Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
File: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json)
Hash identifier: 1KQRsJ4/wJPRz6xSzxxxCCgTmfpDoU6y1d8qalhWRSU=
Subject key identifier: 68:A2:A6:38:F0:FC:E3:5F:53:A2:97:42:C7:71:B2:6D:E1:5F:5F:5C
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial: 01A08CE8D05B8F2D726E64A334C962906A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
Manifest number: 158D
Signing time: Thu 10 Sep 2026 20:01:02 +0000
Manifest this update: Thu 10 Sep 2026 20:01:02 +0000
Manifest next update: Fri 11 Sep 2026 20:01:02 +0000
Files and hashes: 1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: Ox+LekpLUUimeT7n5CXfGTwvuZ6IIDOjIdkoyfFJNaM=)
2: oaJjif49aOtwhtdpNwsRYaoP_Rw.roa (hash: n1QGSuy4XICYBqS37wdCnghgVjW6ky2PfMzer7DCkkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:d0:5b:8f:2d:72:6e:64:a3:34:c9:62:90:6a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Validity
Not Before: Sep 10 20:01:02 2026 GMT
Not After : Sep 11 20:01:02 2026 GMT
Subject: CN=68a2a638f0fce35f53a29742c771b26de15f5f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:9c:e8:53:56:c3:b2:76:02:0b:18:8e:2f:
eb:43:15:3e:3b:23:c6:02:15:00:99:b3:20:f2:ac:
a4:30:f2:07:b8:78:66:10:04:bd:75:48:f8:7f:52:
fb:71:8b:98:ab:8e:c4:b3:d4:d8:67:8a:dd:01:ee:
0c:83:75:22:27:2c:1c:fe:61:ff:41:c2:99:ed:02:
59:73:ad:8c:74:ac:4e:f5:a1:d9:0b:5a:c5:06:fd:
11:22:55:16:b1:7a:36:39:b4:8f:d8:da:c3:78:be:
01:47:5c:73:21:bb:0b:98:08:db:d3:39:d4:f6:2f:
9e:fe:e7:06:f3:25:e6:59:3f:ee:ce:77:22:9a:0e:
c8:42:7f:e3:57:7d:39:5d:5b:93:d2:f6:03:7e:22:
93:27:96:68:60:d5:03:8f:77:a5:1e:4e:d1:3a:4f:
e4:6c:d3:e9:d8:aa:86:0c:29:dd:f8:2c:8a:65:9f:
1f:e0:a3:17:11:4b:41:0e:c7:43:1c:f3:5e:d4:81:
c3:24:3f:ca:35:34:6f:3a:cf:e7:86:39:2e:aa:73:
49:6d:97:ec:2c:9c:4a:2b:c6:ea:e2:8b:23:b1:e6:
68:81:0c:25:d3:58:20:f5:45:f5:b8:9c:84:33:1a:
85:0f:10:75:21:78:f5:2d:52:4f:60:e0:f4:4b:ef:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:A6:38:F0:FC:E3:5F:53:A2:97:42:C7:71:B2:6D:E1:5F:5F:5C
X509v3 Authority Key Identifier:
keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f4:e9:8d:98:e4:6c:1b:1b:30:87:29:c0:62:48:28:a2:73:
20:ad:8a:92:eb:8f:30:26:e4:03:12:b1:48:bd:a2:46:bb:ca:
67:81:76:8d:ec:aa:3f:db:39:03:5f:a0:1f:e5:10:4c:1a:1c:
c5:35:48:4e:0a:e1:43:03:aa:1e:ca:67:d2:4b:84:49:e6:82:
24:0e:bd:f0:e7:50:2c:94:3d:13:16:27:d2:f4:a7:81:e3:68:
40:6a:b3:27:e5:33:68:59:e1:fe:e0:63:c6:f5:f4:54:ef:cb:
80:b8:bf:d8:9c:48:21:32:c8:df:4c:78:1a:18:99:7d:1a:9f:
33:41:1d:92:94:a4:af:5a:9a:ba:c1:33:8c:ee:cb:25:60:e0:
55:98:22:d9:04:0a:5f:9a:d9:64:dc:20:52:f2:be:94:f7:32:
51:64:fb:c4:52:89:65:15:03:49:63:d7:a6:8f:27:f7:b2:94:
b9:7c:a1:7b:bb:0c:73:a5:e2:18:91:6f:89:30:56:01:f5:9a:
50:63:62:78:7e:d7:0b:da:26:45:98:ce:1d:e9:eb:e6:af:34:
cb:cf:8f:7a:09:5f:eb:c7:31:81:be:49:eb:42:59:9d:e4:b3:
07:7d:53:ac:5a:a4:a6:1d:82:2a:b4:6a:09:15:ef:77:df:4e:
c4:7c:f0:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6NBbjy1ybmSjNMlikGqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzNjMjY2MDliMWIyMWQ4N2E2ODEzMDJlZjJkMjZmYzBh
MDBmYTMwHhcNMjYwOTEwMjAwMTAyWhcNMjYwOTExMjAwMTAyWjAzMTEwLwYDVQQD
Eyg2OGEyYTYzOGYwZmNlMzVmNTNhMjk3NDJjNzcxYjI2ZGUxNWY1ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ec6FNWw7J2AgsYji/rQxU+OyPG
AhUAmbMg8qykMPIHuHhmEAS9dUj4f1L7cYuYq47Es9TYZ4rdAe4Mg3UiJywc/mH/
QcKZ7QJZc62MdKxO9aHZC1rFBv0RIlUWsXo2ObSP2NrDeL4BR1xzIbsLmAjb0znU
9i+e/ucG8yXmWT/uzncimg7IQn/jV305XVuT0vYDfiKTJ5ZoYNUDj3elHk7ROk/k
bNPp2KqGDCnd+CyKZZ8f4KMXEUtBDsdDHPNe1IHDJD/KNTRvOs/nhjkuqnNJbZfs
LJxKK8bq4osjseZogQwl01gg9UX1uJyEMxqFDxB1IXj1LVJPYOD0S+9MywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiipjjw/ONfU6KXQsdxsm3hX19cMB8GA1UdIwQY
MBaAFO1zwmYJsbIdh6aBMC7y0m/AoA+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jOGVhNDYtOWRjMi00MDM2LTkwOTYt
NGNkNzdiMzhmMWIxLzEvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jOGVhNDYtOWRjMi00MDM2LTkwOTYtNGNkNzdiMzhmMWIx
LzEvN1hQQ1pnbXhzaDJIcG9Fd0x2TFNiOENnRDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPTpjZjk
bBsbMIcpwGJIKKJzIK2KkuuPMCbkAxKxSL2iRrvKZ4F2jeyqP9s5A1+gH+UQTBoc
xTVITgrhQwOqHspn0kuESeaCJA698OdQLJQ9ExYn0vSngeNoQGqzJ+UzaFnh/uBj
xvX0VO/LgLi/2JxIITLI30x4GhiZfRqfM0EdkpSkr1qausEzjO7LJWDgVZgi2QQK
X5rZZNwgUvK+lPcyUWT7xFKJZRUDSWPXpo8n97KUuXyhe7sMc6XiGJFviTBWAfWa
UGNieH7XC9omRZjOHenr5q80y8+Peglf68cxgb5J60JZneSzB31TrFqkph2CKrRq
CRXvd99OxHzwFw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:52:49 2026 by rpki-client