNCY
3RRjcVvDPHLfr3OJPVHWgrskud+2cNeZtmr/epfmQB7dbhNzvOC9catrgPoQz11c
zhDs4oWRsmFx79TpzFYcs0XtqxOzeFgWGZAWM5x1baSJnZcHdjrPLaL/EYeY7GKQ
iO1j38o43oIPcEqbsQneR47DO8cH90J87628repZ5LiMALnm3y/Si2611A5NFMZu
VX+hAIYvH7uZx/uJ2jvVJ+gnOcwSHCyEa/ZP+GV7d4/71+YBsJI20X0n6eazL9Hb
8jtDZYklXKDLR7liPGTy2E6xYsHm50e9+gCCfGj7uqMwLUIgKjMcdI/UvdR1ox3m
WSBEjFz4luiilw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:33:57 2026 by rpki-client