Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: oDsquyG88YnqoBMfGPric9eM/bb8JenC+43cEK9GFOo=
Subject key identifier: 8E:BA:4C:3C:F0:6F:19:38:18:B1:5A:00:8D:36:89:2D:FA:8C:58:A5
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 01A0EAE4FD1DB01ADF92F2132F13CECBACF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 05EE
Signing time: Tue 29 Sep 2026 02:01:10 +0000
Manifest this update: Tue 29 Sep 2026 02:01:10 +0000
Manifest next update: Wed 30 Sep 2026 02:01:10 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: 6WRGAommKkIhm+cVqXnAHWQxKZnT75wYZoZAc5wrUfE=)
2: bHM7HWlokuLAKGZUYW39_tqn2Fk.roa (hash: k5ZFTQBnrO/pZ+ljvAJJsNDjRf0esZ6TDnbCraHVTUQ=)
3: nnVHZXt9DivgToJiSfHRWDPCX58.asa (hash: /8k8/1a46VaQnelGrFv4w1ybQa3EbefqWYHF9uEGkc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e4:fd:1d:b0:1a:df:92:f2:13:2f:13:ce:cb:ac:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Sep 29 02:01:10 2026 GMT
Not After : Sep 30 02:01:10 2026 GMT
Subject: CN=8eba4c3cf06f193818b15a008d36892dfa8c58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:6d:9e:51:36:17:5f:11:f6:81:26:12:67:
fa:45:46:ba:2d:84:43:3e:1c:55:d7:2f:9c:31:02:
e6:09:94:8a:25:15:7e:31:0e:29:b9:a7:07:10:23:
c1:a7:c6:ec:73:73:97:26:64:58:3b:92:0d:53:7e:
bd:63:2b:3e:a5:63:84:10:d5:23:df:ce:62:77:f0:
f2:88:88:38:ce:81:84:21:b5:f1:a0:35:e7:6e:b4:
cb:42:48:54:65:33:48:44:5f:7c:ab:9d:10:45:b4:
4e:db:c8:3d:14:7e:a5:31:03:67:19:22:2e:da:7c:
36:96:fd:a0:79:44:03:25:cc:50:86:87:2a:70:91:
a7:25:76:89:80:19:a5:b5:e1:4e:1e:3d:3a:2e:0e:
cf:40:00:fa:ab:30:df:8c:e0:16:22:33:76:93:23:
c5:65:d1:e3:a1:00:a9:97:ee:39:9e:93:65:4c:ac:
4d:ea:87:42:ae:b2:16:ea:73:92:2b:b9:58:a7:0b:
41:0a:0c:14:d4:64:b8:91:8b:86:b3:bf:ec:7e:98:
52:76:b4:09:fd:4f:f3:b1:51:73:c8:67:d3:d6:b3:
5e:f9:66:80:9e:b9:22:68:91:00:41:b1:f2:17:3b:
85:2c:8c:fe:5b:45:40:14:96:fc:20:82:fe:67:b4:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:4C:3C:F0:6F:19:38:18:B1:5A:00:8D:36:89:2D:FA:8C:58:A5
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:8f:b3:40:d9:57:04:81:a3:c3:cb:5c:b3:42:55:9f:c8:
8a:32:ba:a3:6f:d0:4d:85:69:b5:b7:ca:d9:a6:f6:55:aa:c7:
01:b1:21:36:92:ab:26:63:4a:f2:d4:3b:40:f7:eb:64:87:1c:
51:e8:8f:3e:bd:3b:17:4c:be:df:89:be:81:97:3e:71:7b:9c:
57:d3:37:78:e8:38:ac:b4:fd:7d:53:b9:83:af:f1:fd:64:92:
a5:39:5a:12:f8:f9:6d:e1:b4:53:62:15:58:a8:8e:eb:46:4a:
d3:6b:12:54:a7:e7:04:1b:2e:26:b5:3a:0e:43:75:da:9d:fd:
c7:57:f6:7a:58:32:1e:83:ad:98:d0:9c:b5:e5:cb:6b:96:1f:
4d:bb:53:46:03:c1:81:4b:b7:94:07:bb:b9:44:83:48:71:9d:
84:06:7e:47:b7:3a:95:3b:9b:27:4a:c5:66:9f:c0:ed:db:2f:
62:ef:90:38:a0:1a:71:5e:87:3f:86:09:26:16:af:d3:90:7c:
85:09:4e:31:43:13:88:c1:d7:40:58:36:c8:0f:72:ae:64:d0:
fd:91:03:13:35:d5:a2:4b:65:bf:42:0a:d2:1d:75:59:87:fc:
99:b3:bb:98:ec:31:70:24:90:eb:1a:5f:21:5a:54:8a:67:ba:
91:bf:77:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDq5P0dsBrfkvITLxPOy6zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM1ZjRjODY4MGNlMGRiYTRhMDNkOTVlNjY1YzkzY2M5
OWNlYjkwHhcNMjYwOTI5MDIwMTEwWhcNMjYwOTMwMDIwMTEwWjAzMTEwLwYDVQQD
Eyg4ZWJhNGMzY2YwNmYxOTM4MThiMTVhMDA4ZDM2ODkyZGZhOGM1OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVltnlE2F18R9oEmEmf6RUa6LYRD
PhxV1y+cMQLmCZSKJRV+MQ4puacHECPBp8bsc3OXJmRYO5INU369Yys+pWOEENUj
385id/DyiIg4zoGEIbXxoDXnbrTLQkhUZTNIRF98q50QRbRO28g9FH6lMQNnGSIu
2nw2lv2geUQDJcxQhocqcJGnJXaJgBmlteFOHj06Lg7PQAD6qzDfjOAWIjN2kyPF
ZdHjoQCpl+45npNlTKxN6odCrrIW6nOSK7lYpwtBCgwU1GS4kYuGs7/sfphSdrQJ
/U/zsVFzyGfT1rNe+WaAnrkiaJEAQbHyFzuFLIz+W0VAFJb8IIL+Z7TG4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI66TDzwbxk4GLFaAI02iS36jFilMB8GA1UdIwQY
MBaAFOxTX0yGgM4NukoD2V5mXJPMmc65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMt
NDJmMmZmODU5MzczLzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83ZDAwMjktZjMzMC00YTY2LWJlZGMtNDJmMmZmODU5Mzcz
LzEvN0ZOZlRJYUF6ZzI2U2dQWlhtWmNrOHlaenJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaePs0DZ
VwSBo8PLXLNCVZ/IijK6o2/QTYVptbfK2ab2VarHAbEhNpKrJmNK8tQ7QPfrZIcc
UeiPPr07F0y+34m+gZc+cXucV9M3eOg4rLT9fVO5g6/x/WSSpTlaEvj5beG0U2IV
WKiO60ZK02sSVKfnBBsuJrU6DkN12p39x1f2elgyHoOtmNCcteXLa5YfTbtTRgPB
gUu3lAe7uUSDSHGdhAZ+R7c6lTubJ0rFZp/A7dsvYu+QOKAacV6HP4YJJhav05B8
hQlOMUMTiMHXQFg2yA9yrmTQ/ZEDEzXVoktlv0IK0h11WYf8mbO7mOwxcCSQ6xpf
IVpUime6kb93sg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:10:28 2026 by rpki-client