
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
File: 7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json)
Hash identifier: 0m6jk95sJsfr3A85SVdQdnHajmLiEVFU4HCqZx60Ef4=
Subject key identifier: AF:92:F9:DA:E8:A3:F4:8D:90:E8:B4:61:AA:47:AF:4B:07:DD:A1:2F
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Certificate issuer: /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial: 01A13ECBAFBE60FFC0F0DEFD1C5B9D66B388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 09:01:38 +0000
Manifest this update: Thu 15 Oct 2026 09:01:38 +0000
Manifest next update: Fri 16 Oct 2026 09:01:38 +0000
Files and hashes: 1: 3OMBkOzT06rmiiUnS5LEcdnXd4E.roa (hash: TjjnmhASdsxVvkkPJGFd8+LbQbz+nLBXswxcPbrOPCQ=)
2: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: 4OOySUDyniGDCpxQ+oc5zhq2PI7WAC21ciyUBjmFqgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:af:be:60:ff:c0:f0:de:fd:1c:5b:9d:66:b3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
Validity
Not Before: Oct 15 09:01:38 2026 GMT
Not After : Oct 16 09:01:38 2026 GMT
Subject: CN=af92f9dae8a3f48d90e8b461aa47af4b07dda12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:4b:ff:27:43:43:dd:c3:17:3f:4b:a6:05:
2b:eb:f3:ee:dc:75:e2:23:a9:38:e3:a9:94:b1:41:
01:36:be:05:a0:75:05:0e:25:5b:c6:4f:c2:20:ef:
a9:49:42:65:75:02:c5:80:a5:6f:f6:e4:9f:05:1c:
f2:dd:b7:48:89:99:eb:e0:24:67:38:6c:54:91:e7:
ad:e1:6b:86:61:8a:25:58:8b:17:10:76:d5:ba:b8:
f2:45:f2:e6:c9:72:47:40:7e:d7:51:88:5d:a8:2e:
50:ca:a0:36:96:f5:86:cb:22:1a:97:15:b5:86:06:
89:51:1e:c5:d9:70:84:58:59:e8:33:f9:ad:74:c6:
aa:70:35:91:44:96:c2:9c:82:06:70:35:3c:cf:54:
bd:2a:ff:42:e2:24:13:05:7c:01:ea:2b:9d:bf:07:
91:9e:86:ea:88:da:0c:99:8d:fd:11:3a:c1:18:ca:
3e:90:8d:53:42:28:46:c8:9a:f3:4e:43:a4:e0:ef:
ca:12:64:99:55:52:a4:44:cb:3d:3e:ba:fc:6a:a1:
17:74:19:a5:ea:e8:a1:62:d6:3c:e3:db:b4:6b:b4:
d6:fd:72:9d:bf:16:ba:6e:ad:35:84:e5:df:02:90:
7f:33:d6:4a:e2:4f:68:fa:24:09:b0:73:6e:c6:a0:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:F9:DA:E8:A3:F4:8D:90:E8:B4:61:AA:47:AF:4B:07:DD:A1:2F
X509v3 Authority Key Identifier:
keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ba:93:9b:c1:cb:44:a5:69:b9:ce:7f:f7:52:89:a9:69:b5:
24:60:32:e6:3f:2c:28:66:37:c3:cc:46:39:d8:80:b1:47:ae:
b3:5a:2e:62:0e:1f:12:4b:49:80:3e:19:7f:6f:40:73:f4:1f:
f7:fe:70:6a:a9:ac:33:33:16:8a:86:0e:bc:ff:ca:24:75:a6:
d3:53:f8:33:23:aa:c8:3f:df:ea:c3:50:b5:2c:33:47:3a:1e:
a3:16:0b:c2:2f:28:ec:e9:79:87:08:36:e5:ae:0f:67:b4:cc:
01:4b:f2:64:35:f1:99:98:ff:79:0b:52:34:8f:dc:43:24:da:
9a:ac:17:ef:04:e7:a4:38:ab:31:3d:02:ce:c0:4f:ea:c6:ee:
0d:3f:8b:f6:d8:64:f0:c6:45:57:96:9f:12:cf:d8:d8:ee:39:
2f:99:f8:05:9b:55:d3:32:b0:ea:11:42:bf:ba:81:6c:02:e4:
1b:d9:e1:2d:47:b6:9b:7d:01:dd:4d:08:da:3b:8a:63:9c:37:
9c:59:f4:b2:cd:c5:29:68:6a:35:c6:3e:6b:4b:5d:57:77:a9:
8d:aa:57:82:d6:0f:08:a4:8a:f5:37:92:38:52:f2:f0:6b:cc:
92:bc:24:90:6e:12:c7:9d:e4:d5:c5:c6:03:45:a9:0d:87:cd:
a2:e4:67:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y6++YP/A8N79HFudZrOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTc2NjJkNTk3ZmFmYzk2ZGQ3NjU1Nzc1MDhjM2VkMDI5
ZDY1NjcwHhcNMjYxMDE1MDkwMTM4WhcNMjYxMDE2MDkwMTM4WjAzMTEwLwYDVQQD
EyhhZjkyZjlkYWU4YTNmNDhkOTBlOGI0NjFhYTQ3YWY0YjA3ZGRhMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHhL/ydDQ93DFz9LpgUr6/Pu3HXi
I6k446mUsUEBNr4FoHUFDiVbxk/CIO+pSUJldQLFgKVv9uSfBRzy3bdIiZnr4CRn
OGxUkeet4WuGYYolWIsXEHbVurjyRfLmyXJHQH7XUYhdqC5QyqA2lvWGyyIalxW1
hgaJUR7F2XCEWFnoM/mtdMaqcDWRRJbCnIIGcDU8z1S9Kv9C4iQTBXwB6iudvweR
nobqiNoMmY39ETrBGMo+kI1TQihGyJrzTkOk4O/KEmSZVVKkRMs9Prr8aqEXdBml
6uihYtY849u0a7TW/XKdvxa6bq01hOXfApB/M9ZK4k9o+iQJsHNuxqAcKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+S+droo/SNkOi0YapHr0sH3aEvMB8GA1UdIwQY
MBaAFO3nZi1Zf6/JbddlV3UIw+0CnWVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTIt
ZDM1N2Y1YWVlYjg1LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTItZDM1N2Y1YWVlYjg1
LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbqTm8HL
RKVpuc5/91KJqWm1JGAy5j8sKGY3w8xGOdiAsUeus1ouYg4fEktJgD4Zf29Ac/Qf
9/5waqmsMzMWioYOvP/KJHWm01P4MyOqyD/f6sNQtSwzRzoeoxYLwi8o7Ol5hwg2
5a4PZ7TMAUvyZDXxmZj/eQtSNI/cQyTamqwX7wTnpDirMT0CzsBP6sbuDT+L9thk
8MZFV5afEs/Y2O45L5n4BZtV0zKw6hFCv7qBbALkG9nhLUe2m30B3U0I2juKY5w3
nFn0ss3FKWhqNcY+a0tdV3epjapXgtYPCKSK9TeSOFLy8GvMkrwkkG4Sx53k1cXG
A0WpDYfNouRnfA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:16 2026 by rpki-client