Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: v6ioeipbWTiNCTuE7QXjJsPxSbVo87QGziuRU3Hc59k=
Subject key identifier: 96:36:DF:E2:41:84:12:68:28:7C:D6:9D:74:C4:39:90:BB:01:D5:24
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 01A148A9A14E8C2E9622948EFCE1F9660411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 07:00:38 +0000
Manifest this update: Sat 17 Oct 2026 07:00:38 +0000
Manifest next update: Sun 18 Oct 2026 07:00:38 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: 1J8f0+qbP8nr9kjauTGHAkHrwP/HrzVdsxUkBjuixZ4=)
2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:a9:a1:4e:8c:2e:96:22:94:8e:fc:e1:f9:66:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Oct 17 07:00:38 2026 GMT
Not After : Oct 18 07:00:38 2026 GMT
Subject: CN=9636dfe241841268287cd69d74c43990bb01d524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:6a:ba:1c:67:3a:82:20:d8:cd:a1:58:b0:
69:c4:4e:9c:cf:98:1f:0a:f3:70:62:b7:c9:7d:6e:
d3:86:25:52:ab:fd:e2:21:27:0a:84:aa:1a:27:54:
61:bf:fa:cd:0e:9a:02:70:53:29:62:4d:3a:46:9b:
7b:b9:89:b8:d9:60:cf:90:59:3d:41:74:9f:b7:64:
47:16:12:ef:a1:0e:24:0e:7c:dd:03:e1:92:71:7c:
42:22:c9:4e:fb:c4:1e:75:95:31:cf:24:d4:3d:a5:
7d:3e:88:73:b3:39:39:8d:72:d4:b5:52:dd:83:a4:
19:22:11:18:9b:e8:1a:23:55:50:bb:5b:c4:fe:1e:
c4:64:37:bf:06:76:c5:12:d1:65:1d:5d:a5:72:ea:
45:71:14:f6:ef:1c:92:af:4c:e8:ce:f4:41:6d:6b:
fa:62:87:f5:10:fa:68:d4:e0:32:b8:c5:48:41:92:
2d:13:e9:89:ba:5f:e4:6a:74:72:80:b9:37:40:39:
6a:f5:c6:fc:3b:7a:97:c3:5c:f6:d0:86:56:a8:c9:
4e:8a:78:04:ca:dc:61:fa:78:81:31:2b:7d:70:02:
89:77:25:5b:19:a6:7a:2c:89:bc:f3:a8:88:00:3e:
69:e3:92:37:04:0d:5a:96:7f:0b:4c:18:49:ae:23:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:DF:E2:41:84:12:68:28:7C:D6:9D:74:C4:39:90:BB:01:D5:24
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c3:8a:39:0f:81:82:61:8f:bf:86:07:14:91:0d:fd:a3:62:
fa:b2:06:68:0b:61:12:07:50:f8:ee:86:b7:15:49:f6:59:71:
75:4b:74:80:0f:37:82:c6:ef:8b:f0:8c:7f:14:5f:03:03:df:
cb:76:9a:72:1c:e0:0a:e3:87:28:20:44:98:6b:d2:07:c8:ba:
29:a5:c0:02:e3:45:84:fa:c0:b7:49:8f:d7:e2:95:89:0d:f7:
83:a8:f4:a9:74:a6:d5:e8:e6:22:df:72:c6:5d:60:44:61:c7:
4e:7e:79:18:b0:95:12:79:cc:5c:86:d3:3d:60:a7:4c:5a:50:
71:bd:b7:bc:e0:33:6f:ce:92:79:11:84:a8:cc:c2:1f:ec:0c:
93:b8:eb:e5:1a:41:8a:56:98:f2:80:ce:4d:fe:3e:5e:81:61:
bb:3a:2b:78:0e:c1:2c:7a:dc:38:c0:ba:40:c8:2e:8c:1c:f3:
3f:b2:84:21:f8:f9:d0:85:fc:66:c2:38:94:8a:c6:1a:ce:e6:
02:08:cc:e5:d8:06:34:87:6b:f9:b7:f1:9e:dc:c7:ee:b8:46:
51:0e:03:96:cc:61:88:8b:49:80:06:76:5d:7e:7e:c9:a1:ed:
a8:fd:68:88:4b:7c:48:52:4c:09:23:eb:f7:cf:85:15:c1:08:
8f:54:8e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIqaFOjC6WIpSO/OH5ZgQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjYxMDE3MDcwMDM4WhcNMjYxMDE4MDcwMDM4WjAzMTEwLwYDVQQD
Eyg5NjM2ZGZlMjQxODQxMjY4Mjg3Y2Q2OWQ3NGM0Mzk5MGJiMDFkNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAtquhxnOoIg2M2hWLBpxE6cz5gf
CvNwYrfJfW7ThiVSq/3iIScKhKoaJ1Rhv/rNDpoCcFMpYk06Rpt7uYm42WDPkFk9
QXSft2RHFhLvoQ4kDnzdA+GScXxCIslO+8QedZUxzyTUPaV9Pohzszk5jXLUtVLd
g6QZIhEYm+gaI1VQu1vE/h7EZDe/BnbFEtFlHV2lcupFcRT27xySr0zozvRBbWv6
Yof1EPpo1OAyuMVIQZItE+mJul/kanRygLk3QDlq9cb8O3qXw1z20IZWqMlOingE
ytxh+niBMSt9cAKJdyVbGaZ6LIm886iIAD5p45I3BA1aln8LTBhJriNnlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY23+JBhBJoKHzWnXTEOZC7AdUkMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsOKOQ+B
gmGPv4YHFJEN/aNi+rIGaAthEgdQ+O6GtxVJ9llxdUt0gA83gsbvi/CMfxRfAwPf
y3aachzgCuOHKCBEmGvSB8i6KaXAAuNFhPrAt0mP1+KViQ33g6j0qXSm1ejmIt9y
xl1gRGHHTn55GLCVEnnMXIbTPWCnTFpQcb23vOAzb86SeRGEqMzCH+wMk7jr5RpB
ilaY8oDOTf4+XoFhuzoreA7BLHrcOMC6QMgujBzzP7KEIfj50IX8ZsI4lIrGGs7m
AgjM5dgGNIdr+bfxntzH7rhGUQ4DlsxhiItJgAZ2XX5+yaHtqP1oiEt8SFJMCSPr
98+FFcEIj1SOtQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:36 2026 by rpki-client