Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: 5KoV5CwelOl8JM/ytZTFqEUP/67TqhR/8lYvZ+Wk7c0=
Subject key identifier: 92:AF:37:8A:7D:C9:5E:BE:DB:F7:1F:DF:32:DF:C1:9D:7E:65:09:DC
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019D38656DCDAC0A55B8FECC0CFE9CFCC6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0802
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: TJt/UiDtfkv4GMKzF737C/d0Rh6IUdTmNJRb3qrxQ2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6d:cd:ac:0a:55:b8:fe:cc:0c:fe:9c:fc:c6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=92af378a7dc95ebedbf71fdf32dfc19d7e6509dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:4f:60:58:af:0e:1c:32:a3:0a:eb:a0:df:
5f:92:91:ed:2d:1a:85:29:fb:bf:ac:ba:66:67:66:
3f:aa:9e:24:65:22:9a:8e:e3:bf:cf:24:47:7e:09:
57:ca:39:87:0c:4c:b8:e0:61:ec:8d:a1:59:3d:9c:
4d:88:8b:16:b6:22:14:1f:7c:6d:bb:44:ea:72:1c:
15:a7:e4:a1:c4:1a:fa:45:2b:b2:c0:21:3a:7e:14:
48:35:8f:e4:ee:a9:a7:5f:5f:30:8b:98:7f:3e:dd:
dc:be:65:d9:ee:ea:ac:58:82:09:da:8b:c9:e8:54:
38:85:5d:1b:5a:33:b3:5c:22:99:58:84:d3:01:13:
4b:5a:50:23:74:3f:3d:93:9b:fd:9b:2d:12:3a:f1:
e3:e9:b7:ff:da:f2:78:41:94:07:17:2b:7d:d8:4a:
ff:17:e8:d7:16:d7:9c:74:4b:1e:30:5d:d5:e5:52:
38:31:04:24:a0:83:9f:36:ec:28:7b:25:5d:92:0f:
e4:b2:60:11:a0:3e:a1:3d:4f:3a:eb:f4:40:19:b0:
6b:91:da:34:e6:13:d9:80:03:8c:21:e7:bb:d0:26:
65:9b:03:fb:d5:4b:f0:a3:20:62:ba:21:74:35:98:
ba:8f:0c:b4:d7:50:cb:b1:6a:b4:8b:69:96:41:86:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:37:8A:7D:C9:5E:BE:DB:F7:1F:DF:32:DF:C1:9D:7E:65:09:DC
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:56:6f:92:06:a9:a7:7c:89:78:3e:f3:91:b1:94:2b:d4:
6c:2c:b8:19:60:2c:df:cf:78:16:bd:e0:e3:c8:d5:05:97:cb:
a6:9d:61:ca:17:36:b7:ed:b3:87:d3:8e:cc:5a:6f:cb:67:7a:
3f:1e:0c:88:4f:36:6d:e7:98:bb:9e:02:58:39:f3:02:ba:6b:
74:9d:f2:ea:0a:05:a2:d5:41:0e:fb:0e:40:72:ae:c3:cd:e4:
83:fb:20:db:97:29:4d:80:53:e5:a9:f5:cc:25:4a:18:b0:3f:
9c:d4:23:4e:c3:28:a1:50:78:24:7c:6d:9d:bf:9e:cb:f7:8e:
ec:34:1f:96:2a:ec:02:d2:78:9a:b9:2c:34:89:8d:2c:8a:8f:
2e:30:77:23:3b:70:9f:0c:fe:36:49:df:53:40:ad:e1:30:77:
0b:23:72:c2:00:4c:57:5a:56:86:95:bf:80:c6:33:f1:c8:e6:
a7:31:74:6b:dc:2c:7c:7a:c8:92:a2:6f:d2:0a:f3:22:75:31:
e2:56:7f:bc:f7:08:c1:b0:e6:63:b6:cf:37:4d:27:0e:ef:c4:
56:38:08:d4:33:40:e6:bc:f3:84:8b:69:70:92:68:d1:c1:ad:
78:17:b3:50:e2:81:95:5f:1e:ce:70:22:d0:e7:f0:d7:8a:0e:
02:89:7a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZW3NrApVuP7MDP6c/MbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1
M2IzZTQwHhcNMjYwMzI5MDcwMTA0WhcNMjYwMzMwMDcwMTA0WjAzMTEwLwYDVQQD
Eyg5MmFmMzc4YTdkYzk1ZWJlZGJmNzFmZGYzMmRmYzE5ZDdlNjUwOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtPYFivDhwyowrroN9fkpHtLRqF
Kfu/rLpmZ2Y/qp4kZSKajuO/zyRHfglXyjmHDEy44GHsjaFZPZxNiIsWtiIUH3xt
u0TqchwVp+ShxBr6RSuywCE6fhRINY/k7qmnX18wi5h/Pt3cvmXZ7uqsWIIJ2ovJ
6FQ4hV0bWjOzXCKZWITTARNLWlAjdD89k5v9my0SOvHj6bf/2vJ4QZQHFyt92Er/
F+jXFtecdEseMF3V5VI4MQQkoIOfNuwoeyVdkg/ksmARoD6hPU866/RAGbBrkdo0
5hPZgAOMIee70CZlmwP71UvwoyBiuiF0NZi6jwy011DLsWq0i2mWQYZ4TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKvN4p9yV6+2/cf3zLfwZ1+ZQncMB8GA1UdIwQY
MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt
ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2
LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyVWb5IG
qad8iXg+85GxlCvUbCy4GWAs3894Fr3g48jVBZfLpp1hyhc2t+2zh9OOzFpvy2d6
Px4MiE82beeYu54CWDnzArprdJ3y6goFotVBDvsOQHKuw83kg/sg25cpTYBT5an1
zCVKGLA/nNQjTsMooVB4JHxtnb+ey/eO7DQflirsAtJ4mrksNImNLIqPLjB3Iztw
nwz+NknfU0Ct4TB3CyNywgBMV1pWhpW/gMYz8cjmpzF0a9wsfHrIkqJv0grzInUx
4lZ/vPcIwbDmY7bPN00nDu/EVjgI1DNA5rzzhItpcJJo0cGteBezUOKBlV8eznAi
0Ofw14oOAol6mA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:51 2026 by rpki-client