Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
File: 7H491OPmGG_IV_QQAUEJGF_T4LM.mft (raw, json)
Hash identifier: 2kWwtjq4/ddaqvr+5yDVuKFNcTMjQ+PDBa5zcUXmc/Y=
Subject key identifier: D4:54:25:CD:3A:4B:67:30:1E:39:21:98:F7:0E:8C:98:E6:B3:01:A0
Authority key identifier: EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
Certificate issuer: /CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Certificate serial: 01A0B42D10893D67BFB30FF37A03ACD9A2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
Manifest number: 07
Signing time: Fri 18 Sep 2026 11:00:47 +0000
Manifest this update: Fri 18 Sep 2026 11:00:47 +0000
Manifest next update: Sat 19 Sep 2026 11:00:47 +0000
Files and hashes: 1: 7H491OPmGG_IV_QQAUEJGF_T4LM.crl (hash: g7A6XUSiiDMVrexXop5zbYIg+OQcWy53JYjhELv3rkU=)
2: GPgE8Js570-QLkZUKoJ1126aifk.roa (hash: 8t2EybYwOYg8iaMpOVbMKmfuxyVmfmhAErNMOv+rkx0=)
3: dZUEtJOg8buS0KSq3TP_LatHVeo.roa (hash: HKrpoxg/elM/P+fh5BgNzbrOsO/5w+yqFe6WOxefcu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:2d:10:89:3d:67:bf:b3:0f:f3:7a:03:ac:d9:a2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7e3dd4e3e6186fc857f410014109185fd3e0b3
Validity
Not Before: Sep 18 11:00:47 2026 GMT
Not After : Sep 19 11:00:47 2026 GMT
Subject: CN=d45425cd3a4b67301e392198f70e8c98e6b301a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:74:89:7c:ae:92:07:74:f4:5b:c4:eb:f6:
6e:b9:85:35:9f:85:06:85:c1:b9:36:cf:98:e6:aa:
6a:a3:60:f1:68:82:1c:2d:ad:a2:f6:03:1a:c1:2c:
25:f6:73:4e:f5:8f:4b:4d:21:4e:27:9c:26:e2:25:
87:94:0f:f1:f4:95:26:0e:d0:d1:56:86:fb:a1:b9:
b1:02:d4:a4:c1:2f:ee:32:90:27:90:e5:81:71:51:
2c:c9:74:81:cd:1a:88:f2:af:b3:84:69:ad:30:df:
f4:bb:85:1c:ba:c9:71:74:97:4a:46:bb:bd:bb:09:
8b:29:e2:89:52:f7:fb:20:56:7b:79:4f:d6:69:e6:
f3:ad:27:33:22:df:f3:37:22:d8:2a:23:d2:26:81:
5c:b6:2a:13:ab:b5:a3:34:1e:69:a8:40:88:14:6d:
d3:6a:18:78:95:eb:c5:c2:06:22:a8:42:91:b6:89:
bf:2a:77:e4:38:23:00:7d:1e:25:a9:1d:84:0e:c0:
2d:0b:7f:49:d2:5f:af:dc:3d:29:93:36:9c:13:5e:
b6:80:18:92:92:ea:74:0f:22:97:3a:a4:0f:38:28:
df:30:97:73:52:9b:90:63:3e:41:05:6f:51:ef:d8:
9b:a6:00:40:1b:fc:1a:65:fc:44:3c:7e:07:26:5f:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:25:CD:3A:4B:67:30:1E:39:21:98:F7:0E:8C:98:E6:B3:01:A0
X509v3 Authority Key Identifier:
keyid:EC:7E:3D:D4:E3:E6:18:6F:C8:57:F4:10:01:41:09:18:5F:D3:E0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H491OPmGG_IV_QQAUEJGF_T4LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/cf5b1f-d1fa-4cc5-a65a-22c9627ebea2/1/7H491OPmGG_IV_QQAUEJGF_T4LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4a:4e:cd:ab:25:2e:7e:72:f7:f4:47:4f:cc:8f:8a:70:07:
e9:f0:66:e8:c7:8a:ea:94:a8:44:f8:94:09:cd:c2:7e:a1:f5:
80:e8:d3:24:64:65:55:1f:7e:78:87:5b:86:db:95:c4:aa:c5:
e7:88:f2:29:1a:4f:2a:5d:c8:8d:3f:a3:56:c9:e8:e2:e7:bf:
d0:fa:13:c8:3c:77:36:4d:08:b8:c7:f7:25:90:61:ef:4d:6d:
d3:0e:35:4a:41:e5:86:1a:1a:86:3b:fa:2c:f7:59:ab:7b:c4:
d6:33:8e:c9:c7:ba:f7:30:e3:62:05:5d:16:45:61:f7:4c:ea:
16:ba:96:fc:f0:25:bb:70:3c:57:48:d9:b0:2e:44:96:fa:29:
fc:3a:10:33:44:84:1e:bf:ab:68:3a:25:a1:c2:40:57:dc:e3:
bb:21:88:db:21:30:67:14:f3:34:6a:a8:b9:4c:ca:c8:91:ee:
ff:c1:4b:af:ee:dc:e3:c7:dd:bf:35:5e:a5:9a:2f:b6:b1:14:
dd:84:84:2a:85:37:26:e3:6e:8d:0c:f8:33:90:dc:5f:8d:90:
45:39:67:39:bd:8d:ee:52:c9:69:67:b7:61:64:6d:ee:3d:34:
f0:a2:1f:85:b6:ec:db:bd:3c:fa:cb:5a:ec:a4:b2:77:4b:ac:
6d:82:81:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC0LRCJPWe/sw/zegOs2aLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2UzZGQ0ZTNlNjE4NmZjODU3ZjQxMDAxNDEwOTE4NWZk
M2UwYjMwHhcNMjYwOTE4MTEwMDQ3WhcNMjYwOTE5MTEwMDQ3WjAzMTEwLwYDVQQD
EyhkNDU0MjVjZDNhNGI2NzMwMWUzOTIxOThmNzBlOGM5OGU2YjMwMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphV0iXyukgd09FvE6/ZuuYU1n4UG
hcG5Ns+Y5qpqo2DxaIIcLa2i9gMawSwl9nNO9Y9LTSFOJ5wm4iWHlA/x9JUmDtDR
Vob7obmxAtSkwS/uMpAnkOWBcVEsyXSBzRqI8q+zhGmtMN/0u4UcuslxdJdKRru9
uwmLKeKJUvf7IFZ7eU/WaebzrSczIt/zNyLYKiPSJoFctioTq7WjNB5pqECIFG3T
ahh4levFwgYiqEKRtom/KnfkOCMAfR4lqR2EDsAtC39J0l+v3D0pkzacE162gBiS
kup0DyKXOqQPOCjfMJdzUpuQYz5BBW9R79ibpgBAG/waZfxEPH4HJl8dXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRUJc06S2cwHjkhmPcOjJjmswGgMB8GA1UdIwQY
MBaAFOx+PdTj5hhvyFf0EAFBCRhf0+CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g0OTFPUG1HR19JVl9RUUFVRUpHRl9UNExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jZjViMWYtZDFmYS00Y2M1LWE2NWEt
MjJjOTYyN2ViZWEyLzEvN0g0OTFPUG1HR19JVl9RUUFVRUpHRl9UNExNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jZjViMWYtZDFmYS00Y2M1LWE2NWEtMjJjOTYyN2ViZWEy
LzEvN0g0OTFPUG1HR19JVl9RUUFVRUpHRl9UNExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUpOzasl
Ln5y9/RHT8yPinAH6fBm6MeK6pSoRPiUCc3CfqH1gOjTJGRlVR9+eIdbhtuVxKrF
54jyKRpPKl3IjT+jVsno4ue/0PoTyDx3Nk0IuMf3JZBh701t0w41SkHlhhoahjv6
LPdZq3vE1jOOyce69zDjYgVdFkVh90zqFrqW/PAlu3A8V0jZsC5Elvop/DoQM0SE
Hr+raDolocJAV9zjuyGI2yEwZxTzNGqouUzKyJHu/8FLr+7c48fdvzVepZovtrEU
3YSEKoU3JuNujQz4M5DcX42QRTlnOb2N7lLJaWe3YWRt7j008KIfhbbs2708+sta
7KSyd0usbYKBQg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 15:36:13 2026 by rpki-client