Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
File: acA7C-qHQIZh8Lc459C51ou9TkY.mft (raw, json)
Hash identifier: HDvnTEnHPe0UK6FBsi8/sCa37W/h+fyg3Vg8gHQHJvU=
Subject key identifier: 68:29:5B:0B:6F:B8:AA:9E:72:84:31:FF:F3:A2:B7:20:FE:30:E5:FD
Authority key identifier: 69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
Certificate issuer: /CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Certificate serial: 01A0C9A2622E5E7A7855F7A295C9C0751572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
Manifest number: B7
Signing time: Tue 22 Sep 2026 15:00:57 +0000
Manifest this update: Tue 22 Sep 2026 15:00:57 +0000
Manifest next update: Wed 23 Sep 2026 15:00:57 +0000
Files and hashes: 1: WP1pAPn1gT-3pBILANNDcC6Hht0.roa (hash: 4KjNR2kyaEteKZKlG9S1UesNiA2a4f31T3kLjP3m3Dg=)
2: acA7C-qHQIZh8Lc459C51ou9TkY.crl (hash: 6rkT/L7L1bQKLxx6s92OhiS3xJeQYzzQoe1DvD3PYzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:62:2e:5e:7a:78:55:f7:a2:95:c9:c0:75:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c03b0bea87408661f0b738e7d0b9d68bbd4e46
Validity
Not Before: Sep 22 15:00:57 2026 GMT
Not After : Sep 23 15:00:57 2026 GMT
Subject: CN=68295b0b6fb8aa9e728431fff3a2b720fe30e5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:0e:c3:ed:df:24:32:34:64:38:f9:f9:75:
81:9c:90:3f:1d:67:12:a4:1a:58:fd:27:0c:4f:3e:
87:01:16:1a:1c:ba:e0:cd:c3:53:55:a7:5c:6b:4f:
27:1f:82:15:9f:a2:f7:09:0e:73:e0:bb:d2:bf:ac:
98:77:21:ed:87:5e:31:09:13:57:5d:43:1a:58:5d:
45:a5:c6:31:d9:90:82:d5:a7:c7:94:6f:ea:c6:f9:
61:52:dd:e6:3f:23:5d:3c:a7:fa:af:4e:d0:3b:64:
7a:ff:81:3c:fa:32:c9:65:bc:f2:86:bf:a1:37:3b:
8d:c2:3b:7f:ea:16:3c:85:f2:4b:86:d3:ea:f4:66:
7b:3e:4f:e8:0e:18:3a:d5:21:6f:cd:ad:f1:55:7c:
d1:55:d1:16:c3:ff:a3:97:d0:f1:76:5d:d7:97:46:
6e:3d:f5:48:fd:a2:b5:84:bd:11:0a:83:79:6c:e6:
df:2d:cc:71:0f:a1:55:c1:a5:d1:be:d0:e4:78:53:
cf:43:d9:e0:89:ce:05:f1:23:a8:83:2d:fe:2c:4d:
ec:7e:de:91:2d:7d:f2:10:ff:e8:a2:a6:6f:3a:c9:
21:ba:95:91:92:02:f2:ac:af:56:4f:34:92:05:92:
eb:38:9f:97:01:da:bc:a1:98:1d:e2:09:b6:98:29:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:5B:0B:6F:B8:AA:9E:72:84:31:FF:F3:A2:B7:20:FE:30:E5:FD
X509v3 Authority Key Identifier:
keyid:69:C0:3B:0B:EA:87:40:86:61:F0:B7:38:E7:D0:B9:D6:8B:BD:4E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acA7C-qHQIZh8Lc459C51ou9TkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d897ab-ad17-4997-9490-41793de7c491/1/acA7C-qHQIZh8Lc459C51ou9TkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c4:55:3d:50:c1:4a:af:e2:b8:36:2e:2b:7f:cd:a6:48:38:
ec:0b:b2:89:87:4e:af:cb:e2:50:5e:8d:a2:76:dc:40:08:ed:
24:39:05:c7:94:75:35:1d:2f:f9:93:e0:3a:32:28:de:d0:b8:
e6:66:80:e2:7f:25:e0:6d:86:3e:03:4c:af:3d:c3:44:47:66:
82:ea:c3:f7:88:22:53:60:7e:3a:cd:27:63:30:7a:d7:d2:b7:
3f:d5:03:4d:3e:e1:52:f2:0f:e7:74:fa:29:16:b2:da:a5:9a:
49:a4:a7:3a:df:d3:81:b3:77:49:55:f2:e3:5a:28:01:45:e8:
91:6b:21:22:8f:ca:a4:85:10:37:eb:46:2d:97:e2:56:09:29:
18:ae:91:22:9e:08:ad:de:dd:0c:5f:5c:e5:f6:4c:a0:55:84:
17:97:10:21:56:ca:db:33:7c:36:23:2f:43:c2:4b:77:48:e0:
b0:c5:db:e9:4d:1d:07:04:b7:c5:60:93:ab:95:c5:6f:76:85:
9f:64:1d:ff:b9:e8:87:58:c0:14:30:8d:39:f0:32:e9:b5:f3:
22:f0:72:44:94:1c:37:b3:7a:fe:87:45:29:34:cf:3b:18:9c:
50:f6:9b:40:4b:38:51:9d:4f:43:f3:d6:bb:71:16:f6:6b:b2:
ab:23:7e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJomIuXnp4VfeilcnAdRVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzAzYjBiZWE4NzQwODY2MWYwYjczOGU3ZDBiOWQ2OGJi
ZDRlNDYwHhcNMjYwOTIyMTUwMDU3WhcNMjYwOTIzMTUwMDU3WjAzMTEwLwYDVQQD
Eyg2ODI5NWIwYjZmYjhhYTllNzI4NDMxZmZmM2EyYjcyMGZlMzBlNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9kOw+3fJDI0ZDj5+XWBnJA/HWcS
pBpY/ScMTz6HARYaHLrgzcNTVadca08nH4IVn6L3CQ5z4LvSv6yYdyHth14xCRNX
XUMaWF1FpcYx2ZCC1afHlG/qxvlhUt3mPyNdPKf6r07QO2R6/4E8+jLJZbzyhr+h
NzuNwjt/6hY8hfJLhtPq9GZ7Pk/oDhg61SFvza3xVXzRVdEWw/+jl9Dxdl3Xl0Zu
PfVI/aK1hL0RCoN5bObfLcxxD6FVwaXRvtDkeFPPQ9ngic4F8SOogy3+LE3sft6R
LX3yEP/ooqZvOskhupWRkgLyrK9WTzSSBZLrOJ+XAdq8oZgd4gm2mCnpxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgpWwtvuKqecoQx//OityD+MOX9MB8GA1UdIwQY
MBaAFGnAOwvqh0CGYfC3OOfQudaLvU5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNBN0MtcUhRSVpoOExjNDU5QzUxb3U5VGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk3YWItYWQxNy00OTk3LTk0OTAt
NDE3OTNkZTdjNDkxLzEvYWNBN0MtcUhRSVpoOExjNDU5QzUxb3U5VGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kODk3YWItYWQxNy00OTk3LTk0OTAtNDE3OTNkZTdjNDkx
LzEvYWNBN0MtcUhRSVpoOExjNDU5QzUxb3U5VGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMRVPVDB
Sq/iuDYuK3/Npkg47AuyiYdOr8viUF6NonbcQAjtJDkFx5R1NR0v+ZPgOjIo3tC4
5maA4n8l4G2GPgNMrz3DREdmgurD94giU2B+Os0nYzB619K3P9UDTT7hUvIP53T6
KRay2qWaSaSnOt/TgbN3SVXy41ooAUXokWshIo/KpIUQN+tGLZfiVgkpGK6RIp4I
rd7dDF9c5fZMoFWEF5cQIVbK2zN8NiMvQ8JLd0jgsMXb6U0dBwS3xWCTq5XFb3aF
n2Qd/7noh1jAFDCNOfAy6bXzIvByRJQcN7N6/odFKTTPOxicUPabQEs4UZ1PQ/PW
u3EW9muyqyN+RA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:21 2026 by rpki-client