Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: yJ1mSBREs/mjlUwhpbnfOP2I5NoMOXjXNrEgYSUL62A=
Subject key identifier: 7A:9D:92:8B:3E:1F:32:0C:1D:CB:41:15:C6:9F:A7:1D:9A:D0:92:96
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 01A12EB345E0BEC0568DC6476A2A9D01907E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 1A2F
Signing time: Mon 12 Oct 2026 06:01:03 +0000
Manifest this update: Mon 12 Oct 2026 06:01:03 +0000
Manifest next update: Tue 13 Oct 2026 06:01:03 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: cJRsqNeWCgTBtpNuE2ldEMK53M4t66ovG8QXtOoyneg=)
2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b3:45:e0:be:c0:56:8d:c6:47:6a:2a:9d:01:90:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Oct 12 06:01:03 2026 GMT
Not After : Oct 13 06:01:03 2026 GMT
Subject: CN=7a9d928b3e1f320c1dcb4115c69fa71d9ad09296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:72:ed:73:4b:bd:59:0f:2e:82:e8:03:82:
ae:97:89:6d:cb:b2:5f:da:b4:a6:55:39:d4:1a:a9:
9d:eb:bb:59:c6:a0:94:f6:35:5b:e2:af:76:11:a6:
7c:7a:c1:58:3e:94:75:22:de:de:cb:a6:6e:aa:05:
1b:6f:59:67:97:20:ed:78:61:6c:d7:ef:7d:e6:c5:
95:aa:47:7f:b6:4b:e3:5e:de:51:7a:6a:07:74:ce:
ed:73:01:a9:be:5d:67:06:c0:74:a6:e4:19:a6:75:
3a:a3:a7:cb:e2:a4:7b:72:35:34:93:62:a4:46:2f:
7d:70:ad:5a:66:a7:f8:bc:41:8f:e2:be:7f:48:f9:
8a:71:c1:1c:3a:5b:e6:64:e2:a7:fc:00:68:d5:d9:
81:ce:6c:75:c2:d0:77:07:13:da:f7:f1:55:d3:4d:
ef:49:1e:be:1f:e4:10:41:0c:45:05:d9:8d:32:ae:
08:16:04:5f:21:2b:0b:69:26:b3:2e:69:e8:63:45:
07:f0:07:b6:1d:25:ac:e7:16:00:49:2a:8f:b3:07:
46:72:de:e6:55:da:2f:f7:37:4e:b7:0c:90:4f:2c:
e7:d4:29:8a:d7:45:70:44:55:6e:67:1d:31:dc:37:
06:59:e8:81:0d:db:d6:0d:ee:9d:db:c7:2a:a4:f8:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:92:8B:3E:1F:32:0C:1D:CB:41:15:C6:9F:A7:1D:9A:D0:92:96
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:52:1c:d3:f9:ec:ce:0d:50:cd:42:1a:7a:19:82:90:1f:37:
6b:9c:4b:0e:8b:29:4d:95:74:c1:46:a5:1d:67:0e:73:45:9e:
2a:18:22:03:b4:94:69:88:07:16:5a:37:bb:33:b8:81:08:cc:
2e:0c:e4:4e:f8:22:62:8d:68:4e:ac:a3:e2:ad:3d:06:67:37:
a4:1e:b7:38:42:42:bf:ee:94:a0:39:49:c3:01:80:94:28:a7:
fd:7d:6a:6b:b6:8d:aa:45:84:f6:84:24:08:ac:59:59:9e:62:
34:9d:1a:0b:86:10:5d:86:05:6c:40:65:a5:a2:b6:98:78:d0:
4d:d5:9a:fe:54:ff:99:33:12:90:6c:b7:5f:80:5f:1e:2c:21:
fb:ed:03:ad:7e:57:29:84:47:e3:50:7d:17:fa:75:db:37:b9:
44:1f:18:71:d8:70:56:6e:89:34:0b:67:23:48:4c:3c:6d:65:
2a:4f:de:97:5c:37:f2:32:ef:73:67:55:7a:88:95:68:c8:ab:
2f:47:83:26:4a:89:4d:46:b8:07:37:6d:d5:75:47:df:1a:e5:
61:bd:a3:e1:e4:ac:0d:f9:be:71:ac:e0:91:8d:9c:12:1e:bb:
9e:1d:45:57:97:60:fd:36:83:e9:fc:21:dc:7d:b3:6d:9c:72:
fa:b6:3e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEus0XgvsBWjcZHaiqdAZB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDc2YTc0ODZiNzg1NDUxMjkzNTcxMTI2YzVmOWRhM2Vj
NDg1ZDgwHhcNMjYxMDEyMDYwMTAzWhcNMjYxMDEzMDYwMTAzWjAzMTEwLwYDVQQD
Eyg3YTlkOTI4YjNlMWYzMjBjMWRjYjQxMTVjNjlmYTcxZDlhZDA5Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaxy7XNLvVkPLoLoA4Kul4lty7Jf
2rSmVTnUGqmd67tZxqCU9jVb4q92EaZ8esFYPpR1It7ey6ZuqgUbb1lnlyDteGFs
1+995sWVqkd/tkvjXt5RemoHdM7tcwGpvl1nBsB0puQZpnU6o6fL4qR7cjU0k2Kk
Ri99cK1aZqf4vEGP4r5/SPmKccEcOlvmZOKn/ABo1dmBzmx1wtB3BxPa9/FV003v
SR6+H+QQQQxFBdmNMq4IFgRfISsLaSazLmnoY0UH8Ae2HSWs5xYASSqPswdGct7m
Vdov9zdOtwyQTyzn1CmK10VwRFVuZx0x3DcGWeiBDdvWDe6d28cqpPiibwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqdkos+HzIMHctBFcafpx2a0JKWMB8GA1UdIwQY
MBaAFO1HanSGt4VFEpNXESbF+do+xIXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMt
NjFmOWU1NGVkMjM5LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMtNjFmOWU1NGVkMjM5
LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFIc0/ns
zg1QzUIaehmCkB83a5xLDospTZV0wUalHWcOc0WeKhgiA7SUaYgHFlo3uzO4gQjM
LgzkTvgiYo1oTqyj4q09Bmc3pB63OEJCv+6UoDlJwwGAlCin/X1qa7aNqkWE9oQk
CKxZWZ5iNJ0aC4YQXYYFbEBlpaK2mHjQTdWa/lT/mTMSkGy3X4BfHiwh++0DrX5X
KYRH41B9F/p12ze5RB8YcdhwVm6JNAtnI0hMPG1lKk/el1w38jLvc2dVeoiVaMir
L0eDJkqJTUa4Bzdt1XVH3xrlYb2j4eSsDfm+cazgkY2cEh67nh1FV5dg/TaD6fwh
3H2zbZxy+rY+9A==
-----END CERTIFICATE-----
Generated at Mon Oct 12 15:14:47 2026 by rpki-client