Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: Ih+NGeCvdDrjVCmwk8UKO4GpOXTQvJOXKYKWe0ealVY=
Subject key identifier: B3:72:E0:62:F3:2A:C7:17:51:6F:6B:AC:C9:B4:F6:E2:6D:05:27:3D
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01A002B8D0D4D748DE432C8BED193CC4D583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 17EA
Signing time: Sat 15 Aug 2026 00:01:01 +0000
Manifest this update: Sat 15 Aug 2026 00:01:01 +0000
Manifest next update: Sun 16 Aug 2026 00:01:01 +0000
Files and hashes: 1: 5wBvYH18mnYKydx8H19r86HtE0Q.roa (hash: VUGd6jaGsjCSaa2yqTqiiqwge8OaZ7jM3DegnmT+3+Q=)
2: 5zuquzvoPSv-HJr2QhNMX3OYMgA.roa (hash: bcYgeaY8QXTzK+9kyXA0UgosAczZtORy6M/Ez+Fizn8=)
3: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: lMKUPnnzt7gasOHg7+vCvB5Rtvh+k7PbgCTZLMn+8ng=)
4: kgnu5UR9Ocl-BiVCaC6wT07shm0.roa (hash: FpIRHnwVZMdLfpDIL1lnVTw2bZIMLJe4K4qr7pxMTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:d0:d4:d7:48:de:43:2c:8b:ed:19:3c:c4:d5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Aug 15 00:01:01 2026 GMT
Not After : Aug 16 00:01:01 2026 GMT
Subject: CN=b372e062f32ac717516f6bacc9b4f6e26d05273d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:63:5b:ac:02:c7:10:27:b0:0a:3f:4b:15:
8c:e9:55:2a:84:59:fc:93:c0:91:05:e8:aa:4b:b1:
d9:45:63:9e:f5:36:da:67:9b:12:3e:49:fe:0d:d6:
db:2e:8d:08:31:04:f1:71:2f:17:af:1f:f7:62:fd:
8f:ca:81:2e:af:66:99:63:21:53:7f:78:3e:8d:dd:
5d:4e:0f:01:5b:68:ea:79:bf:99:13:56:06:5d:48:
93:ad:11:af:d4:3c:12:d3:af:f4:49:83:28:ed:f0:
da:41:29:2d:f7:90:d3:91:ce:ea:1f:f9:33:b2:72:
53:1a:bb:c7:87:66:4c:fe:73:f3:86:25:98:76:ef:
c4:b3:bf:20:11:72:59:83:0b:e1:ce:1b:2c:e1:8d:
66:48:b5:e3:7b:71:75:45:81:4e:be:f2:55:e2:a4:
50:c7:69:e1:06:aa:44:4a:d1:89:47:1b:28:6d:8d:
32:01:01:5f:3a:0c:37:7c:6a:48:a9:31:83:25:92:
61:ed:84:34:19:c3:37:73:4e:8d:f0:da:d0:2f:ee:
10:31:54:f1:ba:a2:35:a8:69:5b:29:ef:4b:05:e0:
eb:83:99:85:03:1d:25:46:9e:e5:e5:1a:c8:ca:44:
f3:50:da:13:b3:9a:ff:54:68:e1:bb:a6:34:e7:c3:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:72:E0:62:F3:2A:C7:17:51:6F:6B:AC:C9:B4:F6:E2:6D:05:27:3D
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bb:ea:2f:65:74:78:88:de:c6:09:e0:b3:81:7b:e3:8c:3d:
0d:92:ad:53:74:14:af:d3:1c:97:81:4d:b3:49:54:9f:c2:70:
5a:00:a2:f1:33:65:f0:ff:1f:4f:cd:89:df:17:69:45:99:84:
a3:16:f9:bc:7f:9e:30:31:07:4f:fc:cd:2f:25:30:de:28:ba:
47:21:b8:24:58:26:ee:01:21:77:a7:61:91:c9:f9:1b:96:9c:
ab:ea:ed:2f:e1:92:5e:5c:dd:0f:9e:31:74:5f:02:0a:c3:99:
74:33:9c:61:a2:e3:8d:16:dc:af:a2:da:14:9f:80:b2:fc:21:
99:77:a3:59:60:14:3b:7c:df:bb:57:e6:0c:aa:7d:c3:d3:3c:
13:c5:42:4d:ec:44:0a:7e:6d:d3:d4:19:1e:44:91:7f:46:88:
d1:31:95:e5:ee:a7:ca:9b:14:94:b4:0c:03:3b:f8:28:ee:7a:
d8:ac:8e:4f:3b:d3:84:9a:0e:c6:97:78:14:4b:0e:76:44:66:
7b:2d:ad:71:c1:56:28:1e:5d:78:ff:f8:db:e9:3b:55:dc:2f:
47:86:d6:81:de:a1:d8:df:74:00:4a:af:2e:73:ea:1b:77:ea:
e0:23:e6:f7:87:a4:bf:05:54:d8:77:38:a2:84:df:90:b1:a6:
fa:53:9d:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuNDU10jeQyyL7Rk8xNWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWNjZTkwMWU1ZmI3YzkyZjA5YTkxNWNmNmU2NTZmNjkz
YmExMDAwHhcNMjYwODE1MDAwMTAxWhcNMjYwODE2MDAwMTAxWjAzMTEwLwYDVQQD
EyhiMzcyZTA2MmYzMmFjNzE3NTE2ZjZiYWNjOWI0ZjZlMjZkMDUyNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEdjW6wCxxAnsAo/SxWM6VUqhFn8
k8CRBeiqS7HZRWOe9TbaZ5sSPkn+DdbbLo0IMQTxcS8Xrx/3Yv2PyoEur2aZYyFT
f3g+jd1dTg8BW2jqeb+ZE1YGXUiTrRGv1DwS06/0SYMo7fDaQSkt95DTkc7qH/kz
snJTGrvHh2ZM/nPzhiWYdu/Es78gEXJZgwvhzhss4Y1mSLXje3F1RYFOvvJV4qRQ
x2nhBqpEStGJRxsobY0yAQFfOgw3fGpIqTGDJZJh7YQ0GcM3c06N8NrQL+4QMVTx
uqI1qGlbKe9LBeDrg5mFAx0lRp7l5RrIykTzUNoTs5r/VGjhu6Y058OR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNy4GLzKscXUW9rrMm09uJtBSc9MB8GA1UdIwQY
MBaAFO4czpAeX7fJLwmpFc9uZW9pO6EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEt
MTRhMTkwOWIxMjM3LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOWQ1ZjEtNjZmNy00OWQ4LWFmYmEtMTRhMTkwOWIxMjM3
LzEvN2h6T2tCNWZ0OGt2Q2FrVnoyNWxiMms3b1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrvqL2V0
eIjexgngs4F744w9DZKtU3QUr9Mcl4FNs0lUn8JwWgCi8TNl8P8fT82J3xdpRZmE
oxb5vH+eMDEHT/zNLyUw3ii6RyG4JFgm7gEhd6dhkcn5G5acq+rtL+GSXlzdD54x
dF8CCsOZdDOcYaLjjRbcr6LaFJ+AsvwhmXejWWAUO3zfu1fmDKp9w9M8E8VCTexE
Cn5t09QZHkSRf0aI0TGV5e6nypsUlLQMAzv4KO562KyOTzvThJoOxpd4FEsOdkRm
ey2tccFWKB5deP/42+k7VdwvR4bWgd6h2N90AEqvLnPqG3fq4CPm94ekvwVU2Hc4
ooTfkLGm+lOd+g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:07:07 2026 by rpki-client