
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: U7WP/iC5Ehf4TWlzPUR0f+PlAyGSWp1eUgbqMx+g/3w=
Subject key identifier: 96:33:59:42:7E:6A:61:BE:B6:36:C1:61:D9:69:54:AC:AB:87:3E:DA
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 01A0CF3643D71B263DF4DE9EAFE944ECFB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 1153
Signing time: Wed 23 Sep 2026 17:00:35 +0000
Manifest this update: Wed 23 Sep 2026 17:00:35 +0000
Manifest next update: Thu 24 Sep 2026 17:00:35 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: UVi9TqtGSVc+kbZHHPVBPVyHF7iBUP5pNmVPsswf2EE=)
2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:43:d7:1b:26:3d:f4:de:9e:af:e9:44:ec:fb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Sep 23 17:00:35 2026 GMT
Not After : Sep 24 17:00:35 2026 GMT
Subject: CN=963359427e6a61beb636c161d96954acab873eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:26:ee:f9:5f:2d:83:6c:44:71:0c:52:fb:
39:21:1b:86:10:61:de:ac:22:a1:ff:78:67:8c:e2:
8a:9a:02:e1:ca:09:7e:95:be:c2:25:58:bc:74:3f:
9d:29:38:b6:3f:6d:33:5d:a7:4a:1e:34:a8:fa:78:
a8:0c:8b:c8:6c:96:d6:ee:e2:a8:76:79:98:cf:c6:
e3:06:ec:4c:6a:07:1f:0d:2c:b3:41:37:1d:af:65:
76:54:d0:79:b1:8d:19:74:7c:be:4e:52:33:c6:23:
f4:e4:6a:d0:fe:fe:f0:69:cc:8f:3b:2b:17:47:18:
f8:79:85:e0:9c:57:c2:e6:8f:ad:bc:59:e0:94:29:
6a:1d:84:1a:3c:08:3d:18:7c:2e:7c:56:01:09:5b:
ca:5f:af:ca:82:7a:20:03:ef:5e:05:b4:89:05:c3:
40:71:eb:9c:2a:76:ed:66:9f:dd:fd:24:02:d5:a0:
5f:aa:7a:7b:60:ec:e0:09:73:38:19:54:72:01:96:
d2:25:89:e6:b7:08:af:34:b4:4c:e0:94:05:4a:f2:
02:c8:d8:8d:87:22:7b:d3:c8:2f:19:34:cb:a2:66:
bf:0d:f6:52:48:63:5c:6c:f6:17:5e:5f:62:23:d0:
ef:be:cf:49:e2:39:e2:4a:48:34:46:f4:b2:39:47:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:59:42:7E:6A:61:BE:B6:36:C1:61:D9:69:54:AC:AB:87:3E:DA
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:60:49:89:96:b5:05:37:ef:e2:0a:5e:40:bd:f6:df:2a:02:
76:0e:c8:df:40:a3:f3:af:4c:c9:bb:dc:b8:13:ec:8f:a4:69:
bc:e0:41:f2:61:d5:bd:34:ce:ad:07:f2:a5:a9:b7:4f:18:0c:
4b:84:ed:93:91:e1:95:5a:c0:c0:f7:19:cb:96:57:d5:da:52:
e9:35:67:55:4c:3e:d0:f5:95:c4:f7:f1:d7:ac:57:3d:be:4c:
10:b8:f0:98:fe:b5:9f:99:06:4d:ae:ee:52:2d:13:d0:5e:70:
3a:64:64:b7:42:87:5f:fd:b0:08:90:b4:62:74:12:58:72:42:
6c:31:cd:69:93:f0:e9:24:7d:76:58:e8:1f:51:e0:48:a9:e5:
df:3d:f9:78:92:59:d6:56:96:1b:1f:f9:65:3f:0c:2b:1e:ae:
41:da:58:1b:a3:18:81:f9:e0:91:b8:1b:54:3e:e8:66:f5:cc:
f7:82:b8:cb:d6:26:23:f1:48:4c:2b:50:62:b2:51:0b:a2:a7:
2a:2a:eb:6d:a2:c8:1a:ac:f6:36:96:de:d6:12:83:fa:f7:9d:
6e:f1:0e:a3:2e:c3:49:dc:c3:d2:de:53:2b:ee:97:64:d0:71:
bd:e9:d6:67:f5:81:ad:55:38:12:e8:5f:6d:76:dc:b4:99:23:
b3:df:37:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNkPXGyY99N6er+lE7PsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmY1YjUxOTk5NjM3YzgwYmY5M2M4YTkwM2QxNmMzYWVj
MjUzNDEwHhcNMjYwOTIzMTcwMDM1WhcNMjYwOTI0MTcwMDM1WjAzMTEwLwYDVQQD
Eyg5NjMzNTk0MjdlNmE2MWJlYjYzNmMxNjFkOTY5NTRhY2FiODczZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDEm7vlfLYNsRHEMUvs5IRuGEGHe
rCKh/3hnjOKKmgLhygl+lb7CJVi8dD+dKTi2P20zXadKHjSo+nioDIvIbJbW7uKo
dnmYz8bjBuxMagcfDSyzQTcdr2V2VNB5sY0ZdHy+TlIzxiP05GrQ/v7wacyPOysX
Rxj4eYXgnFfC5o+tvFnglClqHYQaPAg9GHwufFYBCVvKX6/KgnogA+9eBbSJBcNA
ceucKnbtZp/d/SQC1aBfqnp7YOzgCXM4GVRyAZbSJYnmtwivNLRM4JQFSvICyNiN
hyJ708gvGTTLoma/DfZSSGNcbPYXXl9iI9Dvvs9J4jniSkg0RvSyOUecRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYzWUJ+amG+tjbBYdlpVKyrhz7aMB8GA1UdIwQY
MBaAFO6/W1GZljfIC/k8ipA9FsOuwlNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAt
NTQyNGRjNjNlMmFjLzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83NTc3ZmQtM2I0NS00MDRhLWJmZTAtNTQyNGRjNjNlMmFj
LzEvN3I5YlVabVdOOGdMLVR5S2tEMFd3NjdDVTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2BJiZa1
BTfv4gpeQL323yoCdg7I30Cj869MybvcuBPsj6RpvOBB8mHVvTTOrQfypam3TxgM
S4Ttk5HhlVrAwPcZy5ZX1dpS6TVnVUw+0PWVxPfx16xXPb5MELjwmP61n5kGTa7u
Ui0T0F5wOmRkt0KHX/2wCJC0YnQSWHJCbDHNaZPw6SR9dljoH1HgSKnl3z35eJJZ
1laWGx/5ZT8MKx6uQdpYG6MYgfngkbgbVD7oZvXM94K4y9YmI/FITCtQYrJRC6Kn
KirrbaLIGqz2Npbe1hKD+vedbvEOoy7DSdzD0t5TK+6XZNBxvenWZ/WBrVU4Euhf
bXbctJkjs9834Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:43:46 2026 by rpki-client