Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: CwZ490PmZL5KUSQRdPRmIGdSXAt6tloGYHWOBw3uZSg=
Subject key identifier: A4:9D:11:F3:BA:EC:85:F8:73:1D:D8:A5:23:78:F5:57:F7:A0:2D:2D
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 01A0C28D62E718071BF215D5C575188A901D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 06:00:40 +0000
Manifest this update: Mon 21 Sep 2026 06:00:40 +0000
Manifest next update: Tue 22 Sep 2026 06:00:40 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: N8geONm6ouW4KJjIp5wfEF8rr5DxOF3iE9RBLUgp26g=)
2: 7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa (hash: ytpfJ9vNS5JwRc89yU0uWlEyTvzj77675KecMolldFc=)
3: Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa (hash: f1TQFLKcOmbSU1W2vbI+gyaehRaTN+oWeXN0L2tAh3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:62:e7:18:07:1b:f2:15:d5:c5:75:18:8a:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Sep 21 06:00:40 2026 GMT
Not After : Sep 22 06:00:40 2026 GMT
Subject: CN=a49d11f3baec85f8731dd8a52378f557f7a02d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:71:0e:ff:59:0c:16:fd:df:66:f8:85:08:
d3:e1:1a:4b:0b:68:6f:1c:3d:06:13:af:49:c1:42:
fb:2e:18:6c:de:4c:d7:f7:e6:b0:0a:75:58:64:85:
73:9e:ec:b8:18:3c:e2:1c:3e:42:14:e0:2d:ab:6f:
75:27:be:d0:96:bb:b6:7d:8c:c2:8b:91:f5:00:a3:
a6:bd:4a:95:62:7c:59:49:ed:d9:c9:d5:40:c1:13:
67:25:93:cb:0f:54:2e:cf:93:71:c0:7f:0f:04:17:
39:18:15:54:2f:25:81:c8:7c:11:ce:54:2c:65:74:
2a:b7:c5:6a:20:e8:23:b9:b7:17:95:8e:2c:19:74:
e8:07:e1:59:b6:d9:fd:6f:83:fb:21:04:bc:8f:de:
73:1a:32:ba:3a:83:b4:2b:b6:13:51:52:cf:60:3d:
49:8e:30:6a:6e:77:4b:c3:8b:a8:69:1a:2f:4e:65:
4a:36:80:5f:3d:27:d4:9f:20:ff:94:24:7e:78:aa:
0d:f3:40:5a:3d:10:81:a1:0f:74:35:80:5a:f2:ac:
0f:8f:91:5a:f6:e9:ae:79:65:68:e4:34:13:b3:71:
6d:94:a4:98:25:8f:cd:a4:79:82:47:11:a0:3c:9e:
a2:16:f9:94:e2:32:7f:3d:b7:d4:07:c4:9e:38:ee:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9D:11:F3:BA:EC:85:F8:73:1D:D8:A5:23:78:F5:57:F7:A0:2D:2D
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bd:64:d5:bf:bc:b8:ac:7b:08:1e:93:01:45:92:93:f3:34:
ed:89:78:24:00:dc:e0:ea:81:de:67:66:be:e4:d0:21:5b:44:
66:4c:42:59:11:45:9e:18:3c:be:1a:9c:f4:9c:b6:c6:da:b9:
1e:1d:66:26:b8:81:ef:0c:cc:13:e9:fb:a9:35:6d:e3:00:cd:
57:3d:24:6d:dc:26:f9:93:1a:c0:ba:10:bf:4a:43:92:94:32:
1f:43:f5:71:b2:b4:8b:fe:3e:04:27:40:c4:7b:d6:fc:e6:5f:
45:ae:3f:1c:cd:12:f3:d6:cd:41:d3:2c:d8:fa:31:81:c1:74:
53:42:ee:cd:38:ed:f8:d3:2d:bb:b2:0f:1e:01:53:74:c2:70:
81:03:85:4e:b4:34:0c:ea:2e:1a:04:8c:04:d7:10:f4:9e:cf:
93:8c:c7:c3:e5:3d:23:09:5c:05:3b:1b:4d:61:1e:08:1a:e4:
2e:18:6b:e7:b3:de:85:6b:65:99:10:c6:23:cd:fb:b0:eb:4b:
e8:2e:fa:1a:4b:30:5f:19:cc:f1:4e:b5:fa:46:37:a3:44:ca:
2d:0b:81:f1:4d:2e:94:77:eb:d6:d4:49:f1:13:f2:f9:cf:95:
eb:55:66:cb:4c:91:7d:7f:77:c7:3d:a5:41:e8:92:a0:bf:94:
1f:92:cc:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjWLnGAcb8hXVxXUYipAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0
ZTEzNDEwHhcNMjYwOTIxMDYwMDQwWhcNMjYwOTIyMDYwMDQwWjAzMTEwLwYDVQQD
EyhhNDlkMTFmM2JhZWM4NWY4NzMxZGQ4YTUyMzc4ZjU1N2Y3YTAyZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqRxDv9ZDBb932b4hQjT4RpLC2hv
HD0GE69JwUL7Lhhs3kzX9+awCnVYZIVznuy4GDziHD5CFOAtq291J77Qlru2fYzC
i5H1AKOmvUqVYnxZSe3ZydVAwRNnJZPLD1Quz5NxwH8PBBc5GBVULyWByHwRzlQs
ZXQqt8VqIOgjubcXlY4sGXToB+FZttn9b4P7IQS8j95zGjK6OoO0K7YTUVLPYD1J
jjBqbndLw4uoaRovTmVKNoBfPSfUnyD/lCR+eKoN80BaPRCBoQ90NYBa8qwPj5Fa
9umueWVo5DQTs3FtlKSYJY/NpHmCRxGgPJ6iFvmU4jJ/PbfUB8SeOO48rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSdEfO67IX4cx3YpSN49Vf3oC0tMB8GA1UdIwQY
MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt
ZDNmNmNkOGU0NDQ0LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0
LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPL1k1b+8
uKx7CB6TAUWSk/M07Yl4JADc4OqB3mdmvuTQIVtEZkxCWRFFnhg8vhqc9Jy2xtq5
Hh1mJriB7wzME+n7qTVt4wDNVz0kbdwm+ZMawLoQv0pDkpQyH0P1cbK0i/4+BCdA
xHvW/OZfRa4/HM0S89bNQdMs2PoxgcF0U0LuzTjt+NMtu7IPHgFTdMJwgQOFTrQ0
DOouGgSMBNcQ9J7Pk4zHw+U9IwlcBTsbTWEeCBrkLhhr57PehWtlmRDGI837sOtL
6C76GkswXxnM8U61+kY3o0TKLQuB8U0ulHfr1tRJ8RPy+c+V61Vmy0yRfX93xz2l
QeiSoL+UH5LM9g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:30:29 2026 by rpki-client