
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: JxOuFTzWfPmnhL4ZVccTh2W3/7FFCMsTgkiJiHzLo80=
Subject key identifier: D5:C4:DB:EA:F6:CF:BD:40:60:4E:FA:AC:F7:31:BF:F0:99:BB:2E:22
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 01A001DD815AE347538A3FDD6A5C08A4BFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 1428
Signing time: Fri 14 Aug 2026 20:01:28 +0000
Manifest this update: Fri 14 Aug 2026 20:01:28 +0000
Manifest next update: Sat 15 Aug 2026 20:01:28 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: gtBtKSL7e0ivMSl4Va3/CGYtGpSLEJ+SHs3tRyP3aLY=)
2: Z-Nhf0GUm-eK6gBfuWRH4mBMDa8.roa (hash: j8yQFLI888ZXRlZcfp3XqLieyu9/rqxMNp1WWGddyFc=)
3: zQxCSJAybTKhMbu9tj9geo08EHM.roa (hash: vRuFfeMEunDY9UG2VQ5bdPd5mpRSySgDc592VktLEXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:81:5a:e3:47:53:8a:3f:dd:6a:5c:08:a4:bf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Aug 14 20:01:28 2026 GMT
Not After : Aug 15 20:01:28 2026 GMT
Subject: CN=d5c4dbeaf6cfbd40604efaacf731bff099bb2e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:ef:0a:4b:b0:68:8e:56:23:a2:b9:12:40:
84:15:75:6d:02:e0:b9:32:3b:1b:00:f1:cd:00:2c:
1b:bb:80:76:67:73:99:70:6e:c5:89:b6:1d:65:67:
d9:f6:28:54:36:ac:f1:44:fc:5c:38:27:6e:20:20:
7e:34:f0:06:3b:e9:2f:32:8c:00:13:5c:a8:40:9f:
fc:cb:39:b4:26:f4:3f:54:83:dc:73:31:32:c9:e8:
42:a4:6a:59:2b:ef:5f:86:ba:64:5d:88:2b:38:e2:
97:4b:da:f4:ff:fe:25:02:6b:2a:37:6c:03:87:1d:
4a:71:ec:56:b2:bc:11:a4:d1:34:75:24:ce:75:6e:
1c:53:04:96:7a:94:37:62:e5:a8:dd:fb:68:8f:52:
cf:43:2b:0f:b2:bf:d8:77:68:db:a2:b4:7c:5f:f1:
04:2a:05:3e:04:d8:12:69:f0:85:a0:8e:59:ab:28:
b1:9b:d5:55:95:1f:33:59:83:fa:91:52:73:ba:ca:
98:12:a6:d5:f6:5d:df:ee:a6:43:e2:ff:83:fe:95:
a9:a6:4f:00:ab:44:39:81:45:3d:ae:7a:04:38:09:
6f:1e:6b:58:ef:dc:a6:16:d3:fb:6d:75:3a:10:9e:
ba:b6:cd:9e:70:06:f8:61:a7:93:22:fc:66:41:57:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:DB:EA:F6:CF:BD:40:60:4E:FA:AC:F7:31:BF:F0:99:BB:2E:22
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:55:dc:20:4e:7e:c2:d6:e0:7c:a9:86:f7:8b:fe:cb:34:
b6:f5:f8:71:ae:fd:47:d8:9a:ed:94:ca:72:a7:0b:43:8f:4e:
30:6a:c1:b4:87:0b:ac:5b:79:59:25:fb:e8:1d:87:26:a3:73:
f0:f2:ae:2c:83:b9:14:2f:db:fa:b4:f2:46:0a:18:3d:f3:94:
f3:1d:c2:fa:6a:ec:ed:c3:c5:83:7d:ab:ba:9b:1e:c1:5d:e1:
b8:03:f1:ae:6a:cb:ed:46:29:c9:62:9c:fe:2f:4b:a5:f3:12:
f8:3e:3a:33:85:a5:ca:17:88:c9:37:82:fe:35:a2:6d:6d:1b:
93:0f:c0:56:d9:33:6e:e1:e0:88:05:96:bb:f0:12:a6:55:aa:
dd:1a:4d:62:11:0e:92:e7:a3:2d:1b:7a:1f:cf:06:07:fc:02:
c3:f3:e8:17:ad:ff:33:11:93:12:b3:14:67:2e:be:37:02:86:
1c:9f:61:48:76:12:b8:7e:d4:ea:c2:f8:c2:33:63:24:f8:2f:
aa:44:dd:9f:26:70:b1:99:02:da:36:a3:11:32:09:90:92:e2:
60:d8:b3:50:f1:f6:d3:cb:f2:b1:c3:9c:ed:35:7e:54:04:32:
18:18:1c:ac:9c:ac:1e:9b:00:43:a1:43:c4:2f:b9:10:f0:cc:
00:c4:a1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3YFa40dTij/dalwIpL+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmQ0N2I0N2UwNWIxM2QwNThiMWNiNDI1MjlhN2MxODY2
ZGNkZjIwHhcNMjYwODE0MjAwMTI4WhcNMjYwODE1MjAwMTI4WjAzMTEwLwYDVQQD
EyhkNWM0ZGJlYWY2Y2ZiZDQwNjA0ZWZhYWNmNzMxYmZmMDk5YmIyZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKDvCkuwaI5WI6K5EkCEFXVtAuC5
MjsbAPHNACwbu4B2Z3OZcG7FibYdZWfZ9ihUNqzxRPxcOCduICB+NPAGO+kvMowA
E1yoQJ/8yzm0JvQ/VIPcczEyyehCpGpZK+9fhrpkXYgrOOKXS9r0//4lAmsqN2wD
hx1KcexWsrwRpNE0dSTOdW4cUwSWepQ3YuWo3ftoj1LPQysPsr/Yd2jborR8X/EE
KgU+BNgSafCFoI5Zqyixm9VVlR8zWYP6kVJzusqYEqbV9l3f7qZD4v+D/pWppk8A
q0Q5gUU9rnoEOAlvHmtY79ymFtP7bXU6EJ66ts2ecAb4YaeTIvxmQVeDUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXE2+r2z71AYE76rPcxv/CZuy4iMB8GA1UdIwQY
MBaAFOxtR7R+BbE9BYsctCUpp8GGbc3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEt
YzM5YWRiOThmNDI5LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEtYzM5YWRiOThmNDI5
LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHtV3CBO
fsLW4HyphveL/ss0tvX4ca79R9ia7ZTKcqcLQ49OMGrBtIcLrFt5WSX76B2HJqNz
8PKuLIO5FC/b+rTyRgoYPfOU8x3C+mrs7cPFg32rupsewV3huAPxrmrL7UYpyWKc
/i9LpfMS+D46M4WlyheIyTeC/jWibW0bkw/AVtkzbuHgiAWWu/ASplWq3RpNYhEO
kuejLRt6H88GB/wCw/PoF63/MxGTErMUZy6+NwKGHJ9hSHYSuH7U6sL4wjNjJPgv
qkTdnyZwsZkC2jajETIJkJLiYNizUPH208vyscOc7TV+VAQyGBgcrJysHpsAQ6FD
xC+5EPDMAMShaw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:17 2026 by rpki-client