Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: qzoMooEBpJcAE//fz+CPvxjhnaSWMhwWOs4uiEFDN6w=
Subject key identifier: 6C:A0:A2:8A:02:58:32:36:E5:0B:B9:FD:69:31:1C:B3:2F:D1:31:5A
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 01A124D461547030C484D387EC8C07C688E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 072A
Signing time: Sat 10 Oct 2026 08:01:00 +0000
Manifest this update: Sat 10 Oct 2026 08:01:00 +0000
Manifest next update: Sun 11 Oct 2026 08:01:00 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: hY7HgpiRaVEBOzHcrhl2HiyB6JypajvlYX+dr/onYI8=)
2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:61:54:70:30:c4:84:d3:87:ec:8c:07:c6:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Oct 10 08:01:00 2026 GMT
Not After : Oct 11 08:01:00 2026 GMT
Subject: CN=6ca0a28a02583236e50bb9fd69311cb32fd1315a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:89:af:6d:cc:c5:8c:b4:e0:fd:b8:1b:38:
c5:7a:ba:c0:b8:80:9d:c4:f0:51:b7:05:4c:8f:09:
9a:47:18:b1:c9:91:45:fd:d0:74:46:a5:1e:cf:54:
f5:0d:80:46:f4:27:6c:3c:df:94:69:cd:6f:6c:c6:
3b:7a:05:cc:87:6a:0e:4d:c7:14:10:97:03:08:77:
26:4e:94:2a:5a:ac:60:2c:a2:16:50:cd:02:0a:56:
67:be:84:8d:58:86:f7:98:21:fe:05:89:e8:4b:9f:
ee:62:f8:c6:26:48:c7:12:a8:5c:0c:ca:7d:24:9f:
e2:83:e8:fa:a2:da:46:b9:33:97:77:80:b4:c4:18:
49:7e:e0:fa:a8:50:f6:eb:bf:b6:64:ab:cc:b8:6c:
02:66:10:99:00:2b:87:96:c6:8c:d6:72:3a:9a:33:
f1:63:20:de:34:77:3a:7c:62:00:22:09:3c:0e:fa:
1c:a7:aa:f9:f3:44:06:35:70:e1:ff:95:5d:64:b8:
c2:f8:fa:4c:6f:f1:43:dc:87:54:ee:ce:dd:5c:d9:
34:9d:c7:ea:39:b2:fc:41:05:84:3c:59:c6:6f:7a:
47:ec:6f:e6:62:9a:15:63:01:a5:8b:82:58:bd:5e:
16:11:c8:d0:e2:5b:65:fe:c2:c2:79:12:d4:b0:dd:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:A2:8A:02:58:32:36:E5:0B:B9:FD:69:31:1C:B3:2F:D1:31:5A
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6a:1c:96:df:47:f3:49:47:0c:cd:7d:76:5f:ac:37:36:9e:
91:f5:64:35:22:d2:71:2b:2b:05:75:c4:f3:67:3c:13:24:48:
03:31:3b:d2:5f:20:d4:af:f7:cd:82:cf:ac:f1:4b:1a:2a:df:
fe:89:0e:f0:e1:58:39:32:71:7a:cd:6a:c8:54:e0:71:cc:ec:
44:1d:9b:26:67:a2:ba:48:bb:e6:da:c1:85:77:2c:77:fe:19:
be:5d:2b:e8:95:22:35:c8:ff:06:59:4d:e7:bf:bf:71:0b:39:
ee:91:c5:57:b3:fe:4b:7a:c2:d5:bc:89:02:b3:40:6e:db:69:
91:f4:9c:f2:79:95:c1:b1:3b:21:15:c6:50:5b:f4:f1:85:f9:
e1:ca:d0:cf:ab:64:22:66:42:26:a5:98:dd:36:7c:75:bd:70:
e0:92:66:5f:f2:2f:ad:b0:13:dd:58:1f:db:c3:7f:4f:04:9d:
80:e4:32:81:ef:d9:73:83:52:a8:f3:73:87:04:bb:0b:11:e4:
15:8a:32:1e:c4:26:a3:c5:0e:43:f9:6e:f9:81:16:25:27:44:
42:0b:38:06:37:f1:a6:11:62:9e:0c:01:86:ba:e0:c2:00:48:
53:77:ff:db:b0:06:7e:40:a5:b2:3d:30:36:1d:cd:da:a0:ec:
07:71:d5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEk1GFUcDDEhNOH7IwHxojoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk
NTQyMTIwHhcNMjYxMDEwMDgwMTAwWhcNMjYxMDExMDgwMTAwWjAzMTEwLwYDVQQD
Eyg2Y2EwYTI4YTAyNTgzMjM2ZTUwYmI5ZmQ2OTMxMWNiMzJmZDEzMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA566Jr23MxYy04P24GzjFerrAuICd
xPBRtwVMjwmaRxixyZFF/dB0RqUez1T1DYBG9CdsPN+Uac1vbMY7egXMh2oOTccU
EJcDCHcmTpQqWqxgLKIWUM0CClZnvoSNWIb3mCH+BYnoS5/uYvjGJkjHEqhcDMp9
JJ/ig+j6otpGuTOXd4C0xBhJfuD6qFD267+2ZKvMuGwCZhCZACuHlsaM1nI6mjPx
YyDeNHc6fGIAIgk8Dvocp6r580QGNXDh/5VdZLjC+PpMb/FD3IdU7s7dXNk0ncfq
ObL8QQWEPFnGb3pH7G/mYpoVYwGli4JYvV4WEcjQ4ltl/sLCeRLUsN2K1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGygoooCWDI25Qu5/WkxHLMv0TFaMB8GA1UdIwQY
MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt
MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw
LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2oclt9H
80lHDM19dl+sNzaekfVkNSLScSsrBXXE82c8EyRIAzE70l8g1K/3zYLPrPFLGirf
/okO8OFYOTJxes1qyFTgcczsRB2bJmeiuki75trBhXcsd/4Zvl0r6JUiNcj/BllN
57+/cQs57pHFV7P+S3rC1byJArNAbttpkfSc8nmVwbE7IRXGUFv08YX54crQz6tk
ImZCJqWY3TZ8db1w4JJmX/IvrbAT3Vgf28N/TwSdgOQyge/Zc4NSqPNzhwS7CxHk
FYoyHsQmo8UOQ/lu+YEWJSdEQgs4BjfxphFingwBhrrgwgBIU3f/27AGfkClsj0w
Nh3N2qDsB3HViw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:44:21 2026 by rpki-client