Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: b7ba+fn0vJ7lx5YzpUkPitIjJR2+t3d586TeDl4R5aQ=
Subject key identifier: 10:AC:B8:C6:E5:D7:22:CD:75:31:29:18:4D:F5:14:77:4A:71:F1:B6
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 01A00025BEBA2BA9AC72C53B1981E7B1D42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0D3B
Signing time: Fri 14 Aug 2026 12:01:08 +0000
Manifest this update: Fri 14 Aug 2026 12:01:08 +0000
Manifest next update: Sat 15 Aug 2026 12:01:08 +0000
Files and hashes: 1: 4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa (hash: FvxfrXpFTEI5fJri2eyNeGvuYRYi/o3NW0uubzMpvBU=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: 6J0ESwyKroUQHcoVhkww3nl0ZuMSJCv6N5DaIhxQ9l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:be:ba:2b:a9:ac:72:c5:3b:19:81:e7:b1:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Aug 14 12:01:08 2026 GMT
Not After : Aug 15 12:01:08 2026 GMT
Subject: CN=10acb8c6e5d722cd753129184df514774a71f1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:0f:68:47:a9:54:ed:5a:af:9e:cf:08:83:
f4:ad:fa:75:3a:94:1e:88:87:89:25:fd:ab:b8:b4:
d7:68:f6:ce:d7:0a:20:f5:b7:af:4e:e2:5f:0e:b3:
59:43:6a:be:e9:09:ad:d1:33:99:84:c3:01:4c:2b:
c9:6a:8f:63:7b:ed:f4:65:1c:bd:88:6c:2f:c6:93:
04:07:48:3f:63:ed:79:f5:10:d1:f7:c6:24:97:a3:
ee:f1:4c:e2:b3:3b:c2:91:58:b0:c2:68:d7:57:e3:
65:7d:3b:cb:32:a0:a0:d4:68:9c:a8:ba:14:b5:4d:
4d:7a:dc:f0:69:91:21:dd:21:d1:46:d9:53:ae:e3:
d5:c3:25:9a:d7:4b:2c:40:c9:a4:a4:af:7b:5d:f6:
bc:0b:11:8f:f3:36:e3:fb:c6:29:ae:05:88:19:6b:
ca:b8:df:bf:8e:0d:ec:b1:0f:b0:e6:f9:d7:10:b0:
d7:4c:34:1d:d0:6d:79:9f:0f:8c:af:d6:97:ac:c9:
40:47:e2:d2:fa:38:e7:ea:cf:01:b3:98:f4:a4:60:
c8:81:f7:f3:35:b9:86:6f:2b:38:cc:70:0d:15:31:
00:6b:84:08:3c:ba:c6:73:28:70:e3:50:cf:a4:ab:
cb:c3:8d:3d:c1:5c:e7:62:f4:71:ce:bb:e9:69:ac:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:B8:C6:E5:D7:22:CD:75:31:29:18:4D:F5:14:77:4A:71:F1:B6
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:02:6c:60:5d:e0:29:91:8d:49:5f:5d:7f:3f:11:9b:0d:
d4:58:a7:b8:39:bf:5e:4e:ce:ab:f1:14:3e:09:7e:a5:37:58:
b5:21:a3:57:ba:12:57:f6:5d:a1:da:bf:c2:49:95:08:84:25:
93:9c:80:9a:52:db:fb:28:39:78:21:1f:8a:2d:78:09:9c:b0:
eb:24:7b:12:48:23:b3:df:4d:38:4a:4f:49:9f:d4:5c:11:1a:
c6:31:ea:8b:28:cd:23:cc:d4:ec:c2:27:0a:7b:57:c8:39:80:
d4:9c:d6:d2:65:01:8b:4e:f0:09:ae:a1:29:ee:f6:85:e8:32:
f7:66:f5:e7:07:8c:3a:25:95:ba:98:e1:d5:53:9c:5a:94:88:
b8:11:59:36:2d:be:2b:e1:5c:ea:9e:db:3e:c1:dd:6d:e7:2d:
76:e2:e5:57:54:7a:37:ef:b3:ef:22:08:5c:ee:8c:dd:f0:3e:
db:ec:56:6e:44:b6:dd:07:91:77:c3:15:c2:cf:1a:a2:41:86:
d5:e1:1a:7b:86:14:35:b3:43:5b:aa:8d:a4:42:5b:0c:7e:8f:
af:80:2e:e4:6e:24:fa:67:5d:4f:26:77:ca:b5:3a:06:fe:3f:
83:21:58:7f:28:1f:75:40:62:3b:6f:9d:75:c5:64:02:1a:9c:
67:89:24:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAJb66K6mscsU7GYHnsdQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGIyM2E1ZTI1NTBmZjk3NGNhNWY0MTkxN2FjODY3ZDUw
ZTM1ZTkwHhcNMjYwODE0MTIwMTA4WhcNMjYwODE1MTIwMTA4WjAzMTEwLwYDVQQD
EygxMGFjYjhjNmU1ZDcyMmNkNzUzMTI5MTg0ZGY1MTQ3NzRhNzFmMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/APaEepVO1ar57PCIP0rfp1OpQe
iIeJJf2ruLTXaPbO1wog9bevTuJfDrNZQ2q+6Qmt0TOZhMMBTCvJao9je+30ZRy9
iGwvxpMEB0g/Y+159RDR98Ykl6Pu8UziszvCkViwwmjXV+NlfTvLMqCg1GicqLoU
tU1NetzwaZEh3SHRRtlTruPVwyWa10ssQMmkpK97Xfa8CxGP8zbj+8YprgWIGWvK
uN+/jg3ssQ+w5vnXELDXTDQd0G15nw+Mr9aXrMlAR+LS+jjn6s8Bs5j0pGDIgffz
NbmGbys4zHANFTEAa4QIPLrGcyhw41DPpKvLw409wVznYvRxzrvpaazJ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCsuMbl1yLNdTEpGE31FHdKcfG2MB8GA1UdIwQY
MBaAFAfbI6XiVQ/5dMpfQZF6yGfVDjXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgt
NWNjZDVlOWNlMDA0LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgtNWNjZDVlOWNlMDA0
LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkwCbGBd
4CmRjUlfXX8/EZsN1FinuDm/Xk7Oq/EUPgl+pTdYtSGjV7oSV/Zdodq/wkmVCIQl
k5yAmlLb+yg5eCEfii14CZyw6yR7Ekgjs99NOEpPSZ/UXBEaxjHqiyjNI8zU7MIn
CntXyDmA1JzW0mUBi07wCa6hKe72hegy92b15weMOiWVupjh1VOcWpSIuBFZNi2+
K+Fc6p7bPsHdbectduLlV1R6N++z7yIIXO6M3fA+2+xWbkS23QeRd8MVws8aokGG
1eEae4YUNbNDW6qNpEJbDH6Pr4Au5G4k+mddTyZ3yrU6Bv4/gyFYfygfdUBiO2+d
dcVkAhqcZ4kkBA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:01 2026 by rpki-client