Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: U279yFCvK70rIdn4A2/fyL553SY3EHLtIInp5yfWGNw=
Subject key identifier: 27:A1:C7:4E:52:CF:F0:B9:13:F3:10:63:3B:D4:CA:B3:F5:68:62:AB
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 01A0C8C6C49C836A90ECA814D4959DE8CDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 16FA
Signing time: Tue 22 Sep 2026 11:01:04 +0000
Manifest this update: Tue 22 Sep 2026 11:01:04 +0000
Manifest next update: Wed 23 Sep 2026 11:01:04 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: RHseRIOYsSmbQXcFw6vFKQfDU4gRcTl92UaHAWv8KNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:c4:9c:83:6a:90:ec:a8:14:d4:95:9d:e8:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Sep 22 11:01:04 2026 GMT
Not After : Sep 23 11:01:04 2026 GMT
Subject: CN=27a1c74e52cff0b913f310633bd4cab3f56862ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:a3:86:44:ce:09:41:b2:db:59:77:b7:41:
4f:e9:ea:ed:67:4a:31:0c:6e:64:07:d7:4a:8b:be:
bc:c6:26:70:b9:54:d5:72:7c:d1:8d:60:7c:04:e0:
9b:d1:f8:98:55:27:10:40:c3:e2:8d:ee:cb:13:07:
46:48:d0:73:92:8d:d0:56:fe:2b:44:10:73:77:18:
b6:e0:37:7e:cf:6e:52:73:25:71:59:57:96:e5:b9:
30:b5:a4:f4:7d:58:0c:1b:7f:ee:4d:38:4d:0a:bf:
81:60:70:e9:6f:02:61:ed:86:ed:f7:98:35:79:20:
d1:15:45:7e:ae:3a:f5:61:f3:6d:aa:dc:d6:0c:88:
33:de:8a:a8:f6:9e:ab:a0:cb:d4:74:e4:59:3a:5d:
d0:20:b9:74:a4:78:54:3b:95:04:6c:45:b4:fa:43:
d6:1c:e2:0e:f0:4c:58:8f:6e:94:b9:7b:e1:e5:67:
62:4c:87:83:6f:52:54:ef:f6:f0:2f:d1:a1:ee:a4:
e0:22:12:0b:01:18:8a:b0:62:a7:65:e7:de:46:49:
f5:74:45:bf:67:ce:bf:c9:22:d0:8c:23:04:67:f4:
3e:e9:ed:f1:7d:28:5a:49:2e:f2:ee:85:44:45:43:
4c:78:cb:b6:d9:eb:e9:e4:b0:3d:da:11:f9:a9:00:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:C7:4E:52:CF:F0:B9:13:F3:10:63:3B:D4:CA:B3:F5:68:62:AB
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:42:e1:27:26:e7:70:99:bf:ae:cf:88:0c:de:a5:da:9c:
ef:1f:5e:76:52:eb:05:80:f4:22:30:a7:4b:75:68:f6:be:39:
e1:6d:97:93:ff:76:22:78:df:9e:9f:06:d2:e4:67:81:13:d2:
d8:0b:77:25:c5:77:6d:a2:61:51:92:9e:db:f2:15:7b:9a:0e:
24:a5:c7:40:f4:da:8b:4d:91:bc:a3:49:96:08:08:34:01:cf:
f4:c7:dd:6e:71:4e:20:d1:20:a9:4e:31:89:28:eb:11:6b:bb:
8b:7b:ce:3b:56:d4:49:ad:8c:ea:ef:c1:4a:8c:fa:96:62:75:
83:a4:90:c2:c0:37:85:73:f6:ab:3d:fe:c1:90:19:36:a6:27:
e4:5d:4f:fd:18:00:8a:36:b6:ad:06:b8:4f:c0:d2:2b:f5:9a:
bb:a9:ec:41:8f:47:2a:a8:dc:84:1e:0c:bf:b0:76:10:6c:bf:
42:a8:5f:b5:be:2c:d2:81:26:0c:d8:6b:0d:69:79:7b:13:8a:
3d:04:9a:8c:9b:10:b2:7a:62:bd:41:ec:2f:cb:89:9d:bf:4a:
34:b7:c3:33:d7:3e:f2:b5:06:3c:e6:71:df:09:02:e8:44:a4:
85:0e:f9:f5:17:42:7c:ae:eb:c3:31:f2:e8:c5:aa:8e:7a:44:
40:c1:fb:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxsScg2qQ7KgU1JWd6M20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM3NDU5OTNjYzRiNmYxNDcwYWVhYjQ2MTRmMDg1ZDRh
ZTQwYTkwHhcNMjYwOTIyMTEwMTA0WhcNMjYwOTIzMTEwMTA0WjAzMTEwLwYDVQQD
EygyN2ExYzc0ZTUyY2ZmMGI5MTNmMzEwNjMzYmQ0Y2FiM2Y1Njg2MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf+jhkTOCUGy21l3t0FP6ertZ0ox
DG5kB9dKi768xiZwuVTVcnzRjWB8BOCb0fiYVScQQMPije7LEwdGSNBzko3QVv4r
RBBzdxi24Dd+z25ScyVxWVeW5bkwtaT0fVgMG3/uTThNCr+BYHDpbwJh7Ybt95g1
eSDRFUV+rjr1YfNtqtzWDIgz3oqo9p6roMvUdORZOl3QILl0pHhUO5UEbEW0+kPW
HOIO8ExYj26UuXvh5WdiTIeDb1JU7/bwL9Gh7qTgIhILARiKsGKnZefeRkn1dEW/
Z86/ySLQjCMEZ/Q+6e3xfShaSS7y7oVERUNMeMu22evp5LA92hH5qQDmhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCehx05Sz/C5E/MQYzvUyrP1aGKrMB8GA1UdIwQY
MBaAFO4sdFmTzEtvFHCuq0YU8IXUrkCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1Nzgt
NzcyYzkxNzdkNTI5LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yZGI0ZDAtOTg4Mi00NTYzLWE1NzgtNzcyYzkxNzdkNTI5
LzEvN2l4MFdaUE1TMjhVY0s2clJoVHdoZFN1UUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaulC4Scm
53CZv67PiAzepdqc7x9edlLrBYD0IjCnS3Vo9r454W2Xk/92Injfnp8G0uRngRPS
2At3JcV3baJhUZKe2/IVe5oOJKXHQPTai02RvKNJlggINAHP9MfdbnFOINEgqU4x
iSjrEWu7i3vOO1bUSa2M6u/BSoz6lmJ1g6SQwsA3hXP2qz3+wZAZNqYn5F1P/RgA
ija2rQa4T8DSK/Wau6nsQY9HKqjchB4Mv7B2EGy/Qqhftb4s0oEmDNhrDWl5exOK
PQSajJsQsnpivUHsL8uJnb9KNLfDM9c+8rUGPOZx3wkC6ESkhQ759RdCfK7rwzHy
6MWqjnpEQMH7yw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:10 2026 by rpki-client