Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: zZ6qAKUveTr8qIX+E5/pvChKvnBKYEwD3fQcLEyIc6Q=
Subject key identifier: 9E:64:BD:C8:62:C5:A4:C1:AE:8B:B7:97:8A:30:62:11:AA:B1:35:42
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 01A08C0CEB3C2E1D1E3957D7E8AF0E5784EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 09BB
Signing time: Thu 10 Sep 2026 16:00:51 +0000
Manifest this update: Thu 10 Sep 2026 16:00:51 +0000
Manifest next update: Fri 11 Sep 2026 16:00:51 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: i032R7+dq42u8lYOFiM3Eju2041hic1NqzXvlk5J1OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:eb:3c:2e:1d:1e:39:57:d7:e8:af:0e:57:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Sep 10 16:00:51 2026 GMT
Not After : Sep 11 16:00:51 2026 GMT
Subject: CN=9e64bdc862c5a4c1ae8bb7978a306211aab13542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:54:2f:bd:d9:e5:88:66:2a:1e:4b:ac:b1:
8c:8e:ea:67:70:41:82:fe:49:4a:da:e1:b1:37:28:
4b:58:ca:ab:01:6e:ba:3f:a3:da:e5:91:93:bd:98:
07:d5:e8:62:8b:22:35:45:5e:58:02:74:1c:61:77:
d8:93:ec:45:6b:ca:02:d6:1d:d5:34:83:58:fd:6c:
07:90:cb:fb:f6:fe:aa:ff:bd:92:5f:18:5e:51:c7:
0d:5d:0a:bc:b8:43:eb:9d:5a:6f:f4:f4:88:d5:ba:
f6:39:3a:2c:f1:87:11:a6:ce:79:4a:33:eb:02:1f:
d8:f8:3b:22:e1:56:25:7b:bc:9a:06:a3:06:f0:76:
11:4c:79:36:37:9d:fa:f5:0d:e1:c9:b2:fa:14:88:
61:72:01:c9:60:b8:56:b2:ac:3e:cb:4b:31:77:8c:
3c:46:a0:90:75:77:b2:c9:dd:8b:8d:c9:72:c3:02:
d3:84:12:a3:ab:16:96:70:05:bc:04:2b:1d:8b:05:
bb:46:37:dc:74:c0:3a:36:d9:f7:31:8c:49:8d:2d:
d3:aa:62:43:d2:f1:be:8b:53:89:39:05:ca:0c:40:
39:f9:98:21:4b:e8:19:f6:81:50:0a:4e:dd:88:ff:
c2:80:71:66:f1:40:f8:d6:c1:ca:d5:56:c6:7a:37:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:BD:C8:62:C5:A4:C1:AE:8B:B7:97:8A:30:62:11:AA:B1:35:42
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a1:18:e1:05:25:4b:9c:3e:3d:06:1a:79:4d:61:9e:29:52:
ed:31:de:d9:43:cf:39:b1:7f:5b:33:7f:27:4b:cc:8e:bb:af:
4e:a2:88:f4:ca:42:72:5c:6f:4a:58:9e:f7:17:b4:14:f2:ea:
9f:63:af:83:64:60:4f:1b:40:de:20:49:1f:3e:66:b9:69:cb:
37:a8:61:2f:14:6c:4b:55:24:3e:71:bc:2c:11:8b:6a:9b:08:
38:d8:dd:19:67:66:43:e3:77:24:79:31:ac:24:ad:39:ad:0f:
61:92:d3:72:01:99:63:a0:90:1b:55:23:0f:8c:43:6d:e8:37:
d2:c7:7f:90:35:d9:e4:d1:90:90:b4:3a:38:38:bb:8f:71:fe:
3f:4d:95:9c:57:41:f7:af:7a:bd:fe:cf:8f:fb:40:b5:58:98:
6f:69:21:6f:4d:a1:31:06:b6:c8:90:67:75:19:8e:9f:79:f4:
fc:d8:b4:17:88:7f:fa:43:93:33:fa:de:42:07:e4:99:eb:b5:
69:12:d5:87:92:95:20:2e:99:7d:7b:cf:af:3e:99:56:1c:52:
1d:71:3f:83:dd:6a:99:fa:b6:da:c9:7d:67:06:0e:3d:ad:c7:
61:e4:a8:28:47:e7:ad:12:7f:40:5e:4a:10:f8:45:c1:90:9d:
52:ff:ab:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDOs8Lh0eOVfX6K8OV4TrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1
M2IzZTQwHhcNMjYwOTEwMTYwMDUxWhcNMjYwOTExMTYwMDUxWjAzMTEwLwYDVQQD
Eyg5ZTY0YmRjODYyYzVhNGMxYWU4YmI3OTc4YTMwNjIxMWFhYjEzNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXJUL73Z5YhmKh5LrLGMjupncEGC
/klK2uGxNyhLWMqrAW66P6Pa5ZGTvZgH1ehiiyI1RV5YAnQcYXfYk+xFa8oC1h3V
NINY/WwHkMv79v6q/72SXxheUccNXQq8uEPrnVpv9PSI1br2OTos8YcRps55SjPr
Ah/Y+Dsi4VYle7yaBqMG8HYRTHk2N5369Q3hybL6FIhhcgHJYLhWsqw+y0sxd4w8
RqCQdXeyyd2LjclywwLThBKjqxaWcAW8BCsdiwW7RjfcdMA6Ntn3MYxJjS3TqmJD
0vG+i1OJOQXKDEA5+ZghS+gZ9oFQCk7diP/CgHFm8UD41sHK1VbGejevPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5kvchixaTBrou3l4owYhGqsTVCMB8GA1UdIwQY
MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt
ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2
LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6EY4QUl
S5w+PQYaeU1hnilS7THe2UPPObF/WzN/J0vMjruvTqKI9MpCclxvSlie9xe0FPLq
n2Ovg2RgTxtA3iBJHz5muWnLN6hhLxRsS1UkPnG8LBGLapsIONjdGWdmQ+N3JHkx
rCStOa0PYZLTcgGZY6CQG1UjD4xDbeg30sd/kDXZ5NGQkLQ6ODi7j3H+P02VnFdB
9696vf7Pj/tAtViYb2khb02hMQa2yJBndRmOn3n0/Ni0F4h/+kOTM/reQgfkmeu1
aRLVh5KVIC6ZfXvPrz6ZVhxSHXE/g91qmfq22sl9ZwYOPa3HYeSoKEfnrRJ/QF5K
EPhFwZCdUv+r5w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:05 2026 by rpki-client