Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
File: 7HB5DNzgwZKsiG89nvcl85lRg5g.mft (raw, json)
Hash identifier: chsc5Mmrp06ADey+looQ8rBn0e/HSSVgzQpC5TYd/TQ=
Subject key identifier: 17:E4:32:FC:D3:F9:61:8D:07:54:8C:48:CB:32:5D:C3:AF:50:1B:F4
Authority key identifier: EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
Certificate issuer: /CN=ec70790cdce0c192ac886f3d9ef725f399518398
Certificate serial: 01A0412A0078484CC5B022915634311E4EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
Manifest number: 02AA
Signing time: Thu 27 Aug 2026 03:01:06 +0000
Manifest this update: Thu 27 Aug 2026 03:01:06 +0000
Manifest next update: Fri 28 Aug 2026 03:01:06 +0000
Files and hashes: 1: 7HB5DNzgwZKsiG89nvcl85lRg5g.crl (hash: LTiUcPtZPHNiI+YxX/rXKi15TQ4hEKkTJsrdS5WHFj8=)
2: SqwoZLt0wGfQ52uqKIyPq1MR0n0.roa (hash: 54gdg5z/WirnRdadVGX+GzAUp4jdY5Mqe47XSjLSOVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:00:78:48:4c:c5:b0:22:91:56:34:31:1e:4e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70790cdce0c192ac886f3d9ef725f399518398
Validity
Not Before: Aug 27 03:01:06 2026 GMT
Not After : Aug 28 03:01:06 2026 GMT
Subject: CN=17e432fcd3f9618d07548c48cb325dc3af501bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:18:07:ad:53:5a:b7:96:ca:95:53:51:bc:
7b:85:8e:61:56:6c:6a:e5:a9:2d:12:a2:71:df:02:
a9:f2:ba:4f:1d:5f:4e:1a:0e:44:8f:66:9f:6e:fc:
bc:c2:77:ba:5d:f2:6d:fc:d4:46:bf:cb:d9:a1:6d:
38:ee:1f:d2:60:ba:15:4e:7d:5b:59:3a:f4:a5:f1:
22:40:64:98:a6:91:70:3e:20:3b:ad:6f:59:18:ac:
26:36:a8:10:e2:96:58:de:73:35:36:d7:02:58:b1:
75:9f:81:74:0b:be:8f:18:ac:55:5f:bc:6b:cf:3c:
ad:93:91:2a:e8:ea:60:99:6f:31:a4:81:19:63:cb:
a7:4f:a7:e0:58:50:3f:b4:78:93:13:e3:fd:39:64:
fd:d3:5e:22:33:8a:8e:2e:6a:64:fd:5e:f3:07:61:
9a:ea:69:4d:26:b3:a1:57:94:9d:54:16:30:07:8a:
d2:b1:0a:76:c9:ff:30:d1:ce:d6:30:68:bf:ae:28:
f1:54:7d:a5:10:49:8f:20:c8:8c:61:7d:74:60:9b:
91:14:b4:53:b4:1e:48:3b:5e:85:17:96:f7:32:0e:
58:c8:9d:45:f6:5b:65:15:4b:6f:8b:ee:78:c6:11:
79:17:cf:9d:97:79:bf:6f:85:65:1e:b1:e1:0a:4e:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:32:FC:D3:F9:61:8D:07:54:8C:48:CB:32:5D:C3:AF:50:1B:F4
X509v3 Authority Key Identifier:
keyid:EC:70:79:0C:DC:E0:C1:92:AC:88:6F:3D:9E:F7:25:F3:99:51:83:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HB5DNzgwZKsiG89nvcl85lRg5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/507660-12ba-4be8-9b73-b749387df0f5/1/7HB5DNzgwZKsiG89nvcl85lRg5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:0c:b0:ea:4f:2c:a7:a1:e8:6c:e2:e5:41:fa:c7:14:1b:
f7:3e:c5:fb:7c:3c:ca:d2:f5:b4:99:13:6f:2b:2b:34:e9:ed:
23:e0:71:79:99:07:58:88:3a:4f:de:bf:eb:57:86:b6:45:d4:
bd:8d:ea:5c:07:d9:a9:a9:c0:30:db:27:02:92:81:57:13:10:
1f:d5:3c:47:0c:e5:79:4f:e9:2c:5f:1b:75:e4:36:ae:e2:57:
6f:41:c2:e4:82:38:c9:03:40:39:3a:43:9f:2d:7d:32:61:ca:
4c:c0:73:b1:9b:48:78:68:8b:3c:7a:0d:d5:73:33:2a:c9:9e:
b0:09:35:aa:75:38:ff:a7:af:f6:6e:ac:cd:ad:28:af:7c:cc:
a8:3f:d9:64:35:14:36:7c:e5:9f:4c:26:df:75:05:70:89:f8:
ee:4a:55:24:d9:c4:e7:7c:89:4b:bf:cd:5c:a6:c6:94:ba:3b:
14:77:68:b9:f3:f3:1c:b1:b0:c0:91:2f:67:67:9f:5f:e3:d7:
bd:d1:8e:e5:89:2f:02:b8:35:56:d3:d8:5e:f9:a2:73:2f:24:
d9:a3:88:c4:fc:fe:c4:14:ad:fd:76:14:ae:0c:1e:19:4d:4f:
02:ec:14:0d:77:eb:d3:3d:cc:cb:98:ed:1f:21:44:b7:aa:95:
10:45:6f:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKgB4SEzFsCKRVjQxHk68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzA3OTBjZGNlMGMxOTJhYzg4NmYzZDllZjcyNWYzOTk1
MTgzOTgwHhcNMjYwODI3MDMwMTA2WhcNMjYwODI4MDMwMTA2WjAzMTEwLwYDVQQD
EygxN2U0MzJmY2QzZjk2MThkMDc1NDhjNDhjYjMyNWRjM2FmNTAxYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmcYB61TWreWypVTUbx7hY5hVmxq
5aktEqJx3wKp8rpPHV9OGg5Ej2afbvy8wne6XfJt/NRGv8vZoW047h/SYLoVTn1b
WTr0pfEiQGSYppFwPiA7rW9ZGKwmNqgQ4pZY3nM1NtcCWLF1n4F0C76PGKxVX7xr
zzytk5Eq6OpgmW8xpIEZY8unT6fgWFA/tHiTE+P9OWT9014iM4qOLmpk/V7zB2Ga
6mlNJrOhV5SdVBYwB4rSsQp2yf8w0c7WMGi/rijxVH2lEEmPIMiMYX10YJuRFLRT
tB5IO16FF5b3Mg5YyJ1F9ltlFUtvi+54xhF5F8+dl3m/b4VlHrHhCk4riwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfkMvzT+WGNB1SMSMsyXcOvUBv0MB8GA1UdIwQY
MBaAFOxweQzc4MGSrIhvPZ73JfOZUYOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81MDc2NjAtMTJiYS00YmU4LTliNzMt
Yjc0OTM4N2RmMGY1LzEvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81MDc2NjAtMTJiYS00YmU4LTliNzMtYjc0OTM4N2RmMGY1
LzEvN0hCNUROemd3WktzaUc4OW52Y2w4NWxSZzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXUMsOpP
LKeh6Gzi5UH6xxQb9z7F+3w8ytL1tJkTbysrNOntI+BxeZkHWIg6T96/61eGtkXU
vY3qXAfZqanAMNsnApKBVxMQH9U8RwzleU/pLF8bdeQ2ruJXb0HC5II4yQNAOTpD
ny19MmHKTMBzsZtIeGiLPHoN1XMzKsmesAk1qnU4/6ev9m6sza0or3zMqD/ZZDUU
Nnzln0wm33UFcIn47kpVJNnE53yJS7/NXKbGlLo7FHdoufPzHLGwwJEvZ2efX+PX
vdGO5YkvArg1VtPYXvmicy8k2aOIxPz+xBSt/XYUrgweGU1PAuwUDXfr0z3My5jt
HyFEt6qVEEVvFg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:48 2026 by rpki-client