Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: FUFs0Ac21E0L1LKlthW8r+bsafQUA5JelolwHtyawNs=
Subject key identifier: 2B:A4:41:6C:0D:85:4F:F6:3D:81:E3:F8:7C:96:EF:93:FD:74:BE:64
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 019D38D35CAB645217E90E7C36A33B40BDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 0847
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: avt43Zw1WI1467ikDQ2f3isMzAagD+/wuuMdc9IiEYM=)
2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5c:ab:64:52:17:e9:0e:7c:36:a3:3b:40:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=2ba4416c0d854ff63d81e3f87c96ef93fd74be64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:9a:50:3d:87:cc:7c:a1:1a:78:3d:6f:73:
2a:40:b3:76:cf:d1:85:3f:36:4e:6a:cf:6d:69:25:
19:63:3a:6b:a9:64:29:bd:b3:60:eb:fa:4c:82:63:
f7:93:ab:ce:bc:9d:68:c3:e2:87:ea:34:32:f4:79:
81:a0:05:9a:e0:f2:78:31:39:b0:53:53:b7:a8:96:
69:82:1d:e8:52:ab:0b:af:2a:65:74:23:29:9e:0c:
a5:62:b2:4c:0e:16:31:79:ab:c7:d0:63:9b:61:25:
32:f1:1e:2b:d4:4f:29:b2:f2:cc:38:dc:94:97:a5:
93:3f:b3:8b:8e:3b:b7:5d:49:dc:c7:dd:5d:fa:5c:
ce:83:ee:ed:c7:d7:7e:65:f6:5e:30:5d:f8:a7:5e:
6b:4c:6c:d9:29:29:1d:2e:3f:2a:63:e7:d6:b5:83:
b0:16:f4:a4:1f:b3:1d:d9:ff:72:77:1f:5e:7e:95:
c3:13:6a:72:77:42:38:bf:f7:c1:d8:55:5f:83:11:
2a:ff:b8:02:8b:e4:01:eb:13:84:7d:7d:fb:72:fb:
04:b9:f6:bc:9b:85:8e:d3:0a:dd:c7:11:5f:ac:b7:
17:5a:1f:20:22:37:33:9d:60:4a:fd:9f:38:24:b5:
52:65:34:37:89:74:6c:77:8f:03:01:8a:45:c1:11:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:41:6C:0D:85:4F:F6:3D:81:E3:F8:7C:96:EF:93:FD:74:BE:64
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:a2:e9:49:e0:61:a5:97:1b:fa:95:06:88:42:4d:e5:33:
cf:79:44:b2:12:a9:a7:89:b5:64:37:0e:ab:fe:18:53:f8:e7:
ff:e0:c2:28:88:c9:e0:7d:da:c7:7d:50:e5:55:51:5f:6c:c5:
2b:16:e7:3f:6b:cf:69:ec:f7:bd:ba:fc:fe:da:3a:f6:a3:57:
51:38:6c:58:a0:a6:5d:9e:48:48:f1:fb:de:2b:36:c4:99:3c:
45:a4:0d:80:1b:d1:67:e4:9c:5b:b8:78:15:55:94:f0:0d:f7:
5c:c4:e3:23:73:01:98:22:13:db:f7:31:6e:3d:9f:c3:93:68:
1e:82:a7:1c:f3:29:5e:6c:b9:5a:87:11:16:81:1a:a5:0e:3f:
fc:e4:e9:4e:c5:ab:91:f2:20:30:03:be:f6:33:8d:f4:03:20:
45:3a:52:22:56:a8:9c:ae:98:35:d9:12:e1:be:89:2a:fe:2e:
9f:bc:83:5f:29:92:af:d4:7f:cc:89:cb:85:73:50:99:88:f7:
d5:a8:88:b8:e6:60:0f:84:43:53:da:36:37:b7:40:12:96:0a:
72:4c:c6:47:50:06:6d:88:21:7f:02:aa:95:c5:e0:cb:f9:c2:
1e:56:ac:4a:99:ec:67:fd:e0:33:8e:d1:c3:17:84:86:19:0c:
36:77:b0:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0401yrZFIX6Q58NqM7QL3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWVmMjA5M2RhMTVlZWM5MGVmYjgzN2I5NTAxNjQ2Njlm
NjE5OGIwHhcNMjYwMzI5MDkwMTA5WhcNMjYwMzMwMDkwMTA5WjAzMTEwLwYDVQQD
EygyYmE0NDE2YzBkODU0ZmY2M2Q4MWUzZjg3Yzk2ZWY5M2ZkNzRiZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA6aUD2HzHyhGng9b3MqQLN2z9GF
PzZOas9taSUZYzprqWQpvbNg6/pMgmP3k6vOvJ1ow+KH6jQy9HmBoAWa4PJ4MTmw
U1O3qJZpgh3oUqsLrypldCMpngylYrJMDhYxeavH0GObYSUy8R4r1E8psvLMONyU
l6WTP7OLjju3XUncx91d+lzOg+7tx9d+ZfZeMF34p15rTGzZKSkdLj8qY+fWtYOw
FvSkH7Md2f9ydx9efpXDE2pyd0I4v/fB2FVfgxEq/7gCi+QB6xOEfX37cvsEufa8
m4WO0wrdxxFfrLcXWh8gIjcznWBK/Z84JLVSZTQ3iXRsd48DAYpFwRHOlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCukQWwNhU/2PYHj+HyW75P9dL5kMB8GA1UdIwQY
MBaAFNCe8gk9oV7skO+4N7lQFkZp9hmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgt
NmIyZTY4ZGRlMWUzLzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgtNmIyZTY4ZGRlMWUz
LzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+ei6Ung
YaWXG/qVBohCTeUzz3lEshKpp4m1ZDcOq/4YU/jn/+DCKIjJ4H3ax31Q5VVRX2zF
KxbnP2vPaez3vbr8/to69qNXUThsWKCmXZ5ISPH73is2xJk8RaQNgBvRZ+ScW7h4
FVWU8A33XMTjI3MBmCIT2/cxbj2fw5NoHoKnHPMpXmy5WocRFoEapQ4//OTpTsWr
kfIgMAO+9jON9AMgRTpSIlaonK6YNdkS4b6JKv4un7yDXymSr9R/zInLhXNQmYj3
1aiIuOZgD4RDU9o2N7dAEpYKckzGR1AGbYghfwKqlcXgy/nCHlasSpnsZ/3gM47R
wxeEhhkMNnewow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:38 2026 by rpki-client