Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: /EZNgWDoK8GvPNilpqO5Pk7oU+ujxUmc3sU3uUXLrSY=
Subject key identifier: 32:F1:00:B0:90:03:A3:EB:D4:BF:97:73:AE:BB:F3:36:A3:3E:CF:2E
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019D38D31CD84CDE213DD55D047812C838D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 099B
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: yWaGytOuHoAp79/MKzfU8VqQNeASEN0CRDIfhY4x89U=)
2: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (hash: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1c:d8:4c:de:21:3d:d5:5d:04:78:12:c8:38:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=32f100b09003a3ebd4bf9773aebbf336a33ecf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:ea:f4:c9:af:40:05:d6:e2:b9:2f:d1:0f:
45:aa:ea:3f:57:8e:d6:05:0e:c4:01:38:7b:5c:e8:
42:99:30:4e:52:05:12:03:17:4a:ab:ec:b7:be:8a:
b3:e3:f5:fb:52:24:17:45:9e:19:0e:b0:03:ea:52:
51:a9:8e:6e:a6:ed:48:7f:f4:eb:ce:ce:6a:7d:ad:
e8:6f:29:96:fe:96:f4:e7:6c:48:f3:1b:99:ce:1a:
64:91:44:0a:f5:90:b3:d4:57:42:75:dd:84:ee:ba:
b9:24:e0:f1:58:ba:cf:42:10:20:ed:fc:41:dc:ad:
4d:0a:7c:d8:b5:36:20:c9:57:ad:d9:7b:5a:4f:ab:
ab:35:29:66:c5:50:86:cf:27:1d:f2:7b:54:94:95:
9c:92:39:99:66:5f:21:61:75:28:a6:34:39:93:b8:
3f:74:45:03:e9:62:ac:72:59:52:cc:f4:4f:dd:e1:
e7:77:da:3b:48:df:a7:17:9a:82:ff:35:6a:ac:10:
c1:be:b6:69:6f:f4:85:68:76:82:28:fc:bf:36:3d:
1f:aa:34:a6:92:9e:d9:fe:76:4c:88:f2:00:89:d0:
9e:ba:37:89:d8:7c:6a:e4:0d:c9:ac:da:59:c9:16:
60:cc:b6:a0:6a:80:8c:79:13:db:b3:1a:74:a7:b7:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:00:B0:90:03:A3:EB:D4:BF:97:73:AE:BB:F3:36:A3:3E:CF:2E
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:ac:e2:25:2f:95:83:4d:6a:13:40:11:45:c9:21:b7:eb:
09:42:d3:cf:7c:9e:74:fe:64:58:0f:ee:89:6b:f8:3d:67:ff:
5a:5a:bc:cd:89:02:1e:7b:35:e8:0d:20:e4:00:ca:f9:5b:4c:
04:cb:d9:0a:3a:0a:02:dc:46:2f:0e:c7:e8:9d:ae:69:fa:98:
80:e1:69:c6:bc:28:a4:f8:74:bf:5c:8f:12:79:82:b1:27:7c:
e0:16:88:2a:34:65:35:0a:5f:b9:67:b5:c0:0e:a8:21:3e:36:
83:83:f8:42:72:29:8a:ce:e0:08:bc:e9:b4:c0:56:c5:2d:48:
1c:ae:57:34:c4:f0:d4:88:8f:9f:9b:6f:5d:2b:da:d5:5e:55:
3c:81:b1:81:6b:e5:8d:67:95:45:31:24:2a:1f:15:f1:51:a7:
3f:66:d3:b7:16:b5:98:b4:1a:b4:75:ea:8e:a0:e4:29:e2:9c:
e7:f2:79:08:93:6a:20:63:d8:fe:8e:54:52:7c:be:f5:6e:40:
e7:e7:f3:11:90:04:83:f7:f4:6b:c6:5f:1a:2e:85:e9:5b:c2:
b3:c3:ed:6b:83:32:a8:94:98:ff:e8:bb:cd:92:58:e6:09:c0:
5a:e7:e2:94:75:9e:33:75:de:33:ee:cc:d6:aa:37:0b:f8:fd:
19:52:09:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xzYTN4hPdVdBHgSyDjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjJiYmNkMWMyZDhkN2FkZjc0MWQ3MDRkOWRjNjRiOWU2
MTRmZGEwHhcNMjYwMzI5MDkwMDUyWhcNMjYwMzMwMDkwMDUyWjAzMTEwLwYDVQQD
EygzMmYxMDBiMDkwMDNhM2ViZDRiZjk3NzNhZWJiZjMzNmEzM2VjZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXPq9MmvQAXW4rkv0Q9Fquo/V47W
BQ7EATh7XOhCmTBOUgUSAxdKq+y3voqz4/X7UiQXRZ4ZDrAD6lJRqY5upu1If/Tr
zs5qfa3obymW/pb052xI8xuZzhpkkUQK9ZCz1FdCdd2E7rq5JODxWLrPQhAg7fxB
3K1NCnzYtTYgyVet2XtaT6urNSlmxVCGzycd8ntUlJWckjmZZl8hYXUopjQ5k7g/
dEUD6WKscllSzPRP3eHnd9o7SN+nF5qC/zVqrBDBvrZpb/SFaHaCKPy/Nj0fqjSm
kp7Z/nZMiPIAidCeujeJ2Hxq5A3JrNpZyRZgzLagaoCMeRPbsxp0p7fWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLxALCQA6Pr1L+Xc6678zajPs8uMB8GA1UdIwQY
MBaAFA/yu80cLY1633QdcE2dxkueYU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMt
NmFiMDU1NjhhZGUyLzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMtNmFiMDU1NjhhZGUy
LzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/Ss4iUv
lYNNahNAEUXJIbfrCULTz3yedP5kWA/uiWv4PWf/Wlq8zYkCHns16A0g5ADK+VtM
BMvZCjoKAtxGLw7H6J2uafqYgOFpxrwopPh0v1yPEnmCsSd84BaIKjRlNQpfuWe1
wA6oIT42g4P4QnIpis7gCLzptMBWxS1IHK5XNMTw1IiPn5tvXSva1V5VPIGxgWvl
jWeVRTEkKh8V8VGnP2bTtxa1mLQatHXqjqDkKeKc5/J5CJNqIGPY/o5UUny+9W5A
5+fzEZAEg/f0a8ZfGi6F6VvCs8Pta4MyqJSY/+i7zZJY5gnAWufilHWeM3XeM+7M
1qo3C/j9GVIJFw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client