Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: Xjo5okBv74PBM6y3uuj0IAO/Zj+Ig+4xSYsA/yfVKnQ=
Subject key identifier: BC:C1:8F:DA:E2:4E:46:DA:F9:1E:99:4C:19:D1:39:0B:22:FA:C1:9A
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 019F189E376E8ED8FC4ADCA81EE25BD90C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0DEC
Signing time: Tue 30 Jun 2026 13:00:49 +0000
Manifest this update: Tue 30 Jun 2026 13:00:49 +0000
Manifest next update: Wed 01 Jul 2026 13:00:49 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: TQg+53pg7rDgEKOLeytmIO73sBbAfhffa9WlJVineoI=)
2: HdaygFB4iSszAmMjo8uX2Se1nQA.roa (hash: UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:37:6e:8e:d8:fc:4a:dc:a8:1e:e2:5b:d9:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Jun 30 13:00:49 2026 GMT
Not After : Jul 1 13:00:49 2026 GMT
Subject: CN=bcc18fdae24e46daf91e994c19d1390b22fac19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:ca:9e:ef:eb:ed:d4:19:53:50:4c:98:f9:
84:0c:fb:76:73:0a:13:8c:1e:d7:b5:bc:d0:55:36:
08:d2:5e:75:f6:43:19:c5:1d:24:3c:eb:1c:1f:0d:
34:62:8a:60:40:03:5d:2f:df:35:fd:5c:bc:d0:84:
d4:88:bd:09:de:78:46:92:ef:0e:03:7f:b1:d1:6a:
d8:cd:56:32:e1:04:84:94:d4:c1:70:c5:bc:71:28:
10:04:57:fc:06:38:b9:45:e0:6f:e6:9f:03:4c:2a:
90:a3:0a:22:08:7f:78:46:79:f8:1c:b4:10:d5:fd:
a3:c8:a6:b9:ce:02:99:d1:34:50:7b:42:67:f5:c4:
c0:2b:89:27:7a:ba:b9:4c:8f:5d:2b:67:6b:c0:37:
50:f3:cc:2f:a0:1d:3b:a1:e4:12:e6:e8:d5:1a:af:
a2:ea:8a:1f:0a:76:a6:b8:62:c4:57:01:76:4c:b4:
0d:8a:c8:51:70:f9:eb:3d:61:b8:0f:c7:80:df:9a:
7f:61:19:0c:9b:27:7f:73:9d:ea:25:15:6c:63:0e:
13:21:3c:fb:af:ef:12:8f:fe:ac:88:19:87:00:77:
21:8e:be:6f:16:8f:a6:ae:b4:8f:04:59:ef:fb:ff:
ce:90:e3:7a:fd:90:01:e3:d2:27:c0:35:a8:28:ee:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C1:8F:DA:E2:4E:46:DA:F9:1E:99:4C:19:D1:39:0B:22:FA:C1:9A
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:08:6b:89:81:33:6f:a0:e0:f7:46:8e:08:f6:fe:1c:6e:14:
b6:ca:54:4c:7b:06:b0:50:3b:03:b2:b8:e6:9f:ca:69:06:81:
9a:d0:51:d9:2a:f8:69:5f:f9:8c:e2:8d:0c:4e:d3:4e:f6:7f:
de:ff:dd:97:ed:56:c8:61:9d:9d:8e:22:9b:ac:3e:ea:77:e2:
ec:86:a9:23:4b:3f:87:05:7f:38:5d:24:14:a1:d2:cb:a1:a1:
2b:45:00:5c:8d:29:de:1e:c5:d2:16:e3:06:8d:5b:a6:2c:ef:
31:3b:e8:6a:93:f7:a8:99:31:c2:42:e3:67:d8:dd:9c:df:b2:
6e:4b:3a:c8:8d:5f:69:58:5b:db:4c:a5:67:d2:fb:18:9c:14:
f7:9d:a2:27:51:2b:90:c8:11:6e:24:ba:d8:da:8c:e6:93:df:
f1:6f:a2:71:7b:8b:66:ae:a4:97:53:d3:37:68:8e:47:08:ff:
4b:2e:d5:15:22:98:aa:30:a8:0e:9f:43:a6:ae:e7:18:f1:8a:
eb:59:f3:83:2c:66:cf:f5:87:3c:1b:c0:70:97:41:ed:a4:77:
27:cf:a9:81:98:2c:68:51:78:cb:33:d2:6f:fc:e5:52:41:ea:
4a:fb:6a:36:fc:9f:5a:6b:23:fd:2f:46:ae:8a:b3:ed:ad:00:
b0:de:93:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynjdujtj8StyoHuJb2Qw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWJhMmU2NTk3OTRiMTIyMTVkZjFmYThhYmUzZmNiZDY2
ODZkZjcwHhcNMjYwNjMwMTMwMDQ5WhcNMjYwNzAxMTMwMDQ5WjAzMTEwLwYDVQQD
EyhiY2MxOGZkYWUyNGU0NmRhZjkxZTk5NGMxOWQxMzkwYjIyZmFjMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZTKnu/r7dQZU1BMmPmEDPt2cwoT
jB7XtbzQVTYI0l519kMZxR0kPOscHw00YopgQANdL981/Vy80ITUiL0J3nhGku8O
A3+x0WrYzVYy4QSElNTBcMW8cSgQBFf8Bji5ReBv5p8DTCqQowoiCH94Rnn4HLQQ
1f2jyKa5zgKZ0TRQe0Jn9cTAK4knerq5TI9dK2drwDdQ88wvoB07oeQS5ujVGq+i
6oofCnamuGLEVwF2TLQNishRcPnrPWG4D8eA35p/YRkMmyd/c53qJRVsYw4TITz7
r+8Sj/6siBmHAHchjr5vFo+mrrSPBFnv+//OkON6/ZAB49InwDWoKO5/NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzBj9riTkba+R6ZTBnROQsi+sGaMB8GA1UdIwQY
MBaAFOzrouZZeUsSIV3x+oq+P8vWaG33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2Qt
ZWJlMmRjNDAxNjE2LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMzFmZWMtNTBjMC00N2M3LTk4M2QtZWJlMmRjNDAxNjE2
LzEvN091aTVsbDVTeEloWGZINmlyNF95OVpvYmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQhriYEz
b6Dg90aOCPb+HG4UtspUTHsGsFA7A7K45p/KaQaBmtBR2Sr4aV/5jOKNDE7TTvZ/
3v/dl+1WyGGdnY4im6w+6nfi7IapI0s/hwV/OF0kFKHSy6GhK0UAXI0p3h7F0hbj
Bo1bpizvMTvoapP3qJkxwkLjZ9jdnN+ybks6yI1faVhb20ylZ9L7GJwU952iJ1Er
kMgRbiS62NqM5pPf8W+icXuLZq6kl1PTN2iORwj/Sy7VFSKYqjCoDp9Dpq7nGPGK
61nzgyxmz/WHPBvAcJdB7aR3J8+pgZgsaFF4yzPSb/zlUkHqSvtqNvyfWmsj/S9G
roqz7a0AsN6Tng==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:16 2026 by rpki-client