Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
File: 7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json)
Hash identifier: z8+OPi8zCNoH6ZRvbpMf6wjsocvP+zd43ZtGyN7cyhc=
Subject key identifier: 4B:C8:20:CE:C0:C8:1B:11:1A:20:C5:F8:D1:9B:92:62:6B:D3:82:7D
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial: 01A0C40D8E9F83A7FC068445D6956E69A331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 13:00:17 +0000
Manifest this update: Mon 21 Sep 2026 13:00:17 +0000
Manifest next update: Tue 22 Sep 2026 13:00:17 +0000
Files and hashes: 1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: sFe9/DdGqw5wqymbEQqV4UAwpWI3DExE6bsUGFAiIos=)
2: kp3XcltFj2ImgK1gmThwB5Z5ALI.roa (hash: iZZ4tNwYuV01qlmFMVC72STH5TgwevyCIeA37xL2VKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:8e:9f:83:a7:fc:06:84:45:d6:95:6e:69:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Validity
Not Before: Sep 21 13:00:17 2026 GMT
Not After : Sep 22 13:00:17 2026 GMT
Subject: CN=4bc820cec0c81b111a20c5f8d19b92626bd3827d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:55:6b:c3:15:88:61:a5:ac:7d:01:76:cd:
bd:96:e4:c5:ff:17:05:c1:d1:08:cc:03:a7:2e:d9:
48:95:55:46:e8:14:78:a3:c9:97:5c:98:b5:26:7d:
47:72:9a:e2:73:7e:92:88:21:9b:73:13:d0:ff:93:
af:8f:6b:f1:ca:63:fa:a8:31:27:81:33:ef:95:ec:
51:a6:71:11:89:1a:40:f2:e0:02:89:12:28:3b:ec:
56:d8:1a:ba:8b:99:20:74:c8:7b:3c:06:11:4b:f1:
57:16:fc:ca:fd:d5:63:2a:2e:1d:b9:ec:8f:3f:73:
a7:61:c6:59:a6:2f:24:77:17:5d:64:89:d1:78:21:
9b:f9:99:0c:81:ed:2b:1e:f7:5d:ae:c8:de:a0:17:
31:34:d9:0f:34:12:16:cd:52:fd:e4:8b:28:5c:16:
1d:df:7d:d1:97:36:36:3e:d3:c1:58:07:b2:b2:82:
08:8e:ac:72:c2:88:9a:c5:e5:ef:bc:7b:74:07:dc:
5a:fe:5c:80:67:9e:bc:13:9b:8b:1b:53:c1:dd:1f:
7f:a4:4c:c1:98:eb:2c:8e:39:1c:cd:82:24:bf:1a:
a4:dc:32:3c:ae:b9:4f:79:b9:a5:bf:18:7b:c4:15:
25:8a:f4:c1:ba:78:5b:b9:59:71:fc:bb:59:98:63:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:20:CE:C0:C8:1B:11:1A:20:C5:F8:D1:9B:92:62:6B:D3:82:7D
X509v3 Authority Key Identifier:
keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7d:d3:5c:54:5f:9f:c0:ee:bf:a1:5d:fd:ec:1c:e5:1d:3e:
c9:26:b2:2c:ae:3b:71:83:80:b0:64:34:48:1b:6a:4f:1f:d5:
e7:d6:a6:69:68:7a:f3:ee:4a:5d:5b:96:0a:e4:c2:87:56:25:
eb:14:e0:52:08:9f:47:a8:d4:a8:a4:b5:ac:36:87:e4:7a:09:
7a:bb:7e:59:f5:2b:e2:72:6f:4d:25:9a:57:a4:3a:ad:86:cb:
7c:1f:3b:aa:94:da:e0:a0:e9:a6:93:a8:29:c9:51:77:52:57:
e5:d3:20:01:9e:19:5e:95:6d:ac:59:f8:c7:0b:e3:73:04:bb:
e7:d8:6c:38:68:b8:82:8e:da:57:1f:b3:37:94:34:98:a5:54:
a5:6a:f3:5d:17:f8:8d:42:2b:81:a3:37:bc:31:32:91:62:69:
b4:69:bc:09:07:a5:fc:f7:ba:a7:20:bf:8b:59:dc:11:b3:b5:
9e:28:b0:01:c3:f3:f9:7d:47:7e:61:d4:00:84:db:4a:ed:72:
41:e1:32:14:bb:78:58:19:67:ef:f9:78:a2:04:cf:74:b1:2f:
9f:48:5e:f0:fe:62:fb:3d:21:2f:6c:23:f1:3c:62:99:41:a6:
9d:2b:0b:2b:87:c7:5c:c7:ca:4a:bd:4b:96:3b:d6:52:9f:6f:
dd:28:f5:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDY6fg6f8BoRF1pVuaaMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDU3Zjk2OWMwZmVjMzViOTI2ZDBmNzJhNDdkZDQ0Yjhi
MzAwZjUwHhcNMjYwOTIxMTMwMDE3WhcNMjYwOTIyMTMwMDE3WjAzMTEwLwYDVQQD
Eyg0YmM4MjBjZWMwYzgxYjExMWEyMGM1ZjhkMTliOTI2MjZiZDM4MjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjhVa8MViGGlrH0Bds29luTF/xcF
wdEIzAOnLtlIlVVG6BR4o8mXXJi1Jn1Hcpric36SiCGbcxPQ/5Ovj2vxymP6qDEn
gTPvlexRpnERiRpA8uACiRIoO+xW2Bq6i5kgdMh7PAYRS/FXFvzK/dVjKi4dueyP
P3OnYcZZpi8kdxddZInReCGb+ZkMge0rHvddrsjeoBcxNNkPNBIWzVL95IsoXBYd
333RlzY2PtPBWAeysoIIjqxywoiaxeXvvHt0B9xa/lyAZ568E5uLG1PB3R9/pEzB
mOssjjkczYIkvxqk3DI8rrlPebmlvxh7xBUlivTBunhbuVlx/LtZmGOb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvIIM7AyBsRGiDF+NGbkmJr04J9MB8GA1UdIwQY
MBaAFO1Ff5acD+w1uSbQ9ypH3US4swD1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjct
ZTQ3ZWJlZTJjMDIwLzEvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjctZTQ3ZWJlZTJjMDIw
LzEvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGH3TXFRf
n8Duv6Fd/ewc5R0+ySayLK47cYOAsGQ0SBtqTx/V59amaWh68+5KXVuWCuTCh1Yl
6xTgUgifR6jUqKS1rDaH5HoJert+WfUr4nJvTSWaV6Q6rYbLfB87qpTa4KDpppOo
KclRd1JX5dMgAZ4ZXpVtrFn4xwvjcwS759hsOGi4go7aVx+zN5Q0mKVUpWrzXRf4
jUIrgaM3vDEykWJptGm8CQel/Pe6pyC/i1ncEbO1niiwAcPz+X1HfmHUAITbSu1y
QeEyFLt4WBln7/l4ogTPdLEvn0he8P5i+z0hL2wj8TximUGmnSsLK4fHXMfKSr1L
ljvWUp9v3Sj1IA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:03:18 2026 by rpki-client