Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
File: 7rkpOOqM96P2CZym1uPlonuJfPA.mft (raw, json)
Hash identifier: bv5kC3L+MKi9pEsBlTEanqazkvcU1DpWFCUjPJ5sXP4=
Subject key identifier: 1C:E5:DB:38:F9:50:A4:68:00:4D:9B:42:AB:B2:C4:CB:BA:4D:93:5B
Authority key identifier: EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
Certificate issuer: /CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Certificate serial: 01A001A60AAF5D80234219EC6DB23D042D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
Manifest number: 09DF
Signing time: Fri 14 Aug 2026 19:00:53 +0000
Manifest this update: Fri 14 Aug 2026 19:00:53 +0000
Manifest next update: Sat 15 Aug 2026 19:00:53 +0000
Files and hashes: 1: 7rkpOOqM96P2CZym1uPlonuJfPA.crl (hash: NHuC+ENL4YHCCX8acEMbhwsF+zZvyBgDYpIkGrVkLns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:0a:af:5d:80:23:42:19:ec:6d:b2:3d:04:2d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb92938ea8cf7a3f6099ca6d6e3e5a27b897cf0
Validity
Not Before: Aug 14 19:00:53 2026 GMT
Not After : Aug 15 19:00:53 2026 GMT
Subject: CN=1ce5db38f950a468004d9b42abb2c4cbba4d935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:1a:c8:b4:70:43:6c:19:c9:1c:05:2a:69:
5b:50:ce:a3:10:6f:04:9e:0e:4a:fd:26:0f:f8:d0:
d3:df:cc:8f:d4:01:a6:ed:dd:d2:24:b1:d6:96:eb:
c6:9f:1c:af:9a:3f:12:cc:be:7a:be:07:4d:6f:52:
81:89:4b:97:01:ed:2b:d2:5a:9d:e0:3f:cf:5a:2f:
8a:f0:bb:e2:20:f5:d5:fb:eb:06:6a:94:84:7f:96:
79:5b:ee:45:a5:93:f0:1d:07:aa:f8:3d:08:32:33:
ca:ab:ce:34:e8:e3:42:7d:34:54:be:b4:ec:2f:d0:
d6:df:81:c3:6d:9f:cf:33:07:e6:55:8a:86:6e:84:
72:48:a3:20:24:62:63:96:0b:38:57:26:77:0f:b6:
03:ca:95:77:c4:b0:f1:cb:07:bd:8d:7b:98:30:95:
ab:61:f4:1d:4c:47:45:ea:79:6c:fa:b5:10:73:e3:
91:bf:15:c7:e1:5d:c7:c0:8b:4f:36:39:0c:04:63:
a9:50:90:18:e7:5d:29:99:6c:49:32:1b:e5:3a:54:
80:b5:c6:be:4c:28:d9:44:57:e7:e3:4d:cd:94:c7:
ba:83:4b:7e:c7:f0:bd:a9:f6:d8:b1:d6:30:ca:bf:
5d:79:2e:3a:cd:12:cc:84:e1:af:4c:11:0b:11:e8:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:DB:38:F9:50:A4:68:00:4D:9B:42:AB:B2:C4:CB:BA:4D:93:5B
X509v3 Authority Key Identifier:
keyid:EE:B9:29:38:EA:8C:F7:A3:F6:09:9C:A6:D6:E3:E5:A2:7B:89:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rkpOOqM96P2CZym1uPlonuJfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/41a831-d02d-43df-9d58-0bf0282a6d67/1/7rkpOOqM96P2CZym1uPlonuJfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:46:b7:fa:97:2c:07:f8:e4:c4:d5:84:ee:90:7d:5e:a0:ee:
6b:7e:9a:0b:50:9b:42:cc:a9:de:4d:a3:8f:eb:b0:54:eb:e9:
ab:3c:9b:10:4f:64:0c:47:6a:8e:a9:71:6e:00:1a:58:4d:86:
1a:9a:ab:39:29:b5:f2:64:45:c5:53:3f:b4:4e:2d:58:f8:7a:
c2:66:e0:60:6a:16:53:56:ab:b9:78:d0:ca:35:bc:54:38:28:
32:4f:45:6e:9d:de:b1:6c:2d:9c:67:6c:88:c9:ea:74:f8:24:
e2:a1:e2:ad:09:ad:de:f1:28:2a:df:13:16:a5:2c:f1:28:7d:
ce:bc:4e:21:9a:7c:b6:03:33:fc:a6:2f:f4:64:2e:3c:5e:e0:
b9:eb:ee:13:36:c8:af:e2:f2:2b:2c:60:ee:da:eb:48:26:cd:
a9:19:59:1b:77:71:a9:cb:95:ac:0d:49:b2:bf:24:45:47:5b:
85:c8:27:6c:52:22:fd:f5:b2:3d:6c:e8:cd:21:ea:ea:1b:10:
5d:be:15:99:82:5d:b2:4e:4c:74:0b:68:e0:0f:57:a8:34:36:
56:e3:2e:9a:80:59:09:a3:1b:b1:0f:a6:6e:94:63:da:ea:10:
8c:1a:72:0f:e2:4a:2f:48:84:6b:c1:22:a0:a7:2e:1b:8f:7c:
4b:1d:98:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpgqvXYAjQhnsbbI9BC1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjkyOTM4ZWE4Y2Y3YTNmNjA5OWNhNmQ2ZTNlNWEyN2I4
OTdjZjAwHhcNMjYwODE0MTkwMDUzWhcNMjYwODE1MTkwMDUzWjAzMTEwLwYDVQQD
EygxY2U1ZGIzOGY5NTBhNDY4MDA0ZDliNDJhYmIyYzRjYmJhNGQ5MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5cayLRwQ2wZyRwFKmlbUM6jEG8E
ng5K/SYP+NDT38yP1AGm7d3SJLHWluvGnxyvmj8SzL56vgdNb1KBiUuXAe0r0lqd
4D/PWi+K8LviIPXV++sGapSEf5Z5W+5FpZPwHQeq+D0IMjPKq8406ONCfTRUvrTs
L9DW34HDbZ/PMwfmVYqGboRySKMgJGJjlgs4VyZ3D7YDypV3xLDxywe9jXuYMJWr
YfQdTEdF6nls+rUQc+ORvxXH4V3HwItPNjkMBGOpUJAY510pmWxJMhvlOlSAtca+
TCjZRFfn403NlMe6g0t+x/C9qfbYsdYwyr9deS46zRLMhOGvTBELEej8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzl2zj5UKRoAE2bQquyxMu6TZNbMB8GA1UdIwQY
MBaAFO65KTjqjPej9gmcptbj5aJ7iXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgt
MGJmMDI4MmE2ZDY3LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi80MWE4MzEtZDAyZC00M2RmLTlkNTgtMGJmMDI4MmE2ZDY3
LzEvN3JrcE9PcU05NlAyQ1p5bTF1UGxvbnVKZlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUa3+pcs
B/jkxNWE7pB9XqDua36aC1CbQsyp3k2jj+uwVOvpqzybEE9kDEdqjqlxbgAaWE2G
GpqrOSm18mRFxVM/tE4tWPh6wmbgYGoWU1aruXjQyjW8VDgoMk9Fbp3esWwtnGds
iMnqdPgk4qHirQmt3vEoKt8TFqUs8Sh9zrxOIZp8tgMz/KYv9GQuPF7guevuEzbI
r+LyKyxg7trrSCbNqRlZG3dxqcuVrA1Jsr8kRUdbhcgnbFIi/fWyPWzozSHq6hsQ
Xb4VmYJdsk5MdAto4A9XqDQ2VuMumoBZCaMbsQ+mbpRj2uoQjBpyD+JKL0iEa8Ei
oKcuG498Sx2Yyw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:10 2026 by rpki-client