Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: XGPsviUFW0fiFV7X2ts6qUjpwQtMWv2uz1D/4OH3v68=
Subject key identifier: 65:19:B9:AE:99:6D:BF:98:00:E3:9C:31:60:D6:36:C5:B4:17:02:19
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 01A0EAAEF7FC59E6637E6DEC5EE3C3A81194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0CEC
Signing time: Tue 29 Sep 2026 01:02:10 +0000
Manifest this update: Tue 29 Sep 2026 01:02:10 +0000
Manifest next update: Wed 30 Sep 2026 01:02:10 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: /0IwgbQfCjwMsvRm42dqYyB2fkZaAHYdaOHB9hjWa78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:f7:fc:59:e6:63:7e:6d:ec:5e:e3:c3:a8:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Sep 29 01:02:10 2026 GMT
Not After : Sep 30 01:02:10 2026 GMT
Subject: CN=6519b9ae996dbf9800e39c3160d636c5b4170219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:02:3c:41:18:42:cd:4a:70:9f:63:fc:7e:
98:5a:7f:34:ab:ce:36:46:7e:86:f3:e0:35:1a:0f:
87:0a:f4:ff:a7:9f:a2:16:bd:0e:79:0c:ad:fa:1e:
a1:7e:73:2e:78:7b:3a:6c:f5:24:16:cc:7e:3e:92:
c1:aa:04:24:0f:95:c0:fc:3c:77:05:6f:55:54:9b:
27:98:be:6e:de:8c:7e:03:b3:9d:fd:4c:fd:2d:84:
de:a2:64:40:60:e6:fb:ae:5b:68:a5:71:ce:b5:5b:
30:7d:60:9e:31:be:b6:1a:d2:cb:16:3a:66:44:f9:
40:a9:b4:b2:8e:fa:ea:b3:6c:e8:37:7f:63:ba:c3:
4c:f2:0e:a8:31:93:1d:95:24:e6:2e:ac:02:80:00:
5d:d8:c3:6b:6e:5a:63:07:9f:ec:98:8e:a7:1c:77:
d4:ad:a1:9e:08:47:44:97:35:8b:42:e8:1d:31:b9:
81:3a:fd:8a:0e:61:57:63:3d:81:41:a6:d2:a2:0c:
ef:23:eb:ad:a3:24:c6:73:cc:63:72:8a:8b:86:05:
90:6a:02:da:e0:08:57:90:aa:54:0d:1b:31:b3:a3:
47:83:60:42:1e:00:85:75:6e:d3:2a:fa:a2:8c:45:
b6:d4:56:35:40:8c:67:7c:40:0b:35:e3:03:6b:ad:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:19:B9:AE:99:6D:BF:98:00:E3:9C:31:60:D6:36:C5:B4:17:02:19
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:49:70:38:20:5f:ba:e2:3f:7d:14:f2:5f:05:af:66:f8:
4a:64:8a:92:46:aa:3d:57:f9:63:6a:6a:44:d2:84:c0:30:f4:
9a:55:d3:23:50:da:82:1a:99:0a:6e:60:03:06:75:da:9e:fb:
46:e3:8f:28:35:f6:ef:55:6e:4f:01:1a:38:ab:29:76:7c:2c:
f6:79:38:7b:19:a8:5e:9d:f5:54:b2:f5:44:1a:e8:ba:97:ed:
5e:5a:2b:cd:bb:a2:44:e8:d5:8a:ea:b7:4a:60:fc:80:88:cb:
d2:3c:82:b5:2b:79:19:6c:46:a4:85:09:91:16:19:1f:0e:e6:
ce:e5:f2:04:65:db:63:6a:fb:e9:2a:a2:a9:88:c0:64:89:4f:
5a:be:26:a7:34:c1:92:67:a0:a4:d6:72:50:1f:af:14:38:b8:
bb:2a:81:7d:1e:e7:ba:ba:39:27:68:af:7d:87:2c:6c:83:e4:
75:3e:3b:31:eb:53:5e:36:4c:55:a6:13:b1:79:b1:a2:72:0b:
55:12:bc:32:a6:19:eb:3e:56:2c:49:fe:5e:1a:76:d5:d5:cd:
96:05:8d:75:8f:73:0b:59:31:bd:05:a8:3c:28:f7:2d:e5:fc:
b6:a2:c3:6f:68:9b:ac:39:b6:01:a2:c8:96:c2:9c:cd:75:28:
d8:4e:16:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqrvf8WeZjfm3sXuPDqBGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjYwOTI5MDEwMjEwWhcNMjYwOTMwMDEwMjEwWjAzMTEwLwYDVQQD
Eyg2NTE5YjlhZTk5NmRiZjk4MDBlMzljMzE2MGQ2MzZjNWI0MTcwMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d8CPEEYQs1KcJ9j/H6YWn80q842
Rn6G8+A1Gg+HCvT/p5+iFr0OeQyt+h6hfnMueHs6bPUkFsx+PpLBqgQkD5XA/Dx3
BW9VVJsnmL5u3ox+A7Od/Uz9LYTeomRAYOb7rltopXHOtVswfWCeMb62GtLLFjpm
RPlAqbSyjvrqs2zoN39jusNM8g6oMZMdlSTmLqwCgABd2MNrblpjB5/smI6nHHfU
raGeCEdElzWLQugdMbmBOv2KDmFXYz2BQabSogzvI+utoyTGc8xjcoqLhgWQagLa
4AhXkKpUDRsxs6NHg2BCHgCFdW7TKvqijEW21FY1QIxnfEALNeMDa62VawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUZua6Zbb+YAOOcMWDWNsW0FwIZMB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoZJcDgg
X7riP30U8l8Fr2b4SmSKkkaqPVf5Y2pqRNKEwDD0mlXTI1DaghqZCm5gAwZ12p77
RuOPKDX271VuTwEaOKspdnws9nk4exmoXp31VLL1RBroupftXlorzbuiROjViuq3
SmD8gIjL0jyCtSt5GWxGpIUJkRYZHw7mzuXyBGXbY2r76SqiqYjAZIlPWr4mpzTB
kmegpNZyUB+vFDi4uyqBfR7nuro5J2ivfYcsbIPkdT47MetTXjZMVaYTsXmxonIL
VRK8MqYZ6z5WLEn+Xhp21dXNlgWNdY9zC1kxvQWoPCj3LeX8tqLDb2ibrDm2AaLI
lsKczXUo2E4Wtw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:19:15 2026 by rpki-client