Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: YO2666G72FvNM43jeQVWdZCjX6twzah7YPR9sV0Iv0w=
Subject key identifier: F1:96:13:78:BA:5F:6D:F7:71:D2:77:17:87:6F:2F:59:E3:B4:5E:0E
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019DCED075C81A04CA54DFE77B939EF9B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0D2F
Signing time: Mon 27 Apr 2026 12:01:01 +0000
Manifest this update: Mon 27 Apr 2026 12:01:01 +0000
Manifest next update: Tue 28 Apr 2026 12:01:01 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: cva0KJomCDqflyoIB8j4d2fKMypuaJslpFv0cBzjXBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:75:c8:1a:04:ca:54:df:e7:7b:93:9e:f9:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Apr 27 12:01:01 2026 GMT
Not After : Apr 28 12:01:01 2026 GMT
Subject: CN=f1961378ba5f6df771d27717876f2f59e3b45e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:a3:80:73:d1:75:40:60:f7:d0:8e:3a:36:
3c:5c:e6:30:f8:85:fc:fe:3a:16:4f:76:0b:8c:96:
ef:c2:e5:55:5e:ca:35:f5:91:b0:62:cd:1b:00:0e:
fb:42:36:80:c5:18:6f:83:41:2c:f6:a0:bb:ef:01:
6c:0e:08:74:69:63:26:7e:87:68:40:bc:d8:60:54:
6b:82:fb:9f:e3:64:94:42:74:78:30:65:f3:e4:4a:
b4:24:a8:0a:96:07:b7:4c:c3:28:dd:35:d9:2f:a0:
dd:aa:26:db:6e:d7:33:f5:e2:b7:f8:c4:70:a2:0d:
86:7a:ff:5d:ba:9f:1e:63:12:bb:ca:74:b2:b3:42:
ac:1c:80:ab:1c:97:8d:c4:aa:42:60:75:3c:e4:eb:
fe:be:e9:0c:b9:df:b7:87:fe:81:02:0e:ef:bb:1c:
f2:e8:60:fd:b0:30:e3:4b:94:aa:9f:ea:cc:0f:e5:
00:e8:b5:f7:db:7b:20:64:00:42:2a:fb:e6:26:df:
9d:37:8b:35:70:57:24:b9:11:b8:34:f6:05:bc:5d:
77:db:a5:a0:0b:f1:23:e2:b1:e1:30:31:96:91:c0:
82:a9:9d:50:be:5a:c8:33:fc:06:0d:75:a3:27:a0:
1a:55:69:bf:32:6b:93:57:83:09:bb:4a:6f:e3:08:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:96:13:78:BA:5F:6D:F7:71:D2:77:17:87:6F:2F:59:E3:B4:5E:0E
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:fa:82:ef:f2:5a:d3:24:43:9c:68:d0:95:09:53:1d:d4:
ed:e8:60:39:f0:f8:d0:39:82:66:5f:19:7e:81:6b:ea:e8:f3:
cc:46:e1:9a:6b:85:f2:34:63:d9:45:62:f8:19:e2:47:7c:6f:
d9:19:61:b3:47:74:c8:17:be:5b:d7:de:95:45:48:f0:58:3e:
78:24:b4:36:a6:22:66:a6:e4:a5:28:f4:85:1d:b7:d0:26:b5:
f9:a5:36:0c:ae:ec:6d:ed:eb:91:a6:c4:ca:88:d9:fe:93:88:
67:d0:98:66:39:93:f7:4e:7c:42:1f:bd:c3:cd:d0:c4:39:9c:
02:37:d3:ed:e7:19:69:10:56:c3:d4:e4:1e:24:6e:a3:a3:fc:
db:74:b1:ff:88:d3:5e:61:31:e3:84:1a:8c:82:ae:f9:b0:87:
a2:b9:78:28:32:13:d3:c9:d6:d7:7d:3f:6e:b0:a6:e2:01:0e:
8f:bb:a5:c2:61:10:dc:71:5f:ff:ad:4d:ef:45:c5:e2:e2:d4:
1d:84:01:8d:5a:25:db:f6:50:dc:b8:d6:44:ba:27:42:a0:3e:
93:e2:21:e0:45:00:c5:3c:97:37:13:36:53:2b:18:40:0d:0c:
58:5d:fd:5d:ef:d3:0d:49:e6:12:cc:4a:4a:e8:d6:41:f9:a9:
b2:90:d3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0HXIGgTKVN/ne5Oe+beNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjYwNDI3MTIwMTAxWhcNMjYwNDI4MTIwMTAxWjAzMTEwLwYDVQQD
EyhmMTk2MTM3OGJhNWY2ZGY3NzFkMjc3MTc4NzZmMmY1OWUzYjQ1ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GOjgHPRdUBg99COOjY8XOYw+IX8
/joWT3YLjJbvwuVVXso19ZGwYs0bAA77QjaAxRhvg0Es9qC77wFsDgh0aWMmfodo
QLzYYFRrgvuf42SUQnR4MGXz5Eq0JKgKlge3TMMo3TXZL6Ddqibbbtcz9eK3+MRw
og2Gev9dup8eYxK7ynSys0KsHICrHJeNxKpCYHU85Ov+vukMud+3h/6BAg7vuxzy
6GD9sDDjS5Sqn+rMD+UA6LX323sgZABCKvvmJt+dN4s1cFckuRG4NPYFvF1326Wg
C/Ej4rHhMDGWkcCCqZ1QvlrIM/wGDXWjJ6AaVWm/MmuTV4MJu0pv4wjmfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGWE3i6X233cdJ3F4dvL1njtF4OMB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHz6gu/y
WtMkQ5xo0JUJUx3U7ehgOfD40DmCZl8ZfoFr6ujzzEbhmmuF8jRj2UVi+BniR3xv
2Rlhs0d0yBe+W9felUVI8Fg+eCS0NqYiZqbkpSj0hR230Ca1+aU2DK7sbe3rkabE
yojZ/pOIZ9CYZjmT9058Qh+9w83QxDmcAjfT7ecZaRBWw9TkHiRuo6P823Sx/4jT
XmEx44QajIKu+bCHorl4KDIT08nW130/brCm4gEOj7ulwmEQ3HFf/61N70XF4uLU
HYQBjVol2/ZQ3LjWRLonQqA+k+Ih4EUAxTyXNxM2UysYQA0MWF39Xe/TDUnmEsxK
SujWQfmpspDTNQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:56 2026 by rpki-client