Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: X9JLGedTC0G+FyIZb2jC0vMNEmiSjuGaoDxiAzcBEx8=
Subject key identifier: 1E:1A:4D:7F:26:FB:6E:1B:C0:91:AC:19:B4:24:00:16:84:84:5C:01
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 01A0DB7210FD9841DB0EF72C63304B64449A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 14FD
Signing time: Sat 26 Sep 2026 02:01:20 +0000
Manifest this update: Sat 26 Sep 2026 02:01:20 +0000
Manifest next update: Sun 27 Sep 2026 02:01:20 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: pMdHDCVfvI0Kk+VLdOv2UFbHVU+XLXhE/w1fPTCP+mo=)
2: _Uw3PwW3zuhX_9qdNVHM9xLSh_Y.roa (hash: pJtmufqjt3E+bTnB46Z/8QQdZ6WxLHIqysmmyqJfzzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:10:fd:98:41:db:0e:f7:2c:63:30:4b:64:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Sep 26 02:01:20 2026 GMT
Not After : Sep 27 02:01:20 2026 GMT
Subject: CN=1e1a4d7f26fb6e1bc091ac19b424001684845c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:71:86:c4:7e:96:8f:4d:ce:e7:33:c4:04:
21:2b:04:e7:70:ae:55:38:cf:d7:56:fa:e5:cf:ad:
fd:ac:f4:cd:28:6e:ae:93:e8:10:0c:39:5f:48:36:
0b:84:9b:4a:03:e9:a2:89:a6:00:d5:e7:c5:91:d7:
36:ca:bb:3c:2f:cc:a0:ba:58:f9:ee:88:7a:26:08:
bb:23:5a:00:11:b8:6e:f8:11:51:9e:4f:ef:87:90:
9a:71:79:d0:65:f3:cb:0c:2d:0f:01:f6:3d:ec:f0:
4b:3d:fb:f1:c8:21:81:34:e2:33:e7:10:5f:b5:a5:
44:94:a1:d1:31:1c:14:c4:13:80:38:b5:a7:3e:41:
16:ff:89:63:19:52:9c:d6:8b:4f:a8:79:ab:e7:44:
f5:5d:30:00:95:df:30:47:de:c2:77:c1:9a:23:43:
9e:2c:11:ae:62:54:d9:38:60:d8:3a:22:9f:71:e6:
45:e8:54:a2:79:7e:72:53:1b:7c:0c:d0:be:f5:f2:
93:60:cb:43:51:0f:29:d4:e0:9c:5f:2c:1d:f0:65:
64:f4:8a:47:c0:ca:63:ad:0c:d5:97:e1:d4:0e:fe:
6d:04:5a:49:82:09:7f:68:94:c7:ea:96:5d:8d:8b:
80:a9:d3:c4:cb:c4:65:2c:b7:7b:6f:c1:ed:d3:38:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:4D:7F:26:FB:6E:1B:C0:91:AC:19:B4:24:00:16:84:84:5C:01
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:f6:bb:b1:f7:61:c5:f2:83:53:1d:0b:73:e3:03:ec:62:
e2:78:a2:ab:c3:e6:b7:66:bf:34:ef:0a:de:54:94:a0:94:2e:
c1:d6:27:71:f9:ce:34:4c:f8:79:7b:92:e5:95:87:3c:79:cc:
12:ed:db:d6:d2:77:4c:3f:54:5d:bc:c6:7d:10:5e:af:b6:88:
68:19:eb:d5:80:2e:ce:60:ad:9a:97:54:2b:81:53:97:ca:4e:
dd:d4:15:19:ff:d3:9d:02:48:cb:cf:e0:ac:e0:34:33:0e:27:
6e:71:07:94:97:e0:29:cf:bb:53:85:46:4e:ed:fe:cb:ea:1a:
44:22:bd:ec:08:fc:31:86:84:a5:09:1a:b8:1a:a9:e2:f6:b5:
c2:36:8c:d8:c5:24:1e:8c:39:5c:cf:4d:8b:b6:7d:10:21:87:
95:86:b5:7d:9f:6a:6c:65:52:2a:76:80:1c:d8:c7:8f:bd:65:
52:16:50:25:e6:12:4b:01:88:89:94:57:9d:02:85:c4:ad:31:
03:3d:d7:3f:e5:1d:07:64:2c:03:c5:ed:f9:2f:45:14:45:6c:
87:11:13:cd:1e:35:ec:06:4e:39:22:39:59:62:ac:a8:43:db:
d7:81:f7:85:2b:33:09:98:8f:3d:4e:4b:db:9b:7a:a4:9f:fe:
a4:99:97:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbchD9mEHbDvcsYzBLZESaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjYwOTI2MDIwMTIwWhcNMjYwOTI3MDIwMTIwWjAzMTEwLwYDVQQD
EygxZTFhNGQ3ZjI2ZmI2ZTFiYzA5MWFjMTliNDI0MDAxNjg0ODQ1YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoZxhsR+lo9NzuczxAQhKwTncK5V
OM/XVvrlz639rPTNKG6uk+gQDDlfSDYLhJtKA+miiaYA1efFkdc2yrs8L8ygulj5
7oh6Jgi7I1oAEbhu+BFRnk/vh5CacXnQZfPLDC0PAfY97PBLPfvxyCGBNOIz5xBf
taVElKHRMRwUxBOAOLWnPkEW/4ljGVKc1otPqHmr50T1XTAAld8wR97Cd8GaI0Oe
LBGuYlTZOGDYOiKfceZF6FSieX5yUxt8DNC+9fKTYMtDUQ8p1OCcXywd8GVk9IpH
wMpjrQzVl+HUDv5tBFpJggl/aJTH6pZdjYuAqdPEy8RlLLd7b8Ht0zgoAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4aTX8m+24bwJGsGbQkABaEhFwBMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHP2u7H3
YcXyg1MdC3PjA+xi4niiq8Pmt2a/NO8K3lSUoJQuwdYncfnONEz4eXuS5ZWHPHnM
Eu3b1tJ3TD9UXbzGfRBer7aIaBnr1YAuzmCtmpdUK4FTl8pO3dQVGf/TnQJIy8/g
rOA0Mw4nbnEHlJfgKc+7U4VGTu3+y+oaRCK97Aj8MYaEpQkauBqp4va1wjaM2MUk
How5XM9Ni7Z9ECGHlYa1fZ9qbGVSKnaAHNjHj71lUhZQJeYSSwGIiZRXnQKFxK0x
Az3XP+UdB2QsA8Xt+S9FFEVshxETzR417AZOOSI5WWKsqEPb14H3hSszCZiPPU5L
25t6pJ/+pJmXwQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:53:35 2026 by rpki-client