Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: YUxq2FJeDlcvlgBll1tzLlyEKi4Z0KLXlwGmYKV+8vk=
Subject key identifier: E1:B4:83:DF:C7:F0:59:EF:93:01:C6:95:83:F4:34:AD:AB:50:A5:86
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 01A0C7B3F0DCC927238A3DF7DE53ED5216D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 1000
Signing time: Tue 22 Sep 2026 06:00:53 +0000
Manifest this update: Tue 22 Sep 2026 06:00:53 +0000
Manifest next update: Wed 23 Sep 2026 06:00:53 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: XWWjFJMJaNEp3h0zCAcE/SnVEC72NrqdJGGzFFZecb8=)
2: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (hash: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:f0:dc:c9:27:23:8a:3d:f7:de:53:ed:52:16:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Sep 22 06:00:53 2026 GMT
Not After : Sep 23 06:00:53 2026 GMT
Subject: CN=e1b483dfc7f059ef9301c69583f434adab50a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:13:e6:c0:12:4f:6e:a2:7a:4e:58:f9:c4:
f8:27:69:f2:83:27:4e:7e:8a:f5:03:81:5c:19:c1:
38:c9:8d:3c:37:07:cb:a1:17:93:5c:af:7a:c7:93:
27:b1:11:5d:ee:5c:7a:da:e6:0f:49:a3:56:d2:0b:
8c:bc:d1:a8:b9:5d:c9:16:ff:22:f8:f5:50:14:64:
16:4c:e6:f2:72:d5:6f:14:40:57:d0:62:f5:9e:47:
06:4a:d3:f5:40:85:88:d5:57:3a:75:12:35:37:62:
c4:ce:9a:4b:41:56:4a:95:0d:63:1d:a0:fa:a5:cf:
d7:5f:bb:57:84:9e:30:b9:dc:4f:50:6d:29:45:e7:
dd:9c:58:aa:5c:c3:53:d2:42:fe:ff:2a:20:e9:40:
83:6a:06:b3:39:a2:02:d7:b9:d6:da:d7:4e:10:bb:
81:45:1b:75:5e:41:ec:cb:9c:5d:93:9b:20:28:ce:
5c:b0:22:c9:50:c1:2d:93:81:e4:49:f8:32:1d:43:
b8:4f:1c:df:4f:95:26:a2:b3:82:d1:26:bd:01:8a:
0e:ec:73:c4:1d:47:be:d2:6e:85:36:63:18:9a:8c:
27:a7:e3:b7:f0:25:4e:48:ab:9c:4a:a4:66:83:64:
f9:81:83:67:ba:cd:80:7e:7d:90:d6:0c:05:f3:59:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:83:DF:C7:F0:59:EF:93:01:C6:95:83:F4:34:AD:AB:50:A5:86
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:33:90:5c:9e:1e:7d:14:bf:7e:c6:a8:c9:c0:eb:93:b2:
62:56:44:d1:8d:9e:aa:43:df:53:b3:5c:7b:c5:20:52:bb:19:
6c:a1:5b:12:b8:ad:f7:cc:d7:18:30:a8:da:14:5c:0f:38:35:
19:01:64:13:4b:c6:95:76:85:e1:3a:2a:ae:ee:31:1e:13:8b:
7e:4e:59:49:c0:e4:33:5c:7b:0e:f4:d6:b1:b0:b8:10:6b:60:
66:8f:2c:3b:82:17:68:09:d9:11:bf:8c:9f:12:a4:e1:54:f6:
18:24:4c:ab:50:8d:a5:df:d4:4e:6b:90:e7:ee:b0:13:29:f0:
70:9a:b9:60:c3:7f:39:f3:75:67:a5:e8:8a:7b:c5:6a:9e:98:
87:17:b5:f5:ad:1f:07:0f:99:33:a8:bc:85:3e:e5:c2:8e:6f:
4a:bc:44:1d:e1:20:c4:b6:cd:27:6d:f5:55:f2:38:bd:d1:52:
dc:c2:4a:5f:c7:9a:b2:11:73:79:8f:f9:28:94:8d:de:a5:95:
a5:9a:3a:c9:ba:cf:9a:e9:94:87:b7:97:61:03:2d:39:fd:a1:
76:1f:10:cf:e2:ae:8e:74:58:4c:8a:ae:90:60:63:f4:a7:b2:
a3:a0:3d:5f:ef:24:e4:a1:d1:47:cf:1e:4a:da:83:00:3d:5b:
a0:89:63:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs/DcyScjij333lPtUhbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzc3ZWQ5ZmExMWVjMTk5NTU1NTk3NjJkZTA0N2E1YTZl
YjE0YTgwHhcNMjYwOTIyMDYwMDUzWhcNMjYwOTIzMDYwMDUzWjAzMTEwLwYDVQQD
EyhlMWI0ODNkZmM3ZjA1OWVmOTMwMWM2OTU4M2Y0MzRhZGFiNTBhNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGcT5sAST26iek5Y+cT4J2nygydO
for1A4FcGcE4yY08NwfLoReTXK96x5MnsRFd7lx62uYPSaNW0guMvNGouV3JFv8i
+PVQFGQWTObyctVvFEBX0GL1nkcGStP1QIWI1Vc6dRI1N2LEzppLQVZKlQ1jHaD6
pc/XX7tXhJ4wudxPUG0pRefdnFiqXMNT0kL+/yog6UCDagazOaIC17nW2tdOELuB
RRt1XkHsy5xdk5sgKM5csCLJUMEtk4HkSfgyHUO4TxzfT5UmorOC0Sa9AYoO7HPE
HUe+0m6FNmMYmownp+O38CVOSKucSqRmg2T5gYNnus2Afn2Q1gwF81kNyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG0g9/H8FnvkwHGlYP0NK2rUKWGMB8GA1UdIwQY
MBaAFO43ftn6EewZlVVZdi3gR6Wm6xSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMt
OWU3MWNiZDQyMTdiLzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMtOWU3MWNiZDQyMTdi
LzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLszkFye
Hn0Uv37GqMnA65OyYlZE0Y2eqkPfU7Nce8UgUrsZbKFbErit98zXGDCo2hRcDzg1
GQFkE0vGlXaF4Toqru4xHhOLfk5ZScDkM1x7DvTWsbC4EGtgZo8sO4IXaAnZEb+M
nxKk4VT2GCRMq1CNpd/UTmuQ5+6wEynwcJq5YMN/OfN1Z6XoinvFap6Yhxe19a0f
Bw+ZM6i8hT7lwo5vSrxEHeEgxLbNJ231VfI4vdFS3MJKX8eashFzeY/5KJSN3qWV
pZo6ybrPmumUh7eXYQMtOf2hdh8Qz+KujnRYTIqukGBj9Keyo6A9X+8k5KHRR88e
StqDAD1boIljEA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:50 2026 by rpki-client