Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
File: 7kw_wBItgx--qKuyCk6bZcVAObI.mft (raw, json)
Hash identifier: 4B34aEI79SSmowqnI8/LqRwN9hVqpS6t/Fuqmy9qh14=
Subject key identifier: 05:3D:ED:D5:07:54:DD:E7:B2:76:DF:CD:2F:CF:2A:38:13:D0:B6:6F
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 01A13CDCBCB9AFE11675B58B8809D43DDF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
Manifest number: 1A3B
Signing time: Thu 15 Oct 2026 00:01:01 +0000
Manifest this update: Thu 15 Oct 2026 00:01:01 +0000
Manifest next update: Fri 16 Oct 2026 00:01:01 +0000
Files and hashes: 1: 7kw_wBItgx--qKuyCk6bZcVAObI.crl (hash: Q3axRYv6KhD5+dtgNEibwa4wv0UKvczsgjixQAjyRnM=)
2: VUUp1uAX40MPKyDcAzJjGno-5LY.roa (hash: yAb3XZUvdevqGqaQ9+mhuyzglvHMO4AtEqM2+RGZpR0=)
3: vP7vlHll0pUsAYDnA7HZBa8Dv_A.roa (hash: u4s3et3xRD7wegNnSUcKT73wjZJAhCGvvUbznbj46B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:bc:b9:af:e1:16:75:b5:8b:88:09:d4:3d:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: Oct 15 00:01:01 2026 GMT
Not After : Oct 16 00:01:01 2026 GMT
Subject: CN=053dedd50754dde7b276dfcd2fcf2a3813d0b66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:a3:13:2b:65:42:e0:01:c7:fc:ce:8a:0c:
d6:cd:fb:91:10:75:f0:91:c6:f2:11:93:ad:07:22:
23:cc:d5:74:0b:8d:76:b7:70:d3:8c:76:d4:bc:67:
84:57:48:66:af:ee:fd:1b:50:36:26:5d:c2:ce:a9:
93:49:80:04:d6:69:0e:7f:af:c7:05:66:26:b3:87:
0a:40:33:0f:e0:6b:d8:8c:ca:e6:d4:c0:32:46:eb:
ea:af:cd:d1:5f:f0:4c:2f:e9:e7:18:d0:27:88:37:
e0:3d:9a:0b:6e:d8:f2:a4:34:db:14:4d:4b:65:cf:
c6:2f:b8:e0:f5:df:b6:cc:a0:cd:9f:63:c7:0a:83:
92:bc:1a:39:54:0b:fd:c0:b8:1c:bf:69:82:6b:c3:
ed:17:f2:31:de:56:05:e1:93:72:71:56:c3:ad:19:
b6:66:f5:48:59:a3:00:dc:f5:1b:04:6c:01:42:25:
86:eb:31:82:92:0a:a0:34:44:95:b1:26:5b:33:7c:
a1:a3:6f:a3:b1:f2:15:9e:31:36:46:1e:c9:ab:d7:
bc:36:0f:c9:ef:f5:68:94:f1:a5:34:cf:87:17:ae:
47:2e:33:ab:3e:6c:78:8b:91:77:8f:5f:f5:ed:cc:
ac:82:9e:01:95:a2:fe:fb:c9:07:32:f0:b4:89:87:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:ED:D5:07:54:DD:E7:B2:76:DF:CD:2F:CF:2A:38:13:D0:B6:6F
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7e:35:94:20:b4:e7:d7:49:1a:cf:4d:46:79:3f:94:bb:a7:
f6:7e:86:35:ab:06:7e:8f:98:c4:52:8c:9b:4b:cc:e0:be:dc:
74:ff:87:9d:21:c5:81:ae:19:3e:4f:76:5d:6a:6a:83:e0:19:
d5:3c:a5:7d:94:54:2e:ca:5b:aa:3a:c3:8b:ea:9d:fb:1e:17:
c9:f2:17:32:aa:8b:bd:a6:a0:9f:e4:c9:6d:48:9c:23:f2:e3:
9c:61:f2:e9:34:a1:6a:8a:53:71:91:2e:85:a4:9e:15:a6:74:
4a:8d:13:9a:6f:b6:d3:75:35:29:66:db:63:50:88:64:47:52:
ca:ff:76:af:a3:0d:ad:b1:f7:45:7c:0b:96:fe:51:ca:05:11:
d1:d6:bf:e0:ae:49:89:73:c6:c0:71:e1:06:20:34:d5:1d:19:
ca:92:e3:3b:81:ac:67:0b:41:70:c9:3a:c5:3f:dc:d0:ad:98:
a6:65:b8:f4:33:60:76:4e:5b:cb:5c:49:8e:b1:fa:c9:5f:90:
bf:70:2d:ad:71:a5:04:f8:f3:28:88:3b:55:05:a6:fd:c6:b5:
b8:48:43:c1:3e:0e:85:c7:83:78:d4:91:b1:2f:c0:64:bd:45:
60:cf:92:4b:6a:73:29:19:07:dc:b1:17:dd:8d:ae:35:9c:95:
d2:a8:ae:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83Ly5r+EWdbWLiAnUPd8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNGMzZmMwMTIyZDgzMWZiZWE4YWJiMjBhNGU5YjY1YzU0
MDM5YjIwHhcNMjYxMDE1MDAwMTAxWhcNMjYxMDE2MDAwMTAxWjAzMTEwLwYDVQQD
EygwNTNkZWRkNTA3NTRkZGU3YjI3NmRmY2QyZmNmMmEzODEzZDBiNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqajEytlQuABx/zOigzWzfuREHXw
kcbyEZOtByIjzNV0C412t3DTjHbUvGeEV0hmr+79G1A2Jl3CzqmTSYAE1mkOf6/H
BWYms4cKQDMP4GvYjMrm1MAyRuvqr83RX/BML+nnGNAniDfgPZoLbtjypDTbFE1L
Zc/GL7jg9d+2zKDNn2PHCoOSvBo5VAv9wLgcv2mCa8PtF/Ix3lYF4ZNycVbDrRm2
ZvVIWaMA3PUbBGwBQiWG6zGCkgqgNESVsSZbM3yho2+jsfIVnjE2Rh7Jq9e8Ng/J
7/VolPGlNM+HF65HLjOrPmx4i5F3j1/17cysgp4BlaL++8kHMvC0iYeSzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU97dUHVN3nsnbfzS/PKjgT0LZvMB8GA1UdIwQY
MBaAFO5MP8ASLYMfvqirsgpOm2XFQDmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjkt
M2FjN2Q5NjIzMjkxLzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lY2QxYmItZmJkYS00ZGQ5LTllZjktM2FjN2Q5NjIzMjkx
LzEvN2t3X3dCSXRneC0tcUt1eUNrNmJaY1ZBT2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArX41lCC0
59dJGs9NRnk/lLun9n6GNasGfo+YxFKMm0vM4L7cdP+HnSHFga4ZPk92XWpqg+AZ
1TylfZRULspbqjrDi+qd+x4XyfIXMqqLvaagn+TJbUicI/LjnGHy6TShaopTcZEu
haSeFaZ0So0Tmm+203U1KWbbY1CIZEdSyv92r6MNrbH3RXwLlv5RygUR0da/4K5J
iXPGwHHhBiA01R0ZypLjO4GsZwtBcMk6xT/c0K2YpmW49DNgdk5by1xJjrH6yV+Q
v3AtrXGlBPjzKIg7VQWm/ca1uEhDwT4OhceDeNSRsS/AZL1FYM+SS2pzKRkH3LEX
3Y2uNZyV0qiuVw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:43 2026 by rpki-client