Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: J8ofMXpVI/kQx3vIABOUfzFZVfbDfe13UEWK7/BbMzM=
Subject key identifier: 87:09:39:81:CD:3B:FC:27:06:10:1A:F6:69:ED:CE:CB:67:59:35:59
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 01A0C6D7DACAB8206524ABE6D0232A53A9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 18A8
Signing time: Tue 22 Sep 2026 02:00:29 +0000
Manifest this update: Tue 22 Sep 2026 02:00:29 +0000
Manifest next update: Wed 23 Sep 2026 02:00:29 +0000
Files and hashes: 1: 6XsZO_TltMpWaIXpEJ9j4Ijt3Wo.roa (hash: AmndDW7NkmhQPmIE+LZ+wdkjraSPxi3//yw9gxzh3WQ=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: 6r5o9teDasAsSTcwLvzUM6TYdshvocMWydIp5Q+3XNU=)
3: qS1FhvHNjTct9kkj2vIxWEw1yv8.roa (hash: WpowF4fjiVOFY59c2MXRRHLypjY6PRS8W4ndaISZRLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:da:ca:b8:20:65:24:ab:e6:d0:23:2a:53:a9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Sep 22 02:00:29 2026 GMT
Not After : Sep 23 02:00:29 2026 GMT
Subject: CN=87093981cd3bfc2706101af669edcecb67593559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:54:5a:4e:49:60:2c:31:78:6c:a7:49:20:
e2:2a:e5:2f:de:3b:99:37:83:a3:79:9d:7b:0b:16:
8f:19:86:d5:75:19:a3:66:c9:17:39:1e:e2:e0:b7:
ec:7e:e5:6d:51:c7:4a:f7:80:b5:53:58:f7:f6:2c:
36:7a:34:28:f2:b1:4c:43:e3:dd:92:02:0f:41:82:
8e:a8:cc:a4:a7:e5:6b:ea:db:8d:86:d8:bf:8d:c2:
91:45:8e:ed:d0:19:17:c3:3f:ce:cc:22:73:91:81:
0b:f8:81:48:07:63:62:a3:05:eb:a3:2d:fe:75:74:
1d:29:97:8b:c0:71:b2:37:e2:d2:31:be:be:93:cf:
e0:fc:de:4b:2e:55:87:7c:fd:5b:28:40:fd:f7:4c:
11:9b:ac:aa:67:b2:6d:00:41:42:4b:97:1a:7a:89:
31:75:f4:df:db:0b:4b:97:68:55:37:25:62:06:bb:
c4:ff:0d:df:51:97:44:30:c6:f7:78:4d:70:61:2b:
ae:ad:6a:c0:e9:cf:29:63:06:e0:55:a8:7e:8f:ee:
45:4d:00:1f:01:20:20:df:bd:a7:49:ad:ed:10:c1:
3f:11:10:d8:18:a5:73:f1:02:d2:25:d7:12:ab:c5:
5a:9a:41:b7:d2:65:aa:c0:51:79:7c:40:3e:d2:38:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:39:81:CD:3B:FC:27:06:10:1A:F6:69:ED:CE:CB:67:59:35:59
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8f:d1:cd:71:39:be:55:6d:fc:f6:68:7d:54:29:ec:17:d3:
d8:d5:51:66:e3:af:4c:8a:90:2d:6f:f0:8f:b8:ea:32:0b:8d:
92:09:76:4a:45:79:3e:30:6b:1b:d5:33:6f:58:2c:d9:9f:c3:
c9:42:73:f0:44:5e:11:ee:bc:d6:b0:57:94:78:32:7d:8f:b8:
f8:0f:8b:85:14:87:86:63:9d:bd:cf:4d:9e:de:cb:5e:53:6e:
91:1a:de:cf:6f:ec:09:eb:0c:0d:da:75:6a:86:76:73:f3:2f:
4d:62:40:7e:b0:aa:78:76:bd:bc:3b:08:aa:b1:6a:26:50:60:
46:32:3b:7c:3e:22:9c:a0:79:0b:fd:70:43:2f:e0:02:16:a6:
ec:86:82:e3:f4:93:fb:36:50:77:c3:6c:ca:e4:4b:b0:d4:04:
f0:c9:b6:e2:be:c6:cd:c1:61:64:9c:98:ba:ee:f7:2f:de:58:
82:cd:00:d8:a5:86:5d:13:03:81:10:03:9d:9c:a0:4b:0d:31:
a6:bb:d0:d9:66:f8:17:a4:bc:ba:f8:bd:30:f9:e7:d5:2e:a5:
69:f7:c2:87:3d:63:cd:9c:7c:9d:33:eb:43:8a:cc:fd:68:7e:
c6:8d:63:3d:64:96:2a:a3:3c:7a:9e:b5:e1:78:26:5c:41:7c:
24:88:46:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG19rKuCBlJKvm0CMqU6n8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmJmMmJhNWIzMmU0MmU4YjZjMDNiODM2ZDc2NGY5NzVi
NTg5OGYwHhcNMjYwOTIyMDIwMDI5WhcNMjYwOTIzMDIwMDI5WjAzMTEwLwYDVQQD
Eyg4NzA5Mzk4MWNkM2JmYzI3MDYxMDFhZjY2OWVkY2VjYjY3NTkzNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dRUWk5JYCwxeGynSSDiKuUv3juZ
N4OjeZ17CxaPGYbVdRmjZskXOR7i4LfsfuVtUcdK94C1U1j39iw2ejQo8rFMQ+Pd
kgIPQYKOqMykp+Vr6tuNhti/jcKRRY7t0BkXwz/OzCJzkYEL+IFIB2NiowXroy3+
dXQdKZeLwHGyN+LSMb6+k8/g/N5LLlWHfP1bKED990wRm6yqZ7JtAEFCS5caeokx
dfTf2wtLl2hVNyViBrvE/w3fUZdEMMb3eE1wYSuurWrA6c8pYwbgVah+j+5FTQAf
ASAg372nSa3tEME/ERDYGKVz8QLSJdcSq8VamkG30mWqwFF5fEA+0jgfjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcJOYHNO/wnBhAa9mntzstnWTVZMB8GA1UdIwQY
MBaAFOy78rpbMuQui2wDuDbXZPl1tYmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAt
ODNmZmM4MDA3M2IyLzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAtODNmZmM4MDA3M2Iy
LzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4/RzXE5
vlVt/PZofVQp7BfT2NVRZuOvTIqQLW/wj7jqMguNkgl2SkV5PjBrG9Uzb1gs2Z/D
yUJz8EReEe681rBXlHgyfY+4+A+LhRSHhmOdvc9Nnt7LXlNukRrez2/sCesMDdp1
aoZ2c/MvTWJAfrCqeHa9vDsIqrFqJlBgRjI7fD4inKB5C/1wQy/gAham7IaC4/ST
+zZQd8NsyuRLsNQE8Mm24r7GzcFhZJyYuu73L95Ygs0A2KWGXRMDgRADnZygSw0x
prvQ2Wb4F6S8uvi9MPnn1S6laffChz1jzZx8nTPrQ4rM/Wh+xo1jPWSWKqM8ep61
4XgmXEF8JIhGXA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:25 2026 by rpki-client