Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: K3vemmlS7yP6J3oC/YxwKTs1MmOJ0Qo6iNBTk+Qdfvg=
Subject key identifier: 77:CB:81:F7:C2:90:9F:8E:52:93:4A:DC:83:F0:BA:B8:F1:62:6F:09
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 01A1355A3B0E304B4F79096266FC3328372F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 13:01:08 +0000
Manifest this update: Tue 13 Oct 2026 13:01:08 +0000
Manifest next update: Wed 14 Oct 2026 13:01:08 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: COQrb7L/wSMANu1qO/3N8APZ9L6exfrXK8eWCYEoZZU=)
2: TPFA9ANmjeizoRraD4Ig8TEK1SU.roa (hash: kT6UPV2xN7mmP7EqC+AR1+y3Fgn76QDWPblq40BQx1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:3b:0e:30:4b:4f:79:09:62:66:fc:33:28:37:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Oct 13 13:01:08 2026 GMT
Not After : Oct 14 13:01:08 2026 GMT
Subject: CN=77cb81f7c2909f8e52934adc83f0bab8f1626f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:6e:9f:f0:76:50:83:80:c8:c6:85:b7:90:
e9:33:8f:30:d4:a7:d3:a7:af:99:6b:f3:33:6b:b8:
1d:af:1b:54:23:d8:f5:c8:07:67:37:28:73:7d:8f:
83:dc:ff:fe:f2:6f:65:11:4f:fe:b1:dd:13:f7:c1:
6e:86:01:8e:93:30:4a:3d:d6:1b:8b:4c:ab:ab:ed:
a6:42:49:2e:53:c3:6f:17:b0:d6:de:ff:bc:bd:b5:
da:d8:1d:59:a9:f5:c8:97:66:b8:ab:a0:13:d0:73:
67:e6:67:ae:12:84:de:96:62:11:0e:e4:01:e8:35:
cb:68:87:05:f2:bd:1c:10:54:8c:d8:78:c1:f7:f1:
b8:53:12:ca:80:2e:86:dc:66:f6:9d:04:88:ad:d2:
7f:20:ed:76:e8:72:3b:c7:ca:05:47:25:43:19:92:
5c:1e:74:cf:b0:8c:88:ac:f2:c1:6c:92:e8:66:4e:
52:ec:96:36:f4:9e:c1:6f:ef:eb:7b:3c:9c:ea:dd:
65:77:ac:7b:07:24:b0:61:f1:e7:7c:e9:f3:bd:f8:
f4:6e:09:d8:4b:57:0c:31:66:81:bd:1c:db:5c:d4:
43:1e:3d:53:74:73:d8:f6:8b:53:3c:a9:d8:c6:6d:
f7:fb:e7:f1:39:9c:3f:4b:28:62:1c:dc:45:d1:31:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:81:F7:C2:90:9F:8E:52:93:4A:DC:83:F0:BA:B8:F1:62:6F:09
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:30:81:72:d2:dd:4f:27:b3:5e:88:d0:ea:c5:b5:5a:b6:
c0:e3:d8:6f:77:f3:14:0e:42:c5:bf:ce:40:c9:16:34:8f:8e:
8a:e7:4e:35:05:b7:b8:ea:55:75:a0:1e:72:69:9e:c8:06:48:
6b:71:bb:58:9c:48:95:54:39:ca:7e:22:b2:cb:a1:cb:7e:be:
ef:be:8c:26:b6:80:4b:c8:60:c8:b0:ab:89:3a:18:5f:38:ed:
c9:f9:c5:7c:b8:09:ca:a2:ed:df:e7:c0:52:80:31:ed:61:45:
0e:1c:16:df:ec:ce:9d:09:84:9a:58:82:e5:48:07:6d:18:98:
39:2e:e0:97:b2:a8:09:7b:bf:1c:c1:c1:c8:9f:bd:e8:2a:59:
62:14:5c:2e:6d:f4:4b:23:6c:b6:49:82:a4:b8:45:fb:40:ee:
13:00:cb:d9:54:16:6e:e3:83:11:33:4b:d8:ee:e7:91:46:68:
a7:2a:89:4e:a6:44:9e:c0:d2:48:60:ef:7f:b6:49:e0:3d:1d:
69:a6:e2:79:e3:93:85:99:cc:2a:84:50:5d:ad:74:fc:2e:9d:
98:1e:47:50:65:9c:d3:6f:0e:6c:25:75:f5:13:30:97:f5:98:
91:a1:bc:0b:e6:be:bd:79:5c:3d:9c:af:06:61:29:bc:0e:5d:
5e:43:9f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1WjsOMEtPeQliZvwzKDcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYzhhMWFhZDAyMDU5NDNhNDU3MjM4OWJiNzQzMzRlMWNh
Mjg0ODUwHhcNMjYxMDEzMTMwMTA4WhcNMjYxMDE0MTMwMTA4WjAzMTEwLwYDVQQD
Eyg3N2NiODFmN2MyOTA5ZjhlNTI5MzRhZGM4M2YwYmFiOGYxNjI2ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Run/B2UIOAyMaFt5DpM48w1KfT
p6+Za/Mza7gdrxtUI9j1yAdnNyhzfY+D3P/+8m9lEU/+sd0T98FuhgGOkzBKPdYb
i0yrq+2mQkkuU8NvF7DW3v+8vbXa2B1ZqfXIl2a4q6AT0HNn5meuEoTelmIRDuQB
6DXLaIcF8r0cEFSM2HjB9/G4UxLKgC6G3Gb2nQSIrdJ/IO126HI7x8oFRyVDGZJc
HnTPsIyIrPLBbJLoZk5S7JY29J7Bb+/rezyc6t1ld6x7BySwYfHnfOnzvfj0bgnY
S1cMMWaBvRzbXNRDHj1TdHPY9otTPKnYxm33++fxOZw/SyhiHNxF0TEWRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfLgffCkJ+OUpNK3IPwurjxYm8JMB8GA1UdIwQY
MBaAFOzIoarQIFlDpFcjibt0M04cooSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEt
NGE2OGYyMzVjMzg4LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iMzI5OGItOWM1YS00ZTM4LTgxMzEtNGE2OGYyMzVjMzg4
LzEvN01paHF0QWdXVU9rVnlPSnUzUXpUaHlpaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjUwgXLS
3U8ns16I0OrFtVq2wOPYb3fzFA5Cxb/OQMkWNI+OiudONQW3uOpVdaAecmmeyAZI
a3G7WJxIlVQ5yn4issuhy36+776MJraAS8hgyLCriToYXzjtyfnFfLgJyqLt3+fA
UoAx7WFFDhwW3+zOnQmEmliC5UgHbRiYOS7gl7KoCXu/HMHByJ+96CpZYhRcLm30
SyNstkmCpLhF+0DuEwDL2VQWbuODETNL2O7nkUZopyqJTqZEnsDSSGDvf7ZJ4D0d
aabieeOThZnMKoRQXa10/C6dmB5HUGWc028ObCV19RMwl/WYkaG8C+a+vXlcPZyv
BmEpvA5dXkOfBQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:59:22 2026 by rpki-client