
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier: +Wch5LB90zmZSNyGHkyuP6NlCdJU+uXcXFQQjxwwea4=
Subject key identifier: A3:91:5F:13:F0:18:1B:3E:E2:73:24:1A:B2:10:BB:88:9C:54:B1:43
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 01A148E086C06C609210357D8F208C023DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 08:00:36 +0000
Manifest this update: Sat 17 Oct 2026 08:00:36 +0000
Manifest next update: Sun 18 Oct 2026 08:00:36 +0000
Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: zQMvqc9V+IkFLVZfNxMdil9Dy/iiDlPBOlVFFO6pOkQ=)
2: u54luoBvJ90jRz4_Cs6k2wJqM2k.roa (hash: Z5bvvUY0X6tpaDJHavzb0oFQRTX2AKCadnWYV41WvK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:86:c0:6c:60:92:10:35:7d:8f:20:8c:02:3d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Oct 17 08:00:36 2026 GMT
Not After : Oct 18 08:00:36 2026 GMT
Subject: CN=a3915f13f0181b3ee273241ab210bb889c54b143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:ab:7a:be:1d:e4:7d:ab:a7:37:08:65:ec:
72:71:18:c5:36:93:4c:dd:8f:5c:e8:3f:93:27:1b:
15:99:0f:a3:f7:00:de:03:f5:11:37:aa:1f:a7:20:
d8:a5:86:2e:ee:f3:a6:ea:f7:eb:b2:e5:fe:8e:91:
ef:f4:34:86:5d:17:ec:02:e7:5b:a5:81:6b:24:15:
d7:26:20:b1:93:22:33:db:f3:fc:63:0e:ed:64:f3:
48:21:74:77:c5:4a:cf:7f:7c:fa:ec:a7:7c:07:b4:
82:0c:a4:ef:ad:cd:42:71:88:97:2f:08:80:c3:45:
51:bf:4b:79:cf:9d:2e:25:2c:51:90:53:0b:bd:0b:
34:29:a8:5e:f3:09:30:b7:76:cb:55:0a:4a:ee:06:
40:3f:70:a1:a5:3a:8b:cf:3a:d3:48:70:92:7b:18:
0d:0f:b4:ef:a2:42:5c:60:e2:ae:fc:f3:5c:06:50:
16:2f:65:e7:6c:fc:2e:53:72:58:97:84:5c:27:de:
49:3b:cf:6d:16:82:76:96:86:b2:0c:60:8a:dc:eb:
ec:16:97:5d:b7:0b:5c:05:bd:bb:b9:ac:59:28:bb:
38:ea:f5:da:95:2b:69:6b:ff:28:d9:bf:ad:65:e8:
9c:f3:7a:b6:1e:50:31:bd:08:81:2a:44:a0:cb:07:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:5F:13:F0:18:1B:3E:E2:73:24:1A:B2:10:BB:88:9C:54:B1:43
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:74:66:94:78:80:39:77:47:e9:84:63:42:5c:58:0c:09:b6:
9f:72:51:9d:f4:4d:a9:2f:6d:3c:73:41:53:9f:3a:29:77:bb:
08:c8:fe:fc:d0:88:38:e7:43:6a:94:7c:d4:9c:a7:de:03:88:
ee:48:c2:ce:01:e7:d3:27:3e:88:39:02:dd:a1:6b:37:4d:8b:
7d:3d:5a:fd:d4:bf:9b:5d:a7:92:38:6b:15:43:37:e7:31:9f:
76:1a:ef:d2:5c:98:66:61:3f:35:ee:d7:b4:ee:2d:8e:ad:54:
9a:d4:61:1d:1b:7d:ac:8c:a0:e0:ad:09:1e:8d:7c:c0:d3:96:
98:e6:f4:80:a4:5c:7e:c0:96:f7:ac:94:09:99:42:fe:0e:92:
13:a2:38:ee:85:51:8b:3d:bb:71:39:f5:78:5b:9d:98:76:bb:
c2:4e:ef:21:2e:5d:f3:16:16:b8:3a:83:68:0b:f5:68:4c:b1:
6b:aa:44:cf:1f:f3:0e:c7:64:a4:c3:73:55:5f:70:82:a3:77:
a1:ec:56:0c:21:b0:34:60:9b:56:9b:57:f1:9e:ae:9d:55:71:
cf:bd:10:ed:1c:09:fd:9c:1b:c9:37:5f:64:e9:fb:8f:7e:e6:
39:cc:bc:ba:b6:c4:88:e9:fb:6d:d2:87:6b:ec:f8:23:50:06:
fb:32:4a:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFI4IbAbGCSEDV9jyCMAj3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmYwYWIyNTY2Mjc1N2FmYjgzMTY3NTMxOTI5NmY2M2Q5
ODliNjkwHhcNMjYxMDE3MDgwMDM2WhcNMjYxMDE4MDgwMDM2WjAzMTEwLwYDVQQD
EyhhMzkxNWYxM2YwMTgxYjNlZTI3MzI0MWFiMjEwYmI4ODljNTRiMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzurer4d5H2rpzcIZexycRjFNpNM
3Y9c6D+TJxsVmQ+j9wDeA/URN6ofpyDYpYYu7vOm6vfrsuX+jpHv9DSGXRfsAudb
pYFrJBXXJiCxkyIz2/P8Yw7tZPNIIXR3xUrPf3z67Kd8B7SCDKTvrc1CcYiXLwiA
w0VRv0t5z50uJSxRkFMLvQs0Kahe8wkwt3bLVQpK7gZAP3ChpTqLzzrTSHCSexgN
D7TvokJcYOKu/PNcBlAWL2XnbPwuU3JYl4RcJ95JO89tFoJ2loayDGCK3OvsFpdd
twtcBb27uaxZKLs46vXalStpa/8o2b+tZeic83q2HlAxvQiBKkSgywfiPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKORXxPwGBs+4nMkGrIQu4icVLFDMB8GA1UdIwQY
MBaAFO3/CrJWYnV6+4MWdTGSlvY9mJtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgt
NjQ0YmZkY2ViOWY2LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9lMmQ3MjktYmE5ZS00NzIzLWEzNjgtNjQ0YmZkY2ViOWY2
LzEvN2Y4S3NsWmlkWHI3Z3haMU1aS1c5ajJZbTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXRmlHiA
OXdH6YRjQlxYDAm2n3JRnfRNqS9tPHNBU586KXe7CMj+/NCIOOdDapR81Jyn3gOI
7kjCzgHn0yc+iDkC3aFrN02LfT1a/dS/m12nkjhrFUM35zGfdhrv0lyYZmE/Ne7X
tO4tjq1UmtRhHRt9rIyg4K0JHo18wNOWmOb0gKRcfsCW96yUCZlC/g6SE6I47oVR
iz27cTn1eFudmHa7wk7vIS5d8xYWuDqDaAv1aEyxa6pEzx/zDsdkpMNzVV9wgqN3
oexWDCGwNGCbVptX8Z6unVVxz70Q7RwJ/ZwbyTdfZOn7j37mOcy8urbEiOn7bdKH
a+z4I1AG+zJKqg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:05:05 2026 by rpki-client