Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: O9BVNE/rZ7vd9G8VHQJ8Hr5b4/ZZQ/hE66EXz50uwZw=
Subject key identifier: 74:CF:89:9F:47:85:EA:D7:62:16:4C:3A:25:73:7E:83:A0:14:56:7A
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 019DE4B4637CC6A6DC8DBE92A44C0A60546F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 03D8
Signing time: Fri 01 May 2026 18:02:00 +0000
Manifest this update: Fri 01 May 2026 18:02:00 +0000
Manifest next update: Sat 02 May 2026 18:02:00 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: qR9xVVI977LSMy3DEbk0QNYAzfTPh2L7UJEWoM6fHiQ=)
2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:b4:63:7c:c6:a6:dc:8d:be:92:a4:4c:0a:60:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: May 1 18:02:00 2026 GMT
Not After : May 2 18:02:00 2026 GMT
Subject: CN=74cf899f4785ead762164c3a25737e83a014567a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:4f:15:80:51:a1:5a:32:3e:5e:67:4a:ff:
17:9d:b8:0c:d2:0c:d6:07:9e:67:20:15:fb:43:c9:
f0:e3:aa:9f:4a:21:3e:d3:96:c6:2c:9f:fd:9e:e9:
8f:95:37:4d:03:08:ce:57:b4:19:46:45:ad:ee:71:
10:23:81:5b:51:45:52:59:ab:6b:d3:03:a4:22:69:
35:8f:96:96:fb:a2:eb:0e:81:fc:d0:c8:8c:20:8f:
88:7a:57:bf:ee:65:ff:73:ff:49:dd:48:39:74:3f:
85:e5:26:7a:ab:4d:92:6b:91:a9:bb:88:5e:e7:46:
b7:5d:31:6c:ff:d7:c4:cd:1a:9c:82:b7:28:43:11:
df:2a:cb:5e:d5:3b:02:4d:e1:17:32:7a:be:73:b8:
3d:89:ed:11:b8:51:01:b8:f2:9d:7f:1a:13:9e:eb:
6c:cb:13:98:e5:1f:2d:c7:f7:ca:74:fb:a4:fc:7c:
fa:26:e5:62:37:2b:aa:f1:72:8e:93:84:02:24:5d:
cc:f6:83:7d:df:98:2d:73:fe:42:49:c1:8f:40:f6:
5e:75:c7:56:4c:e9:16:5d:fb:a4:f3:b3:3b:f2:27:
17:d0:b1:04:40:9e:2e:29:46:2e:4f:e2:9a:71:7a:
63:4d:c6:bb:df:04:9b:22:9d:28:12:f7:65:2f:a2:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:89:9F:47:85:EA:D7:62:16:4C:3A:25:73:7E:83:A0:14:56:7A
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:1e:ea:0f:d7:92:b4:ec:16:b1:4c:17:f0:d9:3e:04:13:
ef:38:60:17:26:88:29:76:bf:09:2e:5a:39:b8:c9:15:a4:9b:
9f:da:5a:85:48:75:06:61:0c:99:36:ce:cc:3a:c7:1b:ae:c7:
98:ad:b4:b1:4b:d8:13:2e:74:b9:d5:ff:6e:72:f2:5b:12:38:
dc:cd:e8:57:f7:e9:ee:c6:0a:26:97:d9:d6:24:96:6a:dc:4f:
3a:3f:54:83:99:24:03:ec:01:27:10:eb:33:41:f6:d4:1f:6a:
c3:05:a1:8f:79:2e:ae:8e:72:9d:ac:43:78:52:8a:b3:c0:1d:
21:7d:8d:8c:ef:9f:82:1c:be:73:65:52:28:08:9f:00:4f:7b:
1e:8e:3e:de:f6:8a:2e:60:e5:b6:e0:14:77:8d:1d:e2:3b:8a:
72:5f:0e:05:f7:49:04:60:39:f7:4d:47:95:30:02:b3:a3:b7:
c7:69:c6:25:ac:5d:05:91:21:13:ad:bc:3f:33:c0:ad:41:29:
d7:48:00:7f:73:17:7f:27:c8:2d:3c:fc:dd:48:0d:53:10:f4:
c4:83:56:6d:41:e1:49:c9:9d:ff:ba:e1:20:4f:a8:b1:9e:a2:
00:69:c2:a7:8b:38:f4:09:f5:9c:f5:fe:bc:c6:b6:45:c5:cf:
04:ce:0a:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3ktGN8xqbcjb6SpEwKYFRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWVkN2E1ODE0N2FhNTE0YzhlNmRhZmJjYzVkODc1N2M3
ZDMyNzIwHhcNMjYwNTAxMTgwMjAwWhcNMjYwNTAyMTgwMjAwWjAzMTEwLwYDVQQD
Eyg3NGNmODk5ZjQ3ODVlYWQ3NjIxNjRjM2EyNTczN2U4M2EwMTQ1NjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXNPFYBRoVoyPl5nSv8XnbgM0gzW
B55nIBX7Q8nw46qfSiE+05bGLJ/9numPlTdNAwjOV7QZRkWt7nEQI4FbUUVSWatr
0wOkImk1j5aW+6LrDoH80MiMII+Iele/7mX/c/9J3Ug5dD+F5SZ6q02Sa5Gpu4he
50a3XTFs/9fEzRqcgrcoQxHfKste1TsCTeEXMnq+c7g9ie0RuFEBuPKdfxoTnuts
yxOY5R8tx/fKdPuk/Hz6JuViNyuq8XKOk4QCJF3M9oN935gtc/5CScGPQPZedcdW
TOkWXfuk87M78icX0LEEQJ4uKUYuT+KacXpjTca73wSbIp0oEvdlL6J9dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTPiZ9HherXYhZMOiVzfoOgFFZ6MB8GA1UdIwQY
MBaAFNBe16WBR6pRTI5tr7zF2HV8fTJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEY3WHBZRkhxbEZNam0ydnZNWFlkWHg5TW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yNGZiZmMtZDkwMi00OWRiLTk3OGEt
MzVhMjBmZjg5MjNlLzEvMEY3WHBZRkhxbEZNam0ydnZNWFlkWHg5TW5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yNGZiZmMtZDkwMi00OWRiLTk3OGEtMzVhMjBmZjg5MjNl
LzEvMEY3WHBZRkhxbEZNam0ydnZNWFlkWHg5TW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgUe6g/X
krTsFrFMF/DZPgQT7zhgFyaIKXa/CS5aObjJFaSbn9pahUh1BmEMmTbOzDrHG67H
mK20sUvYEy50udX/bnLyWxI43M3oV/fp7sYKJpfZ1iSWatxPOj9Ug5kkA+wBJxDr
M0H21B9qwwWhj3kuro5ynaxDeFKKs8AdIX2NjO+fghy+c2VSKAifAE97Ho4+3vaK
LmDltuAUd40d4juKcl8OBfdJBGA5901HlTACs6O3x2nGJaxdBZEhE628PzPArUEp
10gAf3MXfyfILTz83UgNUxD0xINWbUHhScmd/7rhIE+osZ6iAGnCp4s49An1nPX+
vMa2RcXPBM4KGg==
-----END CERTIFICATE-----
Generated at Fri May 1 22:59:35 2026 by rpki-client