Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
File: h7kq03MXwzCg61kKFw0U9Rm3UrM.mft (raw, json)
Hash identifier: jwmDU6WDyg/uMTkN1ajMRp3yRU88Yy4JkBjixutAkRQ=
Subject key identifier: 93:BA:3E:A1:C2:44:E6:1D:E7:E0:76:91:5C:4F:4E:77:34:B9:14:49
Authority key identifier: 87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
Certificate issuer: /CN=87b92ad37317c330a0eb590a170d14f519b752b3
Certificate serial: 01A17FD0500E31EA4104AEB01E6BECD07EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:02:00 +0000
Manifest this update: Wed 28 Oct 2026 00:02:00 +0000
Manifest next update: Thu 29 Oct 2026 00:02:00 +0000
Files and hashes: 1: h7kq03MXwzCg61kKFw0U9Rm3UrM.crl (hash: x39tArGHl006Btpv3AbUIJysqqn5mn30cKPLci5mz1o=)
2: l6h8cEy3vy8eHGUMk9ccO_E31gg.roa (hash: /rkHav/nq0FmDVvv83fpzsLSholUDtzomJfCggVqF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:50:0e:31:ea:41:04:ae:b0:1e:6b:ec:d0:7e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b92ad37317c330a0eb590a170d14f519b752b3
Validity
Not Before: Oct 28 00:02:00 2026 GMT
Not After : Oct 29 00:02:00 2026 GMT
Subject: CN=93ba3ea1c244e61de7e076915c4f4e7734b91449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:49:cb:d5:e8:4a:7f:88:41:8f:4e:8d:7d:
21:8d:08:9b:f6:e5:ae:b2:7e:6f:66:85:73:46:1c:
76:bb:56:e8:de:b8:34:21:59:97:b8:e1:e8:e2:fa:
a4:b6:01:36:e5:fd:84:f0:f3:a1:dc:21:9e:f2:88:
6f:03:d3:05:47:7b:56:ed:30:c6:a6:bd:0e:f3:b9:
a0:4d:b3:21:45:73:74:80:12:8b:fd:f5:49:ae:1e:
30:d1:bb:ca:43:91:a0:42:69:3e:13:aa:d5:4a:63:
20:86:ca:66:97:6a:c7:8c:64:ec:f7:db:f1:3d:17:
cc:3b:53:ed:33:af:74:46:d9:41:d7:10:f0:07:33:
bf:f1:cd:67:51:f0:de:e1:65:20:1f:83:a0:84:13:
a3:c1:1d:fd:ab:05:e2:8c:16:7e:11:82:3b:6b:58:
a8:fe:3b:6a:5a:37:65:16:a4:b5:8d:52:30:e9:e9:
42:aa:d3:0c:be:7a:b1:bb:35:a6:1e:c8:51:8f:9f:
06:c0:8a:e3:a9:4d:52:5c:92:18:99:bf:d9:67:a6:
92:c9:45:57:9c:42:67:09:eb:8a:7e:ed:8a:8a:60:
b4:9b:f2:f6:18:5b:30:b3:52:61:6a:e4:64:30:4e:
33:66:d0:1a:57:cc:85:f6:26:33:da:63:39:31:c0:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BA:3E:A1:C2:44:E6:1D:E7:E0:76:91:5C:4F:4E:77:34:B9:14:49
X509v3 Authority Key Identifier:
keyid:87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9e:3d:8d:f3:fb:cf:0e:f0:4c:77:94:7d:ba:69:5b:bf:9d:
a2:28:a1:ec:9b:12:8a:39:09:8f:db:9a:b1:9c:ee:2c:1b:d1:
58:35:03:f4:85:1d:25:d2:29:9a:e9:43:2c:49:93:3d:45:54:
05:e7:d4:54:08:a3:8d:77:93:90:84:f0:ea:00:40:db:0f:5f:
b4:b3:4a:3d:04:b9:98:33:62:72:f7:61:2d:2a:64:4c:68:6d:
48:55:94:fb:b1:b7:b4:be:fe:2a:f7:1a:b9:ac:1a:8c:c2:70:
e8:cd:3f:e1:71:92:c6:b4:a2:06:e4:a9:8d:6d:1e:b3:78:f3:
8b:d7:3a:05:42:a3:51:78:3e:5c:c8:56:47:d5:4e:85:bb:72:
78:55:4f:7a:0a:f4:4e:29:32:1f:e0:38:99:8c:fd:f2:a7:36:
95:ac:67:17:c0:93:e7:67:79:84:a7:2a:c7:d9:0d:62:2a:ce:
59:f5:21:07:70:e1:d5:6d:cd:1f:61:fd:50:1f:1b:46:41:13:
bc:15:64:c8:7c:60:ee:89:f0:82:25:6b:66:1a:ea:f2:0b:2e:
b2:4a:2b:7c:e8:b2:c8:62:06:2a:fc:85:8b:ed:2d:72:a4:cc:
78:c7:3e:5e:ef:13:2b:97:f7:07:44:e3:4b:32:b7:85:d3:49:
c2:af:5a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/0FAOMepBBK6wHmvs0H77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjkyYWQzNzMxN2MzMzBhMGViNTkwYTE3MGQxNGY1MTli
NzUyYjMwHhcNMjYxMDI4MDAwMjAwWhcNMjYxMDI5MDAwMjAwWjAzMTEwLwYDVQQD
Eyg5M2JhM2VhMWMyNDRlNjFkZTdlMDc2OTE1YzRmNGU3NzM0YjkxNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yBJy9XoSn+IQY9OjX0hjQib9uWu
sn5vZoVzRhx2u1bo3rg0IVmXuOHo4vqktgE25f2E8POh3CGe8ohvA9MFR3tW7TDG
pr0O87mgTbMhRXN0gBKL/fVJrh4w0bvKQ5GgQmk+E6rVSmMghspml2rHjGTs99vx
PRfMO1PtM690RtlB1xDwBzO/8c1nUfDe4WUgH4OghBOjwR39qwXijBZ+EYI7a1io
/jtqWjdlFqS1jVIw6elCqtMMvnqxuzWmHshRj58GwIrjqU1SXJIYmb/ZZ6aSyUVX
nEJnCeuKfu2KimC0m/L2GFsws1JhauRkME4zZtAaV8yF9iYz2mM5McCwvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO6PqHCROYd5+B2kVxPTnc0uRRJMB8GA1UdIwQY
MBaAFIe5KtNzF8MwoOtZChcNFPUZt1KzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdrcTAzTVh3ekNnNjFrS0Z3MFU5Um0zVXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct
NWE1Mzc2MjlhNDM5LzEvaDdrcTAzTVh3ekNnNjFrS0Z3MFU5Um0zVXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5
LzEvaDdrcTAzTVh3ekNnNjFrS0Z3MFU5Um0zVXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ49jfP7
zw7wTHeUfbppW7+doiih7JsSijkJj9uasZzuLBvRWDUD9IUdJdIpmulDLEmTPUVU
BefUVAijjXeTkITw6gBA2w9ftLNKPQS5mDNicvdhLSpkTGhtSFWU+7G3tL7+Kvca
uawajMJw6M0/4XGSxrSiBuSpjW0es3jzi9c6BUKjUXg+XMhWR9VOhbtyeFVPegr0
TikyH+A4mYz98qc2laxnF8CT52d5hKcqx9kNYirOWfUhB3Dh1W3NH2H9UB8bRkET
vBVkyHxg7onwgiVrZhrq8gsuskorfOiyyGIGKvyFi+0tcqTMeMc+Xu8TK5f3B0Tj
SzK3hdNJwq9aSw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 09:51:17 2026 by rpki-client