Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: YA7AoobbQlg5SCnH1i8xF/i+oJv8v7AjSLkRVEMLJvc=
Subject key identifier: A0:9A:70:AF:AB:88:35:62:03:9F:EC:B8:1F:3B:FD:AC:21:E0:CD:BF
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 01A16157690F4844AF097D549EB8E761CA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1AB7
Signing time: Thu 22 Oct 2026 02:01:20 +0000
Manifest this update: Thu 22 Oct 2026 02:01:20 +0000
Manifest next update: Fri 23 Oct 2026 02:01:20 +0000
Files and hashes: 1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: Z5mNxSiRfPwSt3CzZh1LwuFh9xZM+l3bosla7xUwsvg=)
2: TDkaS-JTvMNiWICWG4ymOlGuWbk.roa (hash: rdEwK1puUd5tKIYhWm5xSUw39iHc4PHVAw0g6tLwiHU=)
3: xfHjlvR4GqmLKHrBF2UQj5zlnl4.roa (hash: 8M7wSB8jbbP+DfjlEMm6KSFYNEcYB3CLaxYLFnfuaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:57:69:0f:48:44:af:09:7d:54:9e:b8:e7:61:ca:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Oct 22 02:01:20 2026 GMT
Not After : Oct 23 02:01:20 2026 GMT
Subject: CN=a09a70afab883562039fecb81f3bfdac21e0cdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:5a:36:30:cd:04:4c:45:cc:0a:aa:2f:1e:
c8:9a:fb:c9:2c:b4:55:02:32:73:e3:a7:86:69:ce:
99:d2:7c:4c:fd:cc:06:44:b5:74:df:29:04:06:b8:
91:f0:0b:92:93:d3:40:87:02:81:2d:1a:88:3c:b9:
3a:53:1f:54:46:61:1d:86:6f:86:4d:b1:7d:be:a2:
c4:79:62:d6:03:b5:28:35:4a:db:64:9e:95:ef:f8:
55:ea:f2:a3:18:2d:94:b3:91:b8:3f:9f:7c:d3:f4:
71:5e:f1:84:31:49:65:34:ac:35:9d:a7:26:5d:a9:
3c:ef:18:ec:8b:6a:93:da:a0:39:cc:de:c6:7b:aa:
9f:1d:db:11:8b:dd:db:72:33:97:b5:83:65:4c:71:
70:dd:55:1f:54:43:da:40:af:09:fd:1a:df:27:32:
43:91:03:e9:ff:bf:04:15:aa:42:38:c2:90:eb:ed:
b6:80:a3:90:6e:4b:9f:29:a0:72:b6:a7:25:c3:3f:
45:85:47:7e:f9:4b:58:bd:0d:12:40:7d:11:89:3f:
7f:ee:70:39:86:38:fe:01:c3:01:8b:9a:34:9d:4b:
7a:36:9a:30:f4:57:39:de:61:ad:24:44:29:5d:d2:
07:50:0e:d0:ab:fe:22:19:3a:bc:9f:97:a0:c3:52:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:70:AF:AB:88:35:62:03:9F:EC:B8:1F:3B:FD:AC:21:E0:CD:BF
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:35:7d:2a:26:a1:2e:27:19:e8:55:a5:bc:c7:5e:21:a1:37:
24:17:06:5a:67:51:f8:ef:82:af:c4:9c:5d:1c:7c:5e:d6:35:
93:c4:6b:b0:70:c2:ec:6d:cc:b7:bc:f6:31:b7:e4:55:b3:1f:
44:97:44:00:9b:30:ad:aa:19:c2:1d:3c:8b:69:e7:bc:34:0b:
ef:f6:69:97:c8:d0:14:b3:cb:e5:cd:03:14:1b:e3:b0:17:f4:
77:34:76:bf:e0:d5:9e:c3:12:da:f4:c8:37:a8:1f:d8:ec:aa:
a4:f4:c0:e8:36:f7:0c:15:65:a5:12:c7:dd:27:2e:d3:83:a1:
c4:30:a0:c2:44:64:31:2f:e1:e2:4f:af:28:a3:3b:78:f1:c0:
08:97:3c:12:93:4a:76:23:43:ef:31:49:66:6b:ce:90:02:2c:
23:e3:fb:cb:e7:89:74:4c:8b:17:c3:ee:01:4c:a4:ed:39:f7:
30:ff:1f:53:62:03:e9:6c:39:af:b4:41:b0:88:e3:c4:79:35:
db:fe:84:43:d7:8c:1a:c6:46:40:06:19:c9:8b:9f:8a:ee:fb:
3c:65:cc:05:43:de:ec:ac:04:85:fd:55:d3:0a:dc:37:58:f7:
71:52:62:80:1f:d6:be:19:69:4f:f3:5f:21:89:9e:8c:ef:01:
df:d8:c9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFhV2kPSESvCX1UnrjnYcqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWVjNDYyNmVjZGUyNTMzNWFmZjA4OGIwNGM3MTM5NWFl
NmJjMjQwHhcNMjYxMDIyMDIwMTIwWhcNMjYxMDIzMDIwMTIwWjAzMTEwLwYDVQQD
EyhhMDlhNzBhZmFiODgzNTYyMDM5ZmVjYjgxZjNiZmRhYzIxZTBjZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ktaNjDNBExFzAqqLx7ImvvJLLRV
AjJz46eGac6Z0nxM/cwGRLV03ykEBriR8AuSk9NAhwKBLRqIPLk6Ux9URmEdhm+G
TbF9vqLEeWLWA7UoNUrbZJ6V7/hV6vKjGC2Us5G4P5980/RxXvGEMUllNKw1nacm
Xak87xjsi2qT2qA5zN7Ge6qfHdsRi93bcjOXtYNlTHFw3VUfVEPaQK8J/RrfJzJD
kQPp/78EFapCOMKQ6+22gKOQbkufKaBytqclwz9FhUd++UtYvQ0SQH0RiT9/7nA5
hjj+AcMBi5o0nUt6Npow9Fc53mGtJEQpXdIHUA7Qq/4iGTq8n5egw1LfJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCacK+riDViA5/suB87/awh4M2/MB8GA1UdIwQY
MBaAFDIexGJuzeJTNa/wiLBMcTla5rwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0Nzkt
YjA4NGM3Mzg2MWI4LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0NzktYjA4NGM3Mzg2MWI4
LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTV9Kiah
LicZ6FWlvMdeIaE3JBcGWmdR+O+Cr8ScXRx8XtY1k8RrsHDC7G3Mt7z2MbfkVbMf
RJdEAJswraoZwh08i2nnvDQL7/Zpl8jQFLPL5c0DFBvjsBf0dzR2v+DVnsMS2vTI
N6gf2OyqpPTA6Db3DBVlpRLH3Scu04OhxDCgwkRkMS/h4k+vKKM7ePHACJc8EpNK
diND7zFJZmvOkAIsI+P7y+eJdEyLF8PuAUyk7Tn3MP8fU2ID6Ww5r7RBsIjjxHk1
2/6EQ9eMGsZGQAYZyYufiu77PGXMBUPe7KwEhf1V0wrcN1j3cVJigB/WvhlpT/Nf
IYmejO8B39jJxw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 12:42:26 2026 by rpki-client