Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: wf9YC6rrERoX1EceeZ1SVhZ6neCE47QcNaNxyv7GoiY=
Subject key identifier: AF:26:F6:F3:01:C6:74:C4:54:EA:85:25:41:8F:C4:DA:09:FD:FE:33
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019FA26049F1F0A6C3BFF95C66EC87A01636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0942
Signing time: Mon 27 Jul 2026 07:00:47 +0000
Manifest this update: Mon 27 Jul 2026 07:00:47 +0000
Manifest next update: Tue 28 Jul 2026 07:00:47 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: 5PQQLmamQeHRbPpwPSRRRMcy324LYClPTFW+LPWTBMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:49:f1:f0:a6:c3:bf:f9:5c:66:ec:87:a0:16:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Jul 27 07:00:47 2026 GMT
Not After : Jul 28 07:00:47 2026 GMT
Subject: CN=af26f6f301c674c454ea8525418fc4da09fdfe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:58:8b:a2:2f:70:b2:2b:ec:0a:c0:7a:e3:f6:
be:47:73:3c:31:40:c2:26:a2:c1:4c:8f:17:2b:2b:
ca:30:b1:8c:53:57:81:e1:51:1b:48:cd:15:4d:fe:
77:07:4d:5c:91:dc:f3:eb:8f:32:18:d5:27:4b:98:
77:ad:80:6a:76:09:4d:ec:60:9e:bb:0e:2c:ab:83:
ea:51:87:fe:ed:64:3d:61:0f:19:52:66:1a:16:7f:
7e:c5:57:c2:64:c3:c4:27:47:aa:e7:c8:ee:d5:7f:
41:ad:27:8e:5a:12:a4:bb:d0:0d:a7:02:2d:f3:6c:
cd:12:43:62:80:bc:b7:0a:f7:42:fb:17:e9:e0:b8:
e5:7d:2f:8d:37:54:fe:b4:5c:54:82:da:01:60:fa:
ae:3d:da:6c:2a:48:b0:e5:68:8d:2f:a0:9a:cd:02:
80:72:fb:51:32:6a:c4:fe:5b:2e:db:bc:b4:08:95:
0f:66:dd:eb:5b:e3:dc:8f:78:f9:d2:0a:9d:09:4f:
5c:48:0c:49:04:9d:c5:a2:2e:be:45:ea:b7:f8:32:
ae:53:5c:07:43:db:e3:a2:18:0f:9c:06:6c:6d:b0:
95:86:c9:9b:6a:c8:04:af:06:1d:7e:bc:32:8a:f9:
d4:5c:b5:c6:db:5b:db:00:05:7a:2f:7d:8b:de:30:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:F6:F3:01:C6:74:C4:54:EA:85:25:41:8F:C4:DA:09:FD:FE:33
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:eb:db:d6:9a:11:e5:1e:0b:be:cf:26:85:0f:60:d9:56:0f:
41:d3:73:a8:77:78:42:db:bc:0b:b4:b0:c8:df:db:36:22:57:
fa:ce:ec:8f:b8:53:b1:86:4b:45:98:21:be:3c:82:e1:d5:30:
8f:38:e4:8b:0b:af:bf:12:f0:e5:b5:f5:f4:11:b5:b3:c7:a2:
49:5f:c2:d3:66:89:6d:e4:e9:7c:0a:b2:8d:3d:d8:54:ff:bc:
cb:5d:22:07:ba:31:a4:12:e7:9d:83:a0:f3:94:28:71:a4:0e:
95:58:57:85:6e:ad:6a:ca:3a:dc:4c:dd:e6:12:84:f6:de:c0:
27:4f:a6:5f:80:60:bf:db:e4:c6:c7:74:c2:9c:7c:ad:1b:2d:
2f:a2:7a:a7:61:de:c0:b4:8a:48:f3:03:cc:cf:d0:56:b2:49:
4f:59:8d:94:95:17:56:d7:89:7f:49:d0:8c:84:5a:23:44:b2:
39:2a:04:f5:80:7f:ca:34:48:17:ad:51:f1:e8:80:1b:0f:cf:
9e:d3:22:8a:9e:82:ba:82:ca:3e:d6:01:aa:66:cb:36:fe:e0:
ce:60:f2:cb:47:6e:7e:12:bb:29:65:28:c4:af:10:db:cf:2b:
f8:a9:34:23:42:2f:84:6a:f7:37:7c:c3:ed:da:cc:a7:06:7f:
ef:63:60:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYEnx8KbDv/lcZuyHoBY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1
M2IzZTQwHhcNMjYwNzI3MDcwMDQ3WhcNMjYwNzI4MDcwMDQ3WjAzMTEwLwYDVQQD
EyhhZjI2ZjZmMzAxYzY3NGM0NTRlYTg1MjU0MThmYzRkYTA5ZmRmZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FiLoi9wsivsCsB64/a+R3M8MUDC
JqLBTI8XKyvKMLGMU1eB4VEbSM0VTf53B01ckdzz648yGNUnS5h3rYBqdglN7GCe
uw4sq4PqUYf+7WQ9YQ8ZUmYaFn9+xVfCZMPEJ0eq58ju1X9BrSeOWhKku9ANpwIt
82zNEkNigLy3CvdC+xfp4LjlfS+NN1T+tFxUgtoBYPquPdpsKkiw5WiNL6CazQKA
cvtRMmrE/lsu27y0CJUPZt3rW+Pcj3j50gqdCU9cSAxJBJ3Foi6+Req3+DKuU1wH
Q9vjohgPnAZsbbCVhsmbasgErwYdfrwyivnUXLXG21vbAAV6L32L3jAQuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8m9vMBxnTEVOqFJUGPxNoJ/f4zMB8GA1UdIwQY
MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt
ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2
LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOvb1poR
5R4Lvs8mhQ9g2VYPQdNzqHd4Qtu8C7SwyN/bNiJX+s7sj7hTsYZLRZghvjyC4dUw
jzjkiwuvvxLw5bX19BG1s8eiSV/C02aJbeTpfAqyjT3YVP+8y10iB7oxpBLnnYOg
85QocaQOlVhXhW6taso63Ezd5hKE9t7AJ0+mX4Bgv9vkxsd0wpx8rRstL6J6p2He
wLSKSPMDzM/QVrJJT1mNlJUXVteJf0nQjIRaI0SyOSoE9YB/yjRIF61R8eiAGw/P
ntMiip6CuoLKPtYBqmbLNv7gzmDyy0dufhK7KWUoxK8Q288r+Kk0I0IvhGr3N3zD
7drMpwZ/72Ngmg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:21 2026 by rpki-client