Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: mKNVw8yxfBgbkzH8iLKra52r8DLSefMAI/XddCFLo/0=
Subject key identifier: D2:0D:AC:2C:50:45:B1:85:C0:75:8E:83:F4:BD:D1:8B:E0:40:CE:D7
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 01A001014C977C6D4C6E8C217C1F91DF83CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 12C2
Signing time: Fri 14 Aug 2026 16:00:57 +0000
Manifest this update: Fri 14 Aug 2026 16:00:57 +0000
Manifest next update: Sat 15 Aug 2026 16:00:57 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: vcSXaVSCyowxJvYfw1+ZtK0+bwKLsRFC3UYRLONNch4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:4c:97:7c:6d:4c:6e:8c:21:7c:1f:91:df:83:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Aug 14 16:00:57 2026 GMT
Not After : Aug 15 16:00:57 2026 GMT
Subject: CN=d20dac2c5045b185c0758e83f4bdd18be040ced7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:97:37:6c:2f:9f:7e:42:a4:63:82:20:83:
35:9e:02:8c:72:ad:d1:e5:48:af:fb:0d:ca:b5:67:
cc:22:33:4b:79:78:a4:f0:c4:f6:c8:22:fe:0d:ed:
31:2d:48:bf:76:4a:6e:25:be:03:40:cb:7b:1e:12:
e1:7a:17:0e:0c:45:7f:fb:7c:0e:fb:24:1e:3f:3a:
75:fa:02:c8:59:e6:f4:23:2e:a1:fd:e5:31:b4:4f:
98:97:9f:df:7a:72:77:68:51:7b:00:dd:80:b9:3d:
ac:29:6f:fb:81:2f:f6:f9:fc:be:06:d2:78:bf:f7:
48:90:d7:97:b7:ed:6e:e1:c9:49:be:ab:d3:58:3f:
77:33:36:e8:0a:f3:cd:8f:f4:8c:21:d9:20:43:2a:
6d:d3:50:e3:7e:c9:5b:fc:47:f3:65:c7:e4:75:eb:
3d:02:09:4a:97:76:dd:03:6c:72:44:15:68:50:86:
68:88:08:d6:76:7c:48:9e:f2:ca:92:ea:c1:3b:0e:
16:18:0f:76:61:c4:9c:e8:7f:17:8f:ed:81:4a:a3:
49:e1:63:08:68:7f:f9:43:4e:bd:6c:2d:32:38:13:
46:ff:20:e9:f4:3b:8b:a4:d7:cb:8c:a1:83:e5:2d:
f7:76:44:e6:22:d3:26:fb:44:1b:d6:ef:05:98:90:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:AC:2C:50:45:B1:85:C0:75:8E:83:F4:BD:D1:8B:E0:40:CE:D7
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:06:26:4b:91:1e:43:d3:4d:dc:9f:7a:11:c0:0c:a4:22:
14:c9:87:8b:ef:00:29:97:90:70:ed:f5:1b:a7:c1:1f:55:c0:
a7:df:a2:00:fb:c5:ce:21:f6:6c:8a:73:7e:ce:9f:ed:56:90:
48:90:87:9f:1e:3b:b3:81:93:2d:d4:3d:99:33:1e:f3:34:54:
de:67:93:68:15:87:20:bb:a2:e0:1a:df:d8:fc:6a:41:cd:71:
b6:bc:52:7a:a2:ff:ad:0e:22:11:a0:8d:fc:73:b2:4a:bb:c8:
27:0a:f8:04:e8:7e:a0:09:1b:31:c4:cc:ec:8d:90:22:b8:83:
04:eb:76:3e:bb:99:23:53:0f:5c:ea:13:74:e7:64:e2:b2:ef:
32:c5:9d:bf:2e:22:0a:e8:57:20:61:82:b6:f4:d9:9f:ef:69:
af:3f:c6:2c:f8:18:32:85:bc:cf:0e:5c:60:8a:ec:b4:4d:57:
5c:0a:6f:03:cb:98:14:71:fc:6e:95:36:99:a0:2e:62:06:3e:
49:00:20:77:12:2b:63:bb:ea:5a:01:9c:c4:fd:79:db:2f:3e:
ee:2b:c5:ad:e4:19:e4:b9:9f:54:22:79:ec:b8:c0:2e:ec:4e:
9a:3d:04:d8:95:b7:ac:04:04:00:10:e0:18:8b:92:83:fe:5c:
75:b0:7c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAUyXfG1MbowhfB+R34PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzBjNWQ4NjdkZTIwMGYwMTQ4NmIxYTg4MGE5NGI4NDk1
ZDcyMjAwHhcNMjYwODE0MTYwMDU3WhcNMjYwODE1MTYwMDU3WjAzMTEwLwYDVQQD
EyhkMjBkYWMyYzUwNDViMTg1YzA3NThlODNmNGJkZDE4YmUwNDBjZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zuXN2wvn35CpGOCIIM1ngKMcq3R
5Uiv+w3KtWfMIjNLeXik8MT2yCL+De0xLUi/dkpuJb4DQMt7HhLhehcODEV/+3wO
+yQePzp1+gLIWeb0Iy6h/eUxtE+Yl5/fenJ3aFF7AN2AuT2sKW/7gS/2+fy+BtJ4
v/dIkNeXt+1u4clJvqvTWD93MzboCvPNj/SMIdkgQypt01Djfslb/EfzZcfkdes9
AglKl3bdA2xyRBVoUIZoiAjWdnxInvLKkurBOw4WGA92YcSc6H8Xj+2BSqNJ4WMI
aH/5Q069bC0yOBNG/yDp9DuLpNfLjKGD5S33dkTmItMm+0Qb1u8FmJDObQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNINrCxQRbGFwHWOg/S90YvgQM7XMB8GA1UdIwQY
MBaAFOxwxdhn3iAPAUhrGogKlLhJXXIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQt
YzVhZDE1M2MyZDQ2LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQtYzVhZDE1M2MyZDQ2
LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3QGJkuR
HkPTTdyfehHADKQiFMmHi+8AKZeQcO31G6fBH1XAp9+iAPvFziH2bIpzfs6f7VaQ
SJCHnx47s4GTLdQ9mTMe8zRU3meTaBWHILui4Brf2PxqQc1xtrxSeqL/rQ4iEaCN
/HOySrvIJwr4BOh+oAkbMcTM7I2QIriDBOt2PruZI1MPXOoTdOdk4rLvMsWdvy4i
CuhXIGGCtvTZn+9prz/GLPgYMoW8zw5cYIrstE1XXApvA8uYFHH8bpU2maAuYgY+
SQAgdxIrY7vqWgGcxP152y8+7ivFreQZ5LmfVCJ57LjALuxOmj0E2JW3rAQEABDg
GIuSg/5cdbB8sA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:18 2026 by rpki-client