Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: zCYCfo8uswBC2LowlEC1MN2CtlayGg/5Z2dmAvLTaJs=
Subject key identifier: A1:A6:81:A7:1F:5A:53:02:BF:44:BE:6E:93:84:29:B9:BC:79:FA:16
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 01A18F4277BF50CD14178A009792A466C1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 184F
Signing time: Sat 31 Oct 2026 00:01:00 +0000
Manifest this update: Sat 31 Oct 2026 00:01:00 +0000
Manifest next update: Sun 01 Nov 2026 00:01:00 +0000
Files and hashes: 1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: QoanVbxaGvP8FkNkSY4qn4pQmxTUW5otthJCrL8EuYc=)
3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:77:bf:50:cd:14:17:8a:00:97:92:a4:66:c1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Oct 31 00:01:00 2026 GMT
Not After : Nov 1 00:01:00 2026 GMT
Subject: CN=a1a681a71f5a5302bf44be6e938429b9bc79fa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:9d:04:12:a3:c1:95:85:b9:14:8a:87:af:
02:12:aa:69:23:60:5d:b2:19:ed:e4:a1:e2:0b:d0:
ae:c5:1a:0a:f6:04:09:f0:74:6f:c2:39:70:d8:7c:
39:aa:61:da:35:56:3d:56:7c:4b:2d:b0:2a:2c:3d:
c9:0c:58:ed:5d:d5:13:79:20:e1:ce:63:67:8d:f0:
09:f4:44:77:f1:99:5a:1b:66:b4:e1:3e:b1:0d:35:
73:f5:96:48:cc:84:f3:25:92:5a:3a:df:70:3a:48:
89:60:e8:17:da:70:da:e7:ca:c7:79:4a:92:b0:81:
02:32:4b:f7:04:f1:1d:73:d1:f3:08:9b:c4:c0:3a:
d8:62:31:10:5a:a2:5c:09:e1:76:3b:97:e0:22:e6:
cb:46:2e:b9:72:83:37:57:7e:14:93:16:4c:89:79:
f5:79:74:1d:6b:a4:aa:fa:45:33:76:a6:aa:3e:e0:
66:02:ed:f8:d2:89:d9:45:a4:cc:fd:87:87:78:e5:
12:58:ff:01:cb:21:63:c2:94:3c:94:a0:60:46:41:
43:7a:10:8e:b2:0e:ef:8f:85:9d:21:64:46:89:2c:
b2:2e:64:a8:59:e4:d3:7b:58:9b:28:07:76:fc:25:
83:a7:c4:c1:71:d7:8e:2d:0f:f9:c3:a7:3d:40:cc:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A6:81:A7:1F:5A:53:02:BF:44:BE:6E:93:84:29:B9:BC:79:FA:16
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:72:03:ca:ed:e5:2c:7c:df:aa:b7:f8:29:32:b0:3e:5d:
32:fe:fd:69:fd:f2:78:b0:be:8f:86:e1:14:e0:8e:bd:63:6a:
f5:53:7a:8d:2b:4c:65:a0:48:3e:1f:14:fe:36:db:bd:e3:97:
46:bc:43:28:aa:d1:b7:bb:07:f1:bf:dd:e8:62:d1:7f:9a:e0:
39:2a:fd:9b:5d:35:67:78:17:8e:d7:12:b3:1e:3f:ee:4c:ee:
e4:a9:2b:8a:72:bc:b4:bf:a9:44:b0:7f:9e:2b:ac:cc:8f:55:
56:e9:0e:18:a4:b3:90:2f:ed:18:8b:7a:8a:84:bc:65:29:04:
71:e2:86:69:e7:e8:05:83:9f:a7:6b:34:bc:dd:b1:59:93:9f:
04:10:19:01:fd:42:b5:c5:52:81:d0:02:9c:30:47:16:c2:37:
c9:9f:14:8a:df:98:f6:a4:13:74:f6:33:44:ca:d7:81:40:75:
17:a7:45:b6:23:ac:46:a9:19:3b:56:26:eb:51:92:26:4c:29:
1c:4b:21:76:a3:3e:12:8a:d8:28:9f:fe:50:77:d6:2d:71:14:
e0:9a:0a:cd:bc:a2:78:57:af:c7:7c:f7:bd:65:7e:4c:0e:c8:
ae:35:e4:f3:73:64:38:a9:10:2e:c2:7f:0e:3e:01:19:a0:4a:
83:83:99:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPQne/UM0UF4oAl5KkZsH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjRmOWRiMzBiMTljNzVlMzVhZTgwMzc5M2Y0ZTFiNGFh
YTE0ODcwHhcNMjYxMDMxMDAwMTAwWhcNMjYxMTAxMDAwMTAwWjAzMTEwLwYDVQQD
EyhhMWE2ODFhNzFmNWE1MzAyYmY0NGJlNmU5Mzg0MjliOWJjNzlmYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3udBBKjwZWFuRSKh68CEqppI2Bd
shnt5KHiC9CuxRoK9gQJ8HRvwjlw2Hw5qmHaNVY9VnxLLbAqLD3JDFjtXdUTeSDh
zmNnjfAJ9ER38ZlaG2a04T6xDTVz9ZZIzITzJZJaOt9wOkiJYOgX2nDa58rHeUqS
sIECMkv3BPEdc9HzCJvEwDrYYjEQWqJcCeF2O5fgIubLRi65coM3V34UkxZMiXn1
eXQda6Sq+kUzdqaqPuBmAu340onZRaTM/YeHeOUSWP8ByyFjwpQ8lKBgRkFDehCO
sg7vj4WdIWRGiSyyLmSoWeTTe1ibKAd2/CWDp8TBcdeOLQ/5w6c9QMz6LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGmgacfWlMCv0S+bpOEKbm8efoWMB8GA1UdIwQY
MBaAFOz0+dswsZx141roA3k/ThtKqhSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYt
YzgxNWU1MGVjNWU3LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZmVhOGItNTIyOC00MmY3LTgyNTYtYzgxNWU1MGVjNWU3
LzEvN1BUNTJ6Q3huSFhqV3VnRGVUOU9HMHFxRkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxlyA8rt
5Sx836q3+CkysD5dMv79af3yeLC+j4bhFOCOvWNq9VN6jStMZaBIPh8U/jbbveOX
RrxDKKrRt7sH8b/d6GLRf5rgOSr9m101Z3gXjtcSsx4/7kzu5KkrinK8tL+pRLB/
niuszI9VVukOGKSzkC/tGIt6ioS8ZSkEceKGaefoBYOfp2s0vN2xWZOfBBAZAf1C
tcVSgdACnDBHFsI3yZ8Uit+Y9qQTdPYzRMrXgUB1F6dFtiOsRqkZO1Ym61GSJkwp
HEshdqM+EorYKJ/+UHfWLXEU4JoKzbyieFevx3z3vWV+TA7IrjXk83NkOKkQLsJ/
Dj4BGaBKg4OZcg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:22:59 2026 by rpki-client