Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: T2iibK6eszebl8TW8VwOFRzP346k/cFHChmll6t+khU=
Subject key identifier: 4E:08:EF:B6:65:09:48:D3:80:E5:A8:86:F6:6C:68:54:35:6A:C9:E4
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 01A0C39F959B42C1E9948B9AC4FC21AE8F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 139C
Signing time: Mon 21 Sep 2026 11:00:10 +0000
Manifest this update: Mon 21 Sep 2026 11:00:10 +0000
Manifest next update: Tue 22 Sep 2026 11:00:10 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: 8RZJBXlMmubEaMQdO1QutmZ91Lx6qi0zA/Xa305mFp0=)
2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:95:9b:42:c1:e9:94:8b:9a:c4:fc:21:ae:8f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Sep 21 11:00:10 2026 GMT
Not After : Sep 22 11:00:10 2026 GMT
Subject: CN=4e08efb6650948d380e5a886f66c6854356ac9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:ac:12:0d:1d:69:e2:fb:95:6e:4c:f6:25:
dc:ad:bd:79:61:34:b4:ca:3e:8c:a7:29:e6:aa:3a:
20:f2:61:99:15:73:2d:68:c1:c8:40:84:2f:d0:a8:
61:59:79:54:0e:40:c4:60:53:ba:08:bd:7d:e5:b6:
57:d1:38:0d:89:8b:39:f7:a7:b1:5d:a2:70:63:c7:
17:65:f8:09:18:0d:8a:a1:bc:12:33:f7:c7:3e:52:
50:49:cb:d9:6d:30:1c:e7:c6:69:d0:e2:68:ce:00:
b6:10:f1:6e:f7:55:a5:75:b9:7e:20:fb:76:c1:c6:
1a:91:b3:01:ae:5f:43:f3:56:12:4e:6b:ac:6d:23:
d8:14:96:a4:43:82:90:0f:c3:d6:70:9c:c2:43:cc:
aa:ab:e4:fe:93:87:72:ea:8c:00:e0:d7:75:f0:45:
f1:5e:1e:5c:c5:2c:92:91:e4:d3:72:a1:a5:ee:47:
69:46:f0:38:e9:8c:77:18:fc:c8:b9:0a:bf:9a:be:
6f:ab:72:92:97:4e:10:78:48:4b:12:6a:30:1f:a7:
e1:79:d6:3a:fd:87:3a:b4:66:da:f6:05:4c:a7:5a:
32:af:cf:85:21:02:f9:45:1d:81:ad:31:16:05:1c:
f1:f2:97:15:7e:a7:09:c9:30:9b:e1:a2:ad:b5:b8:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:08:EF:B6:65:09:48:D3:80:E5:A8:86:F6:6C:68:54:35:6A:C9:E4
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:94:7d:d7:a9:47:30:ab:40:ba:19:cd:f1:01:0a:3e:f3:98:
84:af:b5:5a:f4:9d:d7:4d:95:28:ea:a4:e3:9f:95:d2:34:b2:
30:e7:19:f6:eb:74:5a:68:16:25:e4:42:c3:bc:43:7a:84:2a:
7d:67:f5:6e:d9:33:61:ae:70:5f:4a:48:f4:3f:4e:7f:00:8d:
da:be:2b:2d:e3:51:e1:fe:a8:18:b1:47:07:4e:7d:ec:06:7f:
c2:d0:cf:d5:d3:a4:a8:99:da:60:b9:36:55:b4:d2:dc:8e:94:
de:32:fc:7f:b5:b1:56:2b:55:89:c3:72:17:93:31:2a:1e:7f:
2b:6f:05:f0:43:0e:55:27:54:21:04:87:96:03:1f:d5:52:d3:
17:61:5c:51:8a:42:20:1d:16:a8:ae:68:73:45:93:2d:40:40:
9b:8c:9d:6a:69:4e:82:90:df:e9:cd:d3:c2:22:4a:1a:22:7c:
20:bd:b1:c7:1c:5b:77:54:77:6f:69:f0:ea:5e:2d:b7:b6:64:
97:07:c9:f4:7f:2d:16:ae:f7:c1:3f:dc:b3:6d:00:04:49:00:
fe:02:f7:ca:20:91:dd:1e:5f:a8:32:f4:54:b6:fa:6a:e4:82:
8f:11:7d:bf:67:ec:00:3c:a3:bb:c1:02:2f:aa:7d:51:eb:53:
59:d9:b4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn5WbQsHplIuaxPwhro9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2
ZjUxZjMwHhcNMjYwOTIxMTEwMDEwWhcNMjYwOTIyMTEwMDEwWjAzMTEwLwYDVQQD
Eyg0ZTA4ZWZiNjY1MDk0OGQzODBlNWE4ODZmNjZjNjg1NDM1NmFjOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiCsEg0daeL7lW5M9iXcrb15YTS0
yj6Mpynmqjog8mGZFXMtaMHIQIQv0KhhWXlUDkDEYFO6CL195bZX0TgNiYs596ex
XaJwY8cXZfgJGA2KobwSM/fHPlJQScvZbTAc58Zp0OJozgC2EPFu91Wldbl+IPt2
wcYakbMBrl9D81YSTmusbSPYFJakQ4KQD8PWcJzCQ8yqq+T+k4dy6owA4Nd18EXx
Xh5cxSySkeTTcqGl7kdpRvA46Yx3GPzIuQq/mr5vq3KSl04QeEhLEmowH6fhedY6
/Yc6tGba9gVMp1oyr8+FIQL5RR2BrTEWBRzx8pcVfqcJyTCb4aKttbhpowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4I77ZlCUjTgOWohvZsaFQ1asnkMB8GA1UdIwQY
MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt
NTFiMmFhNTk4MGJlLzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl
LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpR916lH
MKtAuhnN8QEKPvOYhK+1WvSd102VKOqk45+V0jSyMOcZ9ut0WmgWJeRCw7xDeoQq
fWf1btkzYa5wX0pI9D9OfwCN2r4rLeNR4f6oGLFHB0597AZ/wtDP1dOkqJnaYLk2
VbTS3I6U3jL8f7WxVitVicNyF5MxKh5/K28F8EMOVSdUIQSHlgMf1VLTF2FcUYpC
IB0WqK5oc0WTLUBAm4ydamlOgpDf6c3TwiJKGiJ8IL2xxxxbd1R3b2nw6l4tt7Zk
lwfJ9H8tFq73wT/cs20ABEkA/gL3yiCR3R5fqDL0VLb6auSCjxF9v2fsADyju8EC
L6p9UetTWdm0kw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:47 2026 by rpki-client