
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
File: 7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft (raw, json)
Hash identifier: 7FqIE7Wx5ffQpxeNzdK3wJp0MdMhi4LPMXXTJo9vtYc=
Subject key identifier: 25:6D:85:65:20:C1:D4:4B:8C:79:B4:E0:9E:80:B8:B5:B4:8C:AC:7C
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Certificate issuer: /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial: 01A05A45969695BD4ED9D51CC76F234CD855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
Manifest number: A8
Signing time: Tue 01 Sep 2026 00:01:44 +0000
Manifest this update: Tue 01 Sep 2026 00:01:44 +0000
Manifest next update: Wed 02 Sep 2026 00:01:44 +0000
Files and hashes: 1: 7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl (hash: pbGHOwYJxUgLY3i21GF8NPJNfYvx87J7yf9J6y3BIak=)
2: HCihUF_5hDpIqXqYUJrzBJumeUI.roa (hash: f9CXT6KQWpEiwwhV9yK1XmVpJI+yxpUMYfkH0B1xxTc=)
3: K5IqS4P79U0rKvWInjWR5wEFe2Q.roa (hash: 9q13mYvOIEN+e4PDt27Up4NO4FxU8lAzXOS+dNjdg84=)
4: d7Aas885l3KjzbxzDRzrGQP7qlo.roa (hash: 49B2bk75lbQU3fm+06dc2qLUyXkN1RUhU0NMkmUUNbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:45:96:96:95:bd:4e:d9:d5:1c:c7:6f:23:4c:d8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Validity
Not Before: Sep 1 00:01:44 2026 GMT
Not After : Sep 2 00:01:44 2026 GMT
Subject: CN=256d856520c1d44b8c79b4e09e80b8b5b48cac7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:2d:3e:b8:3f:97:7b:b3:48:76:b8:fe:20:
9a:d7:cb:55:c9:0b:b6:6a:d2:d4:76:d3:03:47:ba:
89:3f:5b:fd:7c:26:8c:ec:c4:94:db:68:2f:f5:99:
f6:59:e1:22:f8:77:65:c1:8d:96:f8:fc:65:53:d1:
5e:77:ad:4e:50:d1:44:7e:59:97:6e:ea:66:cf:43:
61:6c:36:c6:03:26:d8:cf:53:a1:02:56:ba:15:8c:
13:50:87:e6:b9:b6:27:30:26:73:83:91:6f:46:84:
58:a9:f2:5f:dc:84:be:de:82:5e:63:d0:06:91:c4:
55:c9:a7:91:77:68:41:4c:31:c9:c9:ed:40:70:75:
a6:39:97:e5:05:8e:ed:bd:df:be:df:60:e9:d0:c3:
ae:bc:17:37:a2:c5:c0:37:1f:cc:0b:1b:ee:30:93:
00:d3:c1:ce:ac:93:b9:b1:da:06:cb:e8:b0:00:7d:
eb:f9:1f:72:7a:5d:c4:10:03:c0:a2:d9:3b:49:6c:
96:ba:77:de:cb:6a:14:c4:c8:d4:32:ef:b3:95:02:
22:c3:31:39:f3:4b:d4:b9:6b:bc:e8:09:e6:f2:66:
25:43:9a:db:6c:20:e7:9d:50:71:e1:3a:55:1d:6d:
71:5a:e0:91:41:28:4f:5b:29:fb:73:25:a7:fa:58:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:85:65:20:C1:D4:4B:8C:79:B4:E0:9E:80:B8:B5:B4:8C:AC:7C
X509v3 Authority Key Identifier:
keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b0:c8:58:e9:27:74:40:ef:43:c6:25:02:9e:f2:fc:56:bf:
54:ea:17:b5:46:d5:24:35:f5:83:f6:4f:ba:3c:b1:43:e1:12:
ef:59:a5:d9:83:c9:d3:43:36:ed:e9:92:74:c6:c8:a3:34:a1:
89:34:3f:c0:d1:99:f9:53:a2:32:99:92:2b:d0:9d:0c:f9:bd:
53:01:92:ae:ad:71:eb:74:99:01:ec:53:1b:fb:c3:00:a6:9c:
d5:4c:2a:1b:4b:bf:99:96:e2:86:98:77:2a:1d:d7:c9:87:45:
a0:ea:d1:56:54:f3:13:08:8e:6d:9f:5d:0b:1e:13:5c:c4:dd:
6e:02:c5:cb:18:13:52:0d:dc:d4:57:77:a8:f6:fd:f2:ed:10:
a4:b3:ad:84:c5:1a:0a:92:84:b1:bf:4b:18:78:88:fd:99:26:
3a:49:ec:c9:57:d3:31:78:7f:2f:f9:62:f5:eb:da:78:00:30:
a3:54:50:cf:49:5c:45:3d:c5:20:69:0f:76:d1:11:b7:4c:e9:
8b:d4:61:b5:21:1a:45:1b:ac:50:e9:25:19:ce:44:40:2a:fc:
7d:de:f9:a2:1c:d7:1d:df:66:02:79:92:bc:58:db:3b:e3:02:
ac:51:af:74:a3:55:4f:2d:a8:01:e8:79:91:fd:00:dd:7b:17:
14:0a:9c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBaRZaWlb1O2dUcx28jTNhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTQ5ZGQ5NjE5ZGJjZmUwZTdjNDk3ZDY3OWM4YTBlOTli
NDVhNjkwHhcNMjYwOTAxMDAwMTQ0WhcNMjYwOTAyMDAwMTQ0WjAzMTEwLwYDVQQD
EygyNTZkODU2NTIwYzFkNDRiOGM3OWI0ZTA5ZTgwYjhiNWI0OGNhYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V8tPrg/l3uzSHa4/iCa18tVyQu2
atLUdtMDR7qJP1v9fCaM7MSU22gv9Zn2WeEi+HdlwY2W+PxlU9Fed61OUNFEflmX
bupmz0NhbDbGAybYz1OhAla6FYwTUIfmubYnMCZzg5FvRoRYqfJf3IS+3oJeY9AG
kcRVyaeRd2hBTDHJye1AcHWmOZflBY7tvd++32Dp0MOuvBc3osXANx/MCxvuMJMA
08HOrJO5sdoGy+iwAH3r+R9yel3EEAPAotk7SWyWunfey2oUxMjUMu+zlQIiwzE5
80vUuWu86Anm8mYlQ5rbbCDnnVBx4TpVHW1xWuCRQShPWyn7cyWn+lha8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVthWUgwdRLjHm04J6AuLW0jKx8MB8GA1UdIwQY
MBaAFO7kndlhnbz+DnxJfWecig6ZtFppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VTZDJXR2R2UDRPZkVsOVo1eUtEcG0wV21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAt
MzBjN2YzOWQ4ZTFjLzEvN3VTZDJXR2R2UDRPZkVsOVo1eUtEcG0wV21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAtMzBjN2YzOWQ4ZTFj
LzEvN3VTZDJXR2R2UDRPZkVsOVo1eUtEcG0wV21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbDIWOkn
dEDvQ8YlAp7y/Fa/VOoXtUbVJDX1g/ZPujyxQ+ES71ml2YPJ00M27emSdMbIozSh
iTQ/wNGZ+VOiMpmSK9CdDPm9UwGSrq1x63SZAexTG/vDAKac1UwqG0u/mZbihph3
Kh3XyYdFoOrRVlTzEwiObZ9dCx4TXMTdbgLFyxgTUg3c1Fd3qPb98u0QpLOthMUa
CpKEsb9LGHiI/ZkmOknsyVfTMXh/L/li9evaeAAwo1RQz0lcRT3FIGkPdtERt0zp
i9RhtSEaRRusUOklGc5EQCr8fd75ohzXHd9mAnmSvFjbO+MCrFGvdKNVTy2oAeh5
kf0A3XsXFAqc1A==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:36 2026 by rpki-client