Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: zZoc8ib/t01F8GKaQ2z7ve5K2vapdB9PlwfqcKaj+Qg=
Subject key identifier: D1:DA:6B:F5:4A:4E:F4:B2:C7:B1:E9:97:E1:62:C0:32:DC:47:0C:59
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 01A1968DE105B01483DAC829C303570B1FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0A45
Signing time: Sun 01 Nov 2026 10:00:42 +0000
Manifest this update: Sun 01 Nov 2026 10:00:42 +0000
Manifest next update: Mon 02 Nov 2026 10:00:42 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: sXjvU3CxXyglMmiAjnkxnfEK1MQ69/LxRzyMu6sgrmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:8d:e1:05:b0:14:83:da:c8:29:c3:03:57:0b:1f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Nov 1 10:00:42 2026 GMT
Not After : Nov 2 10:00:42 2026 GMT
Subject: CN=d1da6bf54a4ef4b2c7b1e997e162c032dc470c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:79:cd:d8:d0:28:72:d3:66:85:73:4a:bd:
fd:49:a9:c0:09:46:9a:74:48:4a:68:f5:f7:f5:b9:
31:c9:28:71:ab:b6:ba:38:e2:ee:8e:97:1d:c7:35:
af:b6:9a:f0:fb:41:e6:3f:db:9d:68:8a:9a:bf:46:
d3:18:7c:9e:16:8d:d2:bb:70:1b:38:22:88:15:c3:
34:88:cd:0d:0e:d1:20:7a:76:75:f0:72:f2:2f:d5:
9c:f0:28:56:2a:bb:a9:b4:7f:fb:00:20:46:41:41:
59:8b:ad:84:5e:56:2b:da:fc:ab:70:33:ab:f5:d1:
b2:fb:09:b8:09:8e:c2:31:db:fd:01:37:2c:b8:64:
01:11:d7:fe:00:62:61:0e:a5:b3:86:0d:30:3d:a9:
9d:e9:8a:38:77:f0:05:48:ca:33:63:ae:2e:41:57:
da:76:0b:d5:38:13:ea:aa:b6:2b:6b:11:af:f9:9e:
fd:e1:08:5a:38:2a:d8:12:3d:a1:2a:bb:7d:c2:d1:
63:62:9d:f8:89:01:27:eb:60:f5:b5:1d:71:01:bc:
67:2c:cd:91:09:6e:74:cf:f1:06:70:a2:c9:96:9f:
aa:1c:c9:89:42:80:40:1f:6c:d4:63:2b:fe:10:ef:
ad:a0:ef:7b:f0:45:65:a5:e1:59:fb:c7:5a:31:6d:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:6B:F5:4A:4E:F4:B2:C7:B1:E9:97:E1:62:C0:32:DC:47:0C:59
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:80:b6:22:fa:ca:21:af:9e:26:5c:d9:7e:d8:6d:fc:3e:e4:
0d:62:bd:e2:ec:8b:19:fe:03:b5:cb:a7:87:ab:86:84:77:80:
e5:6f:25:57:31:3e:fe:aa:e1:b6:c6:88:7b:70:0b:02:34:11:
a2:7e:fc:77:6d:5b:45:ce:fb:3d:f7:75:df:42:ae:7b:3c:97:
d3:b8:7d:30:92:6d:4f:ca:67:38:f1:e4:ed:89:80:e5:28:30:
fd:97:a4:f3:c1:af:f5:57:c8:b6:5a:22:ee:08:4a:49:67:d1:
c0:e9:0d:ff:bc:d1:f5:58:f6:c8:82:d8:74:4f:34:a2:2a:87:
c4:0c:b0:76:89:e6:0b:7e:97:1f:98:f8:fd:0e:55:0b:99:dd:
47:db:b4:e0:12:a5:f0:d4:5b:b0:f1:e7:1b:47:b9:db:8f:f1:
c0:de:5f:82:0a:36:e5:ac:71:e8:12:f9:3c:7d:21:53:0c:ba:
9f:f7:e7:0c:ce:a0:a7:f9:90:85:79:fd:30:21:bc:28:b4:8b:
f4:01:da:3a:de:12:4a:be:d8:63:7f:ef:ab:33:fe:26:a2:00:
5e:28:ca:36:83:bb:72:17:66:59:23:98:b0:a9:f3:ed:7e:c3:
a1:c7:d5:a8:92:a7:1a:e4:c6:c3:de:a3:18:ab:44:a2:bd:57:
e5:3b:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:40:46 2026 by rpki-client