Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: yVu5yS78Amwdm9+kLg4P1xZKYv66uHUYa61JlFfRZ4U=
Subject key identifier: EC:49:73:05:19:38:D4:15:66:A7:0D:3C:7D:77:C0:3D:02:1D:27:C7
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 01A0C2C3E439E44747E3927FBBDF1B419D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 07:00:12 +0000
Manifest this update: Mon 21 Sep 2026 07:00:12 +0000
Manifest next update: Tue 22 Sep 2026 07:00:12 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: LIeH/MiHdXVT0PR9rQtWvGhFirsM67j+Um0nasI5QA8=)
2: Y1SgnZdGMmo9fGpuJl7wUQaxlkc.roa (hash: c5a6z6fFSi3Ksmn1qg/vCHzequVOvVzrYowSPYYXoZY=)
3: zgjOZSAzojMMAhNOHNiG97-1lKs.roa (hash: 9AqyfTSVIr04hBsXGR4iW4XjBoNFR8P2652xVPdhD0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:e4:39:e4:47:47:e3:92:7f:bb:df:1b:41:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Sep 21 07:00:12 2026 GMT
Not After : Sep 22 07:00:12 2026 GMT
Subject: CN=ec4973051938d41566a70d3c7d77c03d021d27c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:2f:78:dc:46:9e:06:f8:6b:31:a9:e5:a0:
d6:9a:7e:92:d6:b5:b2:fa:b8:30:4d:45:f3:e9:5b:
10:35:85:ab:29:bc:a7:2b:71:18:45:a0:bf:d4:2f:
27:89:e7:2a:e2:42:47:b6:5f:34:e7:e6:0a:7a:5e:
8e:07:f2:8f:9a:1c:dd:c1:09:aa:4f:f1:75:66:67:
62:79:e8:d0:65:f3:77:bc:f4:22:00:49:2d:a8:47:
62:cb:16:53:ab:9d:a1:31:b9:4a:15:05:d4:c2:77:
84:9d:06:5a:2f:7b:ad:ff:50:93:90:56:96:36:fc:
9b:7d:87:65:26:e1:be:5c:3c:c3:72:82:15:04:e4:
34:bb:b6:8e:9a:d4:e3:98:91:3f:d7:38:15:3e:60:
c5:83:76:95:74:4d:eb:fb:e1:33:cc:3c:1e:79:1f:
74:a2:e9:1a:89:16:94:4d:31:61:fe:f6:48:1f:03:
a4:8d:ab:8d:74:18:0c:de:9e:63:08:4b:3e:1e:8b:
31:86:2e:e6:8c:9a:4c:d3:81:03:f8:f7:2b:a2:8d:
d6:bf:37:32:9d:c9:d6:10:ba:85:ab:00:ff:95:c6:
f7:51:b8:9c:20:d1:92:07:59:10:11:d3:8f:f4:5c:
93:0c:43:c4:78:2d:46:d8:50:35:0d:1c:6d:62:0e:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:73:05:19:38:D4:15:66:A7:0D:3C:7D:77:C0:3D:02:1D:27:C7
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:8e:21:d7:98:4e:a5:d4:11:3f:b8:fa:bb:59:af:e1:87:
69:05:db:66:b0:21:8e:64:db:4e:20:25:54:77:1e:45:4e:2b:
db:0a:c3:29:35:bb:78:26:d3:19:d7:c1:93:02:40:7e:6d:24:
c3:e7:a7:9d:2c:9c:40:75:ab:d2:02:1e:b9:62:98:ca:9e:25:
e9:e9:54:af:04:d4:93:78:1c:26:1e:5c:e8:95:7a:f4:75:7e:
30:0b:ce:17:70:7f:87:9d:1a:6b:ae:fe:f2:b9:1e:01:55:18:
b2:a9:63:55:4c:f8:f7:c4:6d:0a:ed:ae:fb:ee:b8:7e:c9:a4:
2c:3f:77:c7:6f:0f:6a:79:db:0f:5d:9c:ba:93:8e:51:91:45:
e0:29:0a:79:64:33:db:33:47:cd:c7:f9:94:69:07:80:e5:f8:
d3:58:ae:b8:2a:06:c1:db:79:91:f8:36:c4:88:78:bc:02:9d:
ad:16:06:18:12:73:cb:51:69:97:ad:b6:21:92:82:d7:79:0c:
94:1b:44:fd:ee:af:25:2f:ad:5d:cf:0e:de:ef:af:78:ab:b7:
c0:19:84:59:eb:0c:5a:20:60:02:d6:e9:a3:3c:a2:72:9d:18:
93:f0:4e:a4:aa:95:03:f3:4b:1a:59:9e:3a:bb:51:c3:2e:bc:
09:4c:26:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCw+Q55EdH45J/u98bQZ0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjFlYTVhMTA1MGE4MjkyMjRlYTQ4NmMwZTIyZWJmYzc1
ZDY0MGMwHhcNMjYwOTIxMDcwMDEyWhcNMjYwOTIyMDcwMDEyWjAzMTEwLwYDVQQD
EyhlYzQ5NzMwNTE5MzhkNDE1NjZhNzBkM2M3ZDc3YzAzZDAyMWQyN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkQveNxGngb4azGp5aDWmn6S1rWy
+rgwTUXz6VsQNYWrKbynK3EYRaC/1C8niecq4kJHtl805+YKel6OB/KPmhzdwQmq
T/F1ZmdieejQZfN3vPQiAEktqEdiyxZTq52hMblKFQXUwneEnQZaL3ut/1CTkFaW
NvybfYdlJuG+XDzDcoIVBOQ0u7aOmtTjmJE/1zgVPmDFg3aVdE3r++EzzDweeR90
oukaiRaUTTFh/vZIHwOkjauNdBgM3p5jCEs+Hosxhi7mjJpM04ED+Pcroo3Wvzcy
ncnWELqFqwD/lcb3UbicINGSB1kQEdOP9FyTDEPEeC1G2FA1DRxtYg55TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxJcwUZONQVZqcNPH13wD0CHSfHMB8GA1UdIwQY
MBaAFOyx6loQUKgpIk6khsDiLr/HXWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2Ut
MDJmZmNlZmYxYWNjLzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMWE5MjctOGRkMy00OGY3LTkyY2UtMDJmZmNlZmYxYWNj
LzEvN0xIcVdoQlFxQ2tpVHFTR3dPSXV2OGRkWkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLSOIdeY
TqXUET+4+rtZr+GHaQXbZrAhjmTbTiAlVHceRU4r2wrDKTW7eCbTGdfBkwJAfm0k
w+ennSycQHWr0gIeuWKYyp4l6elUrwTUk3gcJh5c6JV69HV+MAvOF3B/h50aa67+
8rkeAVUYsqljVUz498RtCu2u++64fsmkLD93x28PannbD12cupOOUZFF4CkKeWQz
2zNHzcf5lGkHgOX401iuuCoGwdt5kfg2xIh4vAKdrRYGGBJzy1Fpl622IZKC13kM
lBtE/e6vJS+tXc8O3u+veKu3wBmEWesMWiBgAtbpozyicp0Yk/BOpKqVA/NLGlme
OrtRwy68CUwmkQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:30:57 2026 by rpki-client