Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: vU7Ig+vu/ouv0mSfRPU8lv1h/7YhP7H7PH//yqJiAdo=
Subject key identifier: 75:0F:05:B1:33:AF:69:FD:7B:45:13:4C:4C:29:FF:94:CF:BC:AE:F8
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 01A0D8A7E646E6501ADC9007913ACBD74160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 13:01:17 +0000
Manifest this update: Fri 25 Sep 2026 13:01:17 +0000
Manifest next update: Sat 26 Sep 2026 13:01:17 +0000
Files and hashes: 1: 0xwfSsFkb05U4ozVSEb8hCqR4ZM.roa (hash: wDnxCrMW737wBP0bFwNqAOo1oxv3iXJSRvzrJ/qp1Dc=)
2: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: 7tJb6hiNobJbXQwSRrUpYyCZeVT+E5aM3my4Dj+qIxs=)
3: zq7GSsBTb4iCu4BsJeZ1X5mLg0g.roa (hash: wAonBOQHcI2HVnsLhr53pN++Gv5Cyj0r6V/3M0lZCdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:e6:46:e6:50:1a:dc:90:07:91:3a:cb:d7:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Sep 25 13:01:17 2026 GMT
Not After : Sep 26 13:01:17 2026 GMT
Subject: CN=750f05b133af69fd7b45134c4c29ff94cfbcaef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:64:30:7e:43:47:df:6c:51:d9:c9:80:cc:
aa:35:0e:a3:ea:f3:17:ac:7b:4a:6a:77:d9:0c:8f:
2a:eb:b7:1d:65:20:f8:5c:12:92:d9:a2:83:1c:bd:
c9:e3:4c:a9:32:8b:80:66:78:5b:6b:47:68:ca:9a:
53:ef:89:fa:f5:7c:02:1e:51:1c:5a:46:12:49:f7:
3a:e1:a9:a3:31:a2:ef:e9:f3:3e:93:65:1e:ea:9d:
b1:b1:3f:7e:a0:4a:fe:94:4d:8e:65:fa:c2:df:c0:
52:de:0c:14:35:cc:a0:bf:61:60:55:0f:8e:72:75:
fd:c3:a0:7b:8a:37:39:f6:4c:c1:5a:65:c0:6d:e1:
d4:4e:ae:7e:4f:1d:73:e1:db:64:04:78:89:e0:04:
25:35:92:b1:e6:00:e0:93:95:8e:52:b8:29:cb:d2:
bd:62:b3:5d:78:20:94:29:1c:78:cd:c5:54:28:c1:
6e:c0:c1:24:a5:7a:37:db:0c:d2:fb:e0:62:90:00:
77:eb:5e:d9:81:0a:dc:ed:d4:25:a0:86:3d:45:46:
4f:a4:cd:09:fa:e1:7b:1b:4e:98:c8:71:ad:dd:cb:
66:ef:89:77:99:8a:ac:88:cd:70:53:76:06:9e:eb:
63:75:34:54:0d:09:29:a6:e9:de:ee:eb:4e:1d:60:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:05:B1:33:AF:69:FD:7B:45:13:4C:4C:29:FF:94:CF:BC:AE:F8
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c3:ca:4b:e6:75:f1:9c:31:93:32:ca:5c:d7:6d:47:bc:ad:
59:95:77:d5:6c:ee:dd:ab:e7:55:cc:0a:ab:e3:e9:df:fe:ea:
ca:20:15:c5:37:9e:bd:00:46:47:21:15:28:11:98:b8:1a:a5:
68:b0:f4:f2:a7:3c:28:0f:ca:c4:8f:f6:6e:93:41:99:5c:9f:
60:f3:b6:0d:b4:58:79:f3:65:13:08:59:86:66:b9:d0:3e:23:
22:29:09:84:17:d3:66:e9:20:85:82:39:77:eb:07:80:27:03:
ed:5b:60:d3:26:62:a8:3d:fa:0a:ff:75:38:24:6a:b0:e8:be:
9a:7a:ac:6d:82:f7:1f:1b:82:09:1a:b4:76:c9:8c:72:2e:15:
06:16:6e:46:ac:be:92:4e:1c:be:c0:1b:00:27:ec:e3:7b:47:
37:2f:59:55:ee:f5:03:a2:3e:7d:4b:90:a5:eb:1e:8a:a1:1d:
c7:7a:36:55:8e:bc:d1:c8:b4:23:44:d5:9c:d1:63:9b:a4:00:
db:64:9e:25:d3:f4:cc:ca:2f:1a:ac:75:a6:58:e9:f2:49:51:
15:8b:d3:35:ab:bf:ae:7f:a4:0f:b8:e4:91:5b:a5:f5:3f:5b:
be:93:86:5d:86:b1:1d:72:d6:56:f5:f6:fb:c9:90:ac:63:be:
71:b8:55:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYp+ZG5lAa3JAHkTrL10FgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjYwOTI1MTMwMTE3WhcNMjYwOTI2MTMwMTE3WjAzMTEwLwYDVQQD
Eyg3NTBmMDViMTMzYWY2OWZkN2I0NTEzNGM0YzI5ZmY5NGNmYmNhZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FRkMH5DR99sUdnJgMyqNQ6j6vMX
rHtKanfZDI8q67cdZSD4XBKS2aKDHL3J40ypMouAZnhba0doyppT74n69XwCHlEc
WkYSSfc64amjMaLv6fM+k2Ue6p2xsT9+oEr+lE2OZfrC38BS3gwUNcygv2FgVQ+O
cnX9w6B7ijc59kzBWmXAbeHUTq5+Tx1z4dtkBHiJ4AQlNZKx5gDgk5WOUrgpy9K9
YrNdeCCUKRx4zcVUKMFuwMEkpXo32wzS++BikAB3617ZgQrc7dQloIY9RUZPpM0J
+uF7G06YyHGt3ctm74l3mYqsiM1wU3YGnutjdTRUDQkppune7utOHWCUeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUPBbEzr2n9e0UTTEwp/5TPvK74MB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMPKS+Z1
8ZwxkzLKXNdtR7ytWZV31Wzu3avnVcwKq+Pp3/7qyiAVxTeevQBGRyEVKBGYuBql
aLD08qc8KA/KxI/2bpNBmVyfYPO2DbRYefNlEwhZhma50D4jIikJhBfTZukghYI5
d+sHgCcD7Vtg0yZiqD36Cv91OCRqsOi+mnqsbYL3HxuCCRq0dsmMci4VBhZuRqy+
kk4cvsAbACfs43tHNy9ZVe71A6I+fUuQpeseiqEdx3o2VY680ci0I0TVnNFjm6QA
22SeJdP0zMovGqx1pljp8klRFYvTNau/rn+kD7jkkVul9T9bvpOGXYaxHXLWVvX2
+8mQrGO+cbhVtg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:26:09 2026 by rpki-client