Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: QAb4Up3xWcyJjxjsDWs8dAXfvkvcNwwOFSJE/yLDBO4=
Subject key identifier: 55:20:DD:29:DF:A3:27:ED:C0:1F:CC:1B:78:F8:58:34:73:9E:2F:58
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 01A1419625E791E4905D1EDDF4C2E98B5D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0D19
Signing time: Thu 15 Oct 2026 22:02:01 +0000
Manifest this update: Thu 15 Oct 2026 22:02:01 +0000
Manifest next update: Fri 16 Oct 2026 22:02:01 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: XaD/tmpO2B/M58E7HURR/w7yXd2eMa4F+0hRSQVBYfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:96:25:e7:91:e4:90:5d:1e:dd:f4:c2:e9:8b:5d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Oct 15 22:02:01 2026 GMT
Not After : Oct 16 22:02:01 2026 GMT
Subject: CN=5520dd29dfa327edc01fcc1b78f85834739e2f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:0b:1c:2a:fc:98:45:54:8f:8d:cc:56:05:
9c:81:80:67:5e:ef:09:fc:8d:35:53:0a:d5:0c:19:
f1:14:73:37:94:9e:cc:a2:5d:8a:60:eb:0d:e3:b4:
d1:74:14:32:31:4c:5f:ae:5d:13:6b:73:79:be:03:
35:f8:e5:12:02:37:cb:2e:f8:06:c3:9a:b2:13:88:
38:1c:a7:47:4d:68:94:e0:2b:7f:a0:fc:18:77:c7:
89:0a:01:33:32:fe:bb:d3:c8:c2:8a:ac:71:68:4e:
f1:a9:3b:d7:cd:21:52:2b:db:fd:75:05:4c:9b:12:
a7:43:3d:06:59:b6:0c:1c:74:11:75:a2:14:ab:af:
64:5e:b6:78:15:37:5f:c2:da:71:47:00:c3:f2:3b:
29:50:08:98:2c:8f:23:ee:66:d0:a0:87:f6:4d:85:
13:5d:54:3e:82:ec:84:b4:a9:e9:5c:13:d8:84:55:
4b:f6:7d:b5:30:53:92:cf:f9:ae:c6:33:d6:36:40:
04:f4:f8:be:3a:49:88:5b:7a:93:ed:cf:52:81:73:
62:65:f9:78:95:24:ff:51:94:8f:71:d8:35:c0:0e:
5e:18:db:10:a5:a2:49:42:70:57:57:d0:fe:a0:96:
96:b1:5f:96:51:24:40:5f:f6:6f:08:71:e6:a6:ae:
8b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:DD:29:DF:A3:27:ED:C0:1F:CC:1B:78:F8:58:34:73:9E:2F:58
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b7:23:1c:a1:4d:2c:04:97:3e:27:df:fa:22:9f:9e:0b:fa:
d9:b1:95:3d:04:f8:de:46:d7:4d:a9:dc:bb:2c:16:6f:21:b7:
c4:f5:5e:4c:69:69:09:21:61:fb:10:98:85:90:02:ad:8a:83:
b4:b7:21:b8:e4:9f:f7:1e:2c:04:29:d6:dc:c1:08:4e:ff:b9:
61:fc:d5:44:f7:30:90:3f:ae:10:26:aa:c1:71:51:42:ff:d5:
f8:f1:65:4b:f7:ce:ba:63:1a:bb:19:c9:e5:1f:73:c6:dd:4a:
ca:66:8b:01:3e:9c:f1:a4:77:2f:4d:cc:d5:1e:fd:65:91:52:
37:01:e5:c4:25:0f:38:cd:bc:d7:a5:00:1e:c2:0d:15:3d:cb:
31:89:d3:19:67:84:74:1b:38:f9:6d:f4:72:fa:c3:b9:6b:4a:
24:41:ae:40:88:3d:e1:56:80:36:c2:5d:6a:bf:0b:3a:30:31:
c8:aa:44:9b:8d:0e:76:d2:e7:2c:66:ce:af:19:01:05:33:fa:
4e:68:70:19:32:08:63:d4:5d:9e:53:0f:de:c5:8f:43:d7:b2:
06:8a:04:2f:e4:9d:c1:db:81:18:3f:a2:f7:9d:c6:17:db:76:
f1:fd:23:b5:2d:7e:b9:77:78:9c:45:49:d2:9e:3d:cb:29:e5:
86:41:f3:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFBliXnkeSQXR7d9MLpi12ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjYxMDE1MjIwMjAxWhcNMjYxMDE2MjIwMjAxWjAzMTEwLwYDVQQD
Eyg1NTIwZGQyOWRmYTMyN2VkYzAxZmNjMWI3OGY4NTgzNDczOWUyZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolkLHCr8mEVUj43MVgWcgYBnXu8J
/I01UwrVDBnxFHM3lJ7Mol2KYOsN47TRdBQyMUxfrl0Ta3N5vgM1+OUSAjfLLvgG
w5qyE4g4HKdHTWiU4Ct/oPwYd8eJCgEzMv6708jCiqxxaE7xqTvXzSFSK9v9dQVM
mxKnQz0GWbYMHHQRdaIUq69kXrZ4FTdfwtpxRwDD8jspUAiYLI8j7mbQoIf2TYUT
XVQ+guyEtKnpXBPYhFVL9n21MFOSz/muxjPWNkAE9Pi+OkmIW3qT7c9SgXNiZfl4
lST/UZSPcdg1wA5eGNsQpaJJQnBXV9D+oJaWsV+WUSRAX/ZvCHHmpq6LTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUg3SnfoyftwB/MG3j4WDRzni9YMB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2LcjHKFN
LASXPiff+iKfngv62bGVPQT43kbXTancuywWbyG3xPVeTGlpCSFh+xCYhZACrYqD
tLchuOSf9x4sBCnW3MEITv+5YfzVRPcwkD+uECaqwXFRQv/V+PFlS/fOumMauxnJ
5R9zxt1KymaLAT6c8aR3L03M1R79ZZFSNwHlxCUPOM2816UAHsINFT3LMYnTGWeE
dBs4+W30cvrDuWtKJEGuQIg94VaANsJdar8LOjAxyKpEm40OdtLnLGbOrxkBBTP6
TmhwGTIIY9RdnlMP3sWPQ9eyBooEL+SdwduBGD+i953GF9t28f0jtS1+uXd4nEVJ
0p49yynlhkHzbg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:37 2026 by rpki-client