Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: 2CjBlp5PcfFFmiHafwkiPZnTpyEOmAOPXcHzK7O4jG0=
Subject key identifier: 02:AD:9B:ED:47:6D:75:4D:A1:F7:08:7C:E1:65:BD:B4:C2:F3:9B:19
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 01A13F39598AB29EC972CD5596A089A3686D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 13DC
Signing time: Thu 15 Oct 2026 11:01:25 +0000
Manifest this update: Thu 15 Oct 2026 11:01:25 +0000
Manifest next update: Fri 16 Oct 2026 11:01:25 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: PN/A+fmBwWcml+TaF78r/yZAcyDQeCjpGzi1bcDyE4A=)
2: nVcrQjhWQvZv3MpiEu7OA3dqEsU.roa (hash: q6SGNZPGxWCvS2kjA8Hhq7jz4Krm0km/a67HNcgbwrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:59:8a:b2:9e:c9:72:cd:55:96:a0:89:a3:68:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Oct 15 11:01:25 2026 GMT
Not After : Oct 16 11:01:25 2026 GMT
Subject: CN=02ad9bed476d754da1f7087ce165bdb4c2f39b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:ee:33:d2:c8:e2:b6:9a:c3:17:30:cf:48:
f6:e4:c3:a7:db:37:45:97:f0:2f:37:06:1d:42:d1:
7c:4b:96:37:dd:51:f6:65:9e:2e:77:dc:c5:5f:bb:
bb:44:b1:1a:52:66:5c:53:44:b9:5c:dd:31:c5:d0:
ec:b2:5d:15:b7:fc:9a:f3:e4:46:b5:5c:39:2c:37:
bc:c5:1a:de:eb:72:79:cb:c2:0e:01:52:b7:7d:3e:
71:49:d7:66:62:be:a5:06:2a:b1:4e:ce:75:aa:04:
03:44:e3:57:6a:04:5b:ad:45:7c:18:35:68:22:3a:
87:a3:2b:f3:00:31:e0:28:a7:53:66:d4:7a:b5:17:
7e:46:3c:77:a5:e3:ed:1c:cb:ea:4b:4c:40:84:23:
40:08:a0:2f:e5:dd:d2:1a:0a:18:8b:df:63:6b:d0:
0b:83:bb:6b:2f:54:3a:84:39:43:fe:48:98:b5:e4:
c4:3a:87:4e:a8:8b:8e:91:68:33:39:82:42:f6:dc:
98:f2:82:71:e0:91:16:f5:e4:64:09:7c:6d:60:06:
03:05:0a:f2:bd:48:ef:ca:01:36:da:87:15:af:4a:
46:6f:60:92:12:65:02:bb:e0:e1:2e:a6:4a:0d:54:
39:c5:47:3f:83:fe:96:fb:18:5b:52:ba:c9:47:17:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:9B:ED:47:6D:75:4D:A1:F7:08:7C:E1:65:BD:B4:C2:F3:9B:19
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3a:0b:6a:8c:87:db:3c:ea:0a:db:a4:67:06:f0:96:c0:b6:
b9:2c:44:7f:98:1f:9c:3e:18:05:b4:b4:03:69:61:4b:f2:de:
74:3b:e2:42:be:68:15:69:c3:c2:23:3d:0b:1c:df:aa:72:24:
21:99:5d:ee:94:20:6e:d1:51:2f:60:88:2b:ab:57:92:de:f6:
e1:fc:31:33:bd:37:01:d7:12:a9:7f:e0:16:b9:87:63:51:03:
48:cf:03:95:6a:f5:5c:f6:fb:a1:e7:49:f2:b9:24:e7:bd:14:
50:c2:2b:cb:ac:28:ad:af:bb:e6:83:8e:7b:d5:ad:09:c6:05:
59:ca:19:49:33:af:c6:d3:af:25:bb:79:ea:79:33:58:16:58:
91:89:7d:c1:73:3c:99:3d:8b:98:bb:fc:52:7b:22:a4:39:a0:
77:f9:80:d3:c7:53:62:79:1c:b6:e9:25:a9:31:52:db:03:9d:
ea:ed:59:7c:d2:14:38:ce:16:29:21:e5:a2:d3:ae:0d:d9:ae:
de:31:79:c2:e7:8e:68:e6:b7:96:a4:1f:08:99:c5:82:2c:f2:
78:c2:32:ec:22:1a:99:d1:40:d0:91:0e:0e:ab:9f:f5:6e:b5:
26:c1:a4:52:90:95:a7:49:46:fe:58:4d:3b:ed:d1:e5:29:54:
f2:c0:a8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OVmKsp7Jcs1VlqCJo2htMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2
ZjUxZjMwHhcNMjYxMDE1MTEwMTI1WhcNMjYxMDE2MTEwMTI1WjAzMTEwLwYDVQQD
EygwMmFkOWJlZDQ3NmQ3NTRkYTFmNzA4N2NlMTY1YmRiNGMyZjM5YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58zuM9LI4raawxcwz0j25MOn2zdF
l/AvNwYdQtF8S5Y33VH2ZZ4ud9zFX7u7RLEaUmZcU0S5XN0xxdDssl0Vt/ya8+RG
tVw5LDe8xRre63J5y8IOAVK3fT5xSddmYr6lBiqxTs51qgQDRONXagRbrUV8GDVo
IjqHoyvzADHgKKdTZtR6tRd+Rjx3pePtHMvqS0xAhCNACKAv5d3SGgoYi99ja9AL
g7trL1Q6hDlD/kiYteTEOodOqIuOkWgzOYJC9tyY8oJx4JEW9eRkCXxtYAYDBQry
vUjvygE22ocVr0pGb2CSEmUCu+DhLqZKDVQ5xUc/g/6W+xhbUrrJRxfgjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKtm+1HbXVNofcIfOFlvbTC85sZMB8GA1UdIwQY
MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt
NTFiMmFhNTk4MGJlLzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl
LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEToLaoyH
2zzqCtukZwbwlsC2uSxEf5gfnD4YBbS0A2lhS/LedDviQr5oFWnDwiM9CxzfqnIk
IZld7pQgbtFRL2CIK6tXkt724fwxM703AdcSqX/gFrmHY1EDSM8DlWr1XPb7oedJ
8rkk570UUMIry6wora+75oOOe9WtCcYFWcoZSTOvxtOvJbt56nkzWBZYkYl9wXM8
mT2LmLv8UnsipDmgd/mA08dTYnkctuklqTFS2wOd6u1ZfNIUOM4WKSHlotOuDdmu
3jF5wueOaOa3lqQfCJnFgizyeMIy7CIamdFA0JEODquf9W61JsGkUpCVp0lG/lhN
O+3R5SlU8sCoNQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:55:02 2026 by rpki-client