Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: oLuXgswRq9gdOthJuceFaGFvpj6viOcEpEVlSliasBU=
Subject key identifier: 05:A9:FC:02:21:73:71:30:7B:E7:4D:B4:68:E0:6C:0B:A4:AE:AA:85
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01A1076EB2CCAB61AD8565B3A3C6D65E9B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1871
Signing time: Sun 04 Oct 2026 15:00:57 +0000
Manifest this update: Sun 04 Oct 2026 15:00:57 +0000
Manifest next update: Mon 05 Oct 2026 15:00:57 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: ZIIlmUHWsRAeEbfiQWAwsrOWVLPY4hEmm7HNueeMPUw=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6e:b2:cc:ab:61:ad:85:65:b3:a3:c6:d6:5e:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Oct 4 15:00:57 2026 GMT
Not After : Oct 5 15:00:57 2026 GMT
Subject: CN=05a9fc02217371307be74db468e06c0ba4aeaa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:2e:b8:1f:25:eb:11:d3:b0:14:2f:78:8e:
2e:58:46:4d:a3:07:b5:cb:ba:77:7f:0e:dd:33:3d:
87:ea:b7:0b:83:4b:0f:2b:d7:ed:e6:d7:6b:26:53:
ef:64:9a:e6:4f:a3:2c:fc:e7:2a:bd:c5:58:73:d3:
51:81:b2:52:7f:be:f6:83:b2:66:c9:ca:a0:77:8f:
11:98:d3:ff:5c:30:16:bd:07:53:b1:37:8d:eb:20:
d2:d6:51:db:18:14:14:84:64:fd:21:f4:cb:e7:a7:
a5:1d:20:75:64:e9:32:84:6e:62:d6:1e:a3:d0:00:
92:bc:e5:36:61:08:ff:1d:52:ae:4d:3f:9b:e7:b8:
7d:eb:82:7a:8c:14:d1:a4:85:7e:ca:26:08:1a:c1:
87:7b:dd:1e:74:f1:26:db:15:00:a0:d6:9a:29:c2:
4e:e1:2a:6d:c8:c3:be:5b:41:ed:bf:ec:f6:14:1c:
a3:d0:9e:22:8a:65:c4:df:41:d3:20:55:a3:55:79:
0f:1e:8f:bc:b8:c1:74:67:e2:e5:a9:ea:43:e1:d8:
f4:16:3c:ba:8d:61:c4:6d:66:2e:d6:62:aa:bb:fd:
33:c9:1c:c5:b5:e1:37:6f:aa:4b:c8:f2:a9:4e:37:
c8:ce:23:cb:70:fa:fc:17:a8:b0:50:f7:9f:50:6b:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:FC:02:21:73:71:30:7B:E7:4D:B4:68:E0:6C:0B:A4:AE:AA:85
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:61:d2:2d:aa:53:66:2b:85:a3:13:a1:44:55:64:87:1b:70:
79:6a:ee:6c:53:cd:90:66:0d:93:78:4d:cf:3a:75:c9:28:3f:
79:3b:0f:e0:70:80:9f:19:60:08:86:53:8f:fd:71:e5:75:f6:
a4:49:48:af:65:cd:df:94:5f:ee:99:83:d5:e5:9a:14:eb:02:
a7:d7:7d:b9:15:b4:89:bd:e6:dc:77:ea:8b:c5:cb:fa:82:fd:
4f:2c:f6:6d:e2:79:8b:e5:2e:69:4c:62:4c:c6:f1:9f:10:94:
d8:7b:b0:67:07:07:c8:e2:22:9f:ce:c9:97:51:ec:e9:2b:16:
b1:c2:6c:93:c4:df:f0:40:06:5c:43:1a:fb:8a:f9:4b:47:7a:
7c:68:69:23:90:7e:fc:69:94:00:06:17:12:63:08:a8:89:dc:
88:19:16:a8:43:93:c5:51:f8:08:ee:c2:a4:93:a3:92:58:2d:
82:4a:97:05:f6:99:b0:a8:ce:c4:23:f7:9c:e6:37:0b:48:ac:
d4:91:56:d3:ad:11:10:08:bc:e7:38:fc:92:9a:2e:0c:07:a2:
16:e7:39:68:6a:89:1a:e5:36:a1:26:42:fa:4b:7a:f5:42:fd:
88:eb:d5:a9:dd:ad:a3:b6:95:39:8e:80:4c:5f:2b:3f:84:86:
f0:32:3d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHbrLMq2GthWWzo8bWXptaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz
YmExMDAwHhcNMjYxMDA0MTUwMDU3WhcNMjYxMDA1MTUwMDU3WjAzMTEwLwYDVQQD
EygwNWE5ZmMwMjIxNzM3MTMwN2JlNzRkYjQ2OGUwNmMwYmE0YWVhYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme8uuB8l6xHTsBQveI4uWEZNowe1
y7p3fw7dMz2H6rcLg0sPK9ft5tdrJlPvZJrmT6Ms/OcqvcVYc9NRgbJSf772g7Jm
ycqgd48RmNP/XDAWvQdTsTeN6yDS1lHbGBQUhGT9IfTL56elHSB1ZOkyhG5i1h6j
0ACSvOU2YQj/HVKuTT+b57h964J6jBTRpIV+yiYIGsGHe90edPEm2xUAoNaaKcJO
4SptyMO+W0Htv+z2FByj0J4iimXE30HTIFWjVXkPHo+8uMF0Z+LlqepD4dj0Fjy6
jWHEbWYu1mKqu/0zyRzFteE3b6pLyPKpTjfIziPLcPr8F6iwUPefUGu75wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWp/AIhc3Ewe+dNtGjgbAukrqqFMB8GA1UdIwQY
MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt
MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3
LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWHSLapT
ZiuFoxOhRFVkhxtweWrubFPNkGYNk3hNzzp1ySg/eTsP4HCAnxlgCIZTj/1x5XX2
pElIr2XN35Rf7pmD1eWaFOsCp9d9uRW0ib3m3Hfqi8XL+oL9Tyz2beJ5i+UuaUxi
TMbxnxCU2HuwZwcHyOIin87Jl1Hs6SsWscJsk8Tf8EAGXEMa+4r5S0d6fGhpI5B+
/GmUAAYXEmMIqInciBkWqEOTxVH4CO7CpJOjklgtgkqXBfaZsKjOxCP3nOY3C0is
1JFW060REAi85zj8kpouDAeiFuc5aGqJGuU2oSZC+kt69UL9iOvVqd2to7aVOY6A
TF8rP4SG8DI9oQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:15:06 2026 by rpki-client