Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
File: D5otI3SqascUtfim7duA3GlnnMY.mft (raw, json)
Hash identifier: RyfJ6Zx3UBZ/l2Gj0aGSQ4wMM9GQ0rIXWHwEZB3SV7E=
Subject key identifier: 7F:E3:87:53:43:1F:84:41:40:FE:83:74:A2:52:51:68:31:DE:55:29
Authority key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
Certificate issuer: /CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Certificate serial: 019FA07270E11B2BC58DAD6A8881D0B4E960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
Manifest number: 1033
Signing time: Sun 26 Jul 2026 22:01:22 +0000
Manifest this update: Sun 26 Jul 2026 22:01:22 +0000
Manifest next update: Mon 27 Jul 2026 22:01:22 +0000
Files and hashes: 1: 8SEsdKMq767CnaRYG-1hJ5v6Hic.roa (hash: h/RdezdmLSdHmsoFs8q7JJ7Hnulds2LoEiNuAXGhUZg=)
2: D5otI3SqascUtfim7duA3GlnnMY.crl (hash: wblGeHhUohkTIlGiI2i0Voxcn6gtgO1ttRGyDe6uj2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:70:e1:1b:2b:c5:8d:ad:6a:88:81:d0:b4:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Validity
Not Before: Jul 26 22:01:22 2026 GMT
Not After : Jul 27 22:01:22 2026 GMT
Subject: CN=7fe38753431f844140fe8374a252516831de5529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:0a:ce:07:4b:bc:47:9a:a1:41:87:58:d6:
71:3a:21:f0:04:8d:aa:69:6c:3b:a9:c1:fc:9b:59:
31:6c:77:02:9a:a4:17:05:31:fb:7d:d0:60:92:70:
02:f1:1c:4b:0b:1f:fb:ca:cf:dd:3b:39:e9:5c:e2:
fd:0c:91:96:ea:56:8c:9f:a1:82:20:60:43:09:e9:
ee:16:2a:31:fc:01:72:72:09:28:3f:f8:a3:fe:a5:
58:fe:51:0e:a8:04:96:85:b7:20:60:b6:09:7a:fa:
3b:e1:59:85:16:47:4b:44:57:c5:58:9a:15:4f:8d:
47:2c:d6:83:20:73:9b:e2:94:16:66:35:ce:78:20:
70:81:cf:ae:fc:11:e8:c3:ed:cd:8d:93:aa:76:53:
5e:ac:e0:c0:14:e2:3f:40:25:4a:6a:7e:96:1a:b3:
21:8f:15:d8:e4:2c:53:77:17:08:ae:9f:bb:4d:44:
48:ab:55:41:16:59:72:a4:44:b4:34:98:c1:85:52:
bc:b2:4e:a2:ab:10:10:ae:57:8d:10:1b:fd:fc:3a:
57:c4:53:20:b1:08:36:fc:97:6c:f0:ca:a1:e0:9b:
6d:c7:2c:9e:24:b5:d8:bf:64:3f:6d:33:b8:8b:39:
6b:03:ac:09:37:64:01:05:98:9c:8a:56:5f:67:d7:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:87:53:43:1F:84:41:40:FE:83:74:A2:52:51:68:31:DE:55:29
X509v3 Authority Key Identifier:
keyid:0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a5:f6:2c:64:fe:c1:34:35:0a:d2:d2:b5:a6:09:cd:b3:c6:
a8:b4:19:b2:02:3d:17:07:6f:ce:44:eb:84:87:17:75:50:e4:
8c:d6:a5:c4:6d:02:e1:d9:0d:a4:a8:e1:2e:0d:f4:9d:57:1d:
66:d9:e7:11:88:c4:ab:33:cd:aa:79:de:30:39:41:85:d3:90:
20:df:1d:2a:13:27:79:f0:f6:09:6f:1a:15:14:b3:01:d3:0a:
94:ae:55:0e:88:92:b3:1b:90:32:c3:54:4d:18:9b:9c:06:62:
e7:d3:96:65:e3:19:35:be:0f:85:c1:f4:cf:99:e5:4e:37:18:
f4:8d:71:42:46:d3:7a:26:45:d8:e5:1a:02:d4:da:43:c2:36:
d2:c7:f5:c7:ed:8a:01:4c:fa:84:7c:66:7e:11:6c:0d:30:81:
16:14:b4:b9:1c:55:5f:63:c7:db:8b:a9:6f:c0:4f:e5:6c:c3:
17:7b:b8:39:47:eb:89:50:d1:ba:31:2a:76:7a:08:4d:27:26:
58:45:fd:bf:0f:be:0a:55:fb:b0:36:a5:b3:f9:da:fd:cb:3f:
46:4f:ff:5e:55:7f:26:bd:6b:7e:68:75:78:74:42:f9:64:94:
19:77:06:c6:a7:21:7f:e3:eb:f8:e3:db:e0:d6:ab:1a:d6:d4:
8b:fa:8a:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcnDhGyvFja1qiIHQtOlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWEyZDIzNzRhYTZhYzcxNGI1ZjhhNmVkZGI4MGRjNjk2
NzljYzYwHhcNMjYwNzI2MjIwMTIyWhcNMjYwNzI3MjIwMTIyWjAzMTEwLwYDVQQD
Eyg3ZmUzODc1MzQzMWY4NDQxNDBmZTgzNzRhMjUyNTE2ODMxZGU1NTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj4KzgdLvEeaoUGHWNZxOiHwBI2q
aWw7qcH8m1kxbHcCmqQXBTH7fdBgknAC8RxLCx/7ys/dOznpXOL9DJGW6laMn6GC
IGBDCenuFiox/AFycgkoP/ij/qVY/lEOqASWhbcgYLYJevo74VmFFkdLRFfFWJoV
T41HLNaDIHOb4pQWZjXOeCBwgc+u/BHow+3NjZOqdlNerODAFOI/QCVKan6WGrMh
jxXY5CxTdxcIrp+7TURIq1VBFllypES0NJjBhVK8sk6iqxAQrleNEBv9/DpXxFMg
sQg2/Jds8Mqh4JttxyyeJLXYv2Q/bTO4izlrA6wJN2QBBZicilZfZ9flRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/jh1NDH4RBQP6DdKJSUWgx3lUpMB8GA1UdIwQY
MBaAFA+aLSN0qmrHFLX4pu3bgNxpZ5zGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYt
NmQ5NzE5OTJjMzQ5LzEvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYtNmQ5NzE5OTJjMzQ5
LzEvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6X2LGT+
wTQ1CtLStaYJzbPGqLQZsgI9FwdvzkTrhIcXdVDkjNalxG0C4dkNpKjhLg30nVcd
ZtnnEYjEqzPNqnneMDlBhdOQIN8dKhMnefD2CW8aFRSzAdMKlK5VDoiSsxuQMsNU
TRibnAZi59OWZeMZNb4PhcH0z5nlTjcY9I1xQkbTeiZF2OUaAtTaQ8I20sf1x+2K
AUz6hHxmfhFsDTCBFhS0uRxVX2PH24upb8BP5WzDF3u4OUfriVDRujEqdnoITScm
WEX9vw++ClX7sDals/na/cs/Rk//XlV/Jr1rfmh1eHRC+WSUGXcGxqchf+Pr+OPb
4NarGtbUi/qKZg==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:43:58 2026 by rpki-client