Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: vCBqD4vj/4JqSuVVGhKLe7+F4eAbPjXW28jJvnlF038=
Subject key identifier: 96:3F:3E:E7:9E:AC:BD:3F:2B:7B:3A:86:84:2A:86:F1:CC:D1:88:3D
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 01A13DB7EC1710375ABD18F6BCB11372B6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 1366
Signing time: Thu 15 Oct 2026 04:00:26 +0000
Manifest this update: Thu 15 Oct 2026 04:00:26 +0000
Manifest next update: Fri 16 Oct 2026 04:00:26 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: MO4AlGgYGfsEVchE7Q5u5c8gc8EfeaoA9nu5PWPNooo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:ec:17:10:37:5a:bd:18:f6:bc:b1:13:72:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Oct 15 04:00:26 2026 GMT
Not After : Oct 16 04:00:26 2026 GMT
Subject: CN=963f3ee79eacbd3f2b7b3a86842a86f1ccd1883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:27:36:61:7c:94:85:8f:34:78:80:fb:76:
a6:4c:0e:ed:f0:e5:bd:01:f6:b9:43:be:0f:c2:40:
30:cb:83:05:46:0a:ee:0c:2d:07:c4:91:cc:be:5b:
3e:f0:35:05:a8:c5:43:03:9e:0d:de:40:6c:3a:8a:
51:ed:3e:dd:b1:8e:2c:ed:8a:7c:a7:02:0f:69:7f:
90:d3:ff:9c:73:2d:54:6b:f4:c6:bc:f2:50:83:90:
32:3e:9a:69:ae:9b:3c:2c:d6:10:50:13:89:d3:31:
08:5e:52:7c:e0:cd:93:29:39:a2:72:7e:ea:7f:8e:
30:d7:66:df:ce:30:5a:52:d2:9f:f7:1d:9a:34:a5:
31:a4:99:e4:b7:f2:bc:a1:50:16:fb:97:6b:5d:6f:
a0:97:08:f2:5f:89:fe:3a:a7:7b:a4:8c:b0:ab:59:
0f:54:e9:45:5b:cc:d4:8e:38:49:58:12:37:ec:1a:
13:d5:05:b7:fd:06:b1:c3:74:a5:ce:fa:3d:89:65:
1f:89:e4:7b:ff:50:a4:0b:df:c3:5a:25:4f:f7:15:
15:e7:6b:a0:5e:7e:bd:01:94:b6:05:c1:5d:d3:f5:
de:43:55:e9:cc:51:5b:94:ec:5b:2c:8d:56:82:4c:
4e:69:c9:64:45:60:c0:47:64:8d:3d:06:2f:f0:12:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:3E:E7:9E:AC:BD:3F:2B:7B:3A:86:84:2A:86:F1:CC:D1:88:3D
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2e:e3:96:56:6f:33:e1:cc:66:1e:32:5a:d1:5a:9b:cc:d0:
d7:c3:17:e0:78:96:cd:45:d5:cd:ba:3b:65:f9:54:bb:df:0e:
f1:5a:12:90:6d:43:d7:d0:2a:b3:62:c2:61:d7:15:b8:bf:2e:
6a:00:a7:65:f7:ca:80:9f:5a:26:79:61:b7:51:e7:ea:b9:49:
44:77:7c:68:53:84:9b:b8:b1:0b:47:e5:5b:7b:b1:a8:c2:31:
f6:b7:4c:42:65:ff:2d:09:be:9c:c1:8a:a1:3c:05:98:97:9c:
dc:ac:03:5a:3d:f3:dd:49:54:26:eb:02:a5:d4:81:d2:ba:06:
02:5c:2e:4f:b8:a7:45:15:a7:28:6b:61:09:91:5a:d7:2a:45:
2e:f9:43:26:18:0f:39:7e:dd:25:5c:c0:3b:b5:5d:a5:ec:64:
83:2f:b1:e5:94:63:cc:7b:f1:41:eb:85:07:54:1e:11:d5:98:
e4:c9:bf:88:13:30:f1:fe:3c:25:e5:80:ca:7f:df:ef:de:48:
48:0c:86:c3:85:f0:f5:19:3d:3a:5b:b7:89:20:51:3e:a3:a9:
8f:61:a1:4f:4d:f3:9d:b9:8f:65:7a:d7:85:35:57:2e:c1:47:
0e:91:d4:ef:d8:10:c1:38:49:77:e3:cd:dd:d6:55:31:da:16:
5b:a5:54:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t+wXEDdavRj2vLETcra/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzBjNWQ4NjdkZTIwMGYwMTQ4NmIxYTg4MGE5NGI4NDk1
ZDcyMjAwHhcNMjYxMDE1MDQwMDI2WhcNMjYxMDE2MDQwMDI2WjAzMTEwLwYDVQQD
Eyg5NjNmM2VlNzllYWNiZDNmMmI3YjNhODY4NDJhODZmMWNjZDE4ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8gnNmF8lIWPNHiA+3amTA7t8OW9
Afa5Q74PwkAwy4MFRgruDC0HxJHMvls+8DUFqMVDA54N3kBsOopR7T7dsY4s7Yp8
pwIPaX+Q0/+ccy1Ua/TGvPJQg5AyPppprps8LNYQUBOJ0zEIXlJ84M2TKTmicn7q
f44w12bfzjBaUtKf9x2aNKUxpJnkt/K8oVAW+5drXW+glwjyX4n+Oqd7pIywq1kP
VOlFW8zUjjhJWBI37BoT1QW3/Qaxw3Slzvo9iWUfieR7/1CkC9/DWiVP9xUV52ug
Xn69AZS2BcFd0/XeQ1XpzFFblOxbLI1WgkxOaclkRWDAR2SNPQYv8BIbGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY/PueerL0/K3s6hoQqhvHM0Yg9MB8GA1UdIwQY
MBaAFOxwxdhn3iAPAUhrGogKlLhJXXIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQt
YzVhZDE1M2MyZDQ2LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQtYzVhZDE1M2MyZDQ2
LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi7jllZv
M+HMZh4yWtFam8zQ18MX4HiWzUXVzbo7ZflUu98O8VoSkG1D19Aqs2LCYdcVuL8u
agCnZffKgJ9aJnlht1Hn6rlJRHd8aFOEm7ixC0flW3uxqMIx9rdMQmX/LQm+nMGK
oTwFmJec3KwDWj3z3UlUJusCpdSB0roGAlwuT7inRRWnKGthCZFa1ypFLvlDJhgP
OX7dJVzAO7Vdpexkgy+x5ZRjzHvxQeuFB1QeEdWY5Mm/iBMw8f48JeWAyn/f795I
SAyGw4Xw9Rk9Olu3iSBRPqOpj2GhT03znbmPZXrXhTVXLsFHDpHU79gQwThJd+PN
3dZVMdoWW6VUbw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:45 2026 by rpki-client