Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: tZGoLKFBYlUgAxs8Lgwilv5HY+sIZn1VOLYgvuHp230=
Subject key identifier: 8B:C7:37:C1:39:F9:E8:14:8F:9A:98:2D:46:32:7B:34:EB:99:E7:91
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019FA229A71E4997086ED41FEB34A33A3B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0E21
Signing time: Mon 27 Jul 2026 06:01:06 +0000
Manifest this update: Mon 27 Jul 2026 06:01:06 +0000
Manifest next update: Tue 28 Jul 2026 06:01:06 +0000
Files and hashes: 1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: uUNxwhiGm+HIxT6xuCclv1emOr47JhtbTP6IxaHZd6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:a7:1e:49:97:08:6e:d4:1f:eb:34:a3:3a:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Jul 27 06:01:06 2026 GMT
Not After : Jul 28 06:01:06 2026 GMT
Subject: CN=8bc737c139f9e8148f9a982d46327b34eb99e791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:ce:c5:8a:e8:fa:03:92:33:e3:5c:d2:12:
4e:b0:71:03:b9:cf:1a:11:94:c7:5c:3a:59:ff:72:
f0:16:a5:a0:9e:37:f8:a3:b5:78:a7:f3:37:eb:a7:
08:4e:62:2c:68:ec:87:d9:58:3a:39:86:8e:08:6e:
c9:f8:37:81:04:9b:dd:b8:02:52:27:bc:fe:6a:76:
6d:d1:cb:73:96:d0:5d:71:5e:21:55:61:be:ae:1e:
7a:2b:02:05:92:74:8f:44:41:60:2f:36:3c:c6:e0:
66:ea:e8:b9:06:d2:cd:74:52:50:35:7a:59:8d:f6:
be:ca:c6:7c:6f:f6:93:4c:27:5a:6d:84:33:58:b3:
bd:1f:b6:16:46:af:17:9c:7a:5e:c7:37:2a:0e:35:
9c:e7:0c:09:07:26:8f:da:9d:a6:f4:b8:5b:80:30:
a7:10:88:fb:84:65:e0:32:ab:b5:df:6a:79:9b:99:
1f:bb:ab:1b:40:ab:e9:6e:6e:d2:ef:5d:96:aa:99:
55:87:cd:30:59:98:6b:01:ff:a3:da:39:fa:13:c6:
83:4f:16:87:61:bf:dd:61:fe:05:69:72:a3:7e:b4:
fe:a2:e1:62:68:0f:39:2f:19:54:0d:a8:e1:85:9e:
8c:5f:b2:90:1a:45:67:1b:bb:52:28:6f:f6:fe:ff:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:37:C1:39:F9:E8:14:8F:9A:98:2D:46:32:7B:34:EB:99:E7:91
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fd:18:a2:a4:ce:c4:b2:f5:41:f7:f5:19:0a:b7:ea:fb:f8:
88:dc:88:e5:76:4d:e9:44:41:2b:a3:40:6c:75:cc:e0:27:ea:
79:07:54:99:f9:3c:93:46:9c:00:a9:00:b1:fa:98:e0:9c:69:
5a:1a:47:3f:5c:18:ee:f5:53:da:24:ad:60:e6:45:c7:1a:b1:
65:34:ec:22:dd:d8:0d:72:ef:23:b5:30:b8:52:98:ac:32:df:
11:3a:f3:fa:51:09:94:2a:d8:36:25:9c:f8:2e:43:32:82:ac:
2a:73:6a:c7:7c:a3:2c:a8:0c:fa:c9:bb:a1:19:10:d6:78:be:
35:11:bf:88:56:98:08:fb:a4:99:3d:20:f4:3d:96:93:5c:3f:
f0:69:27:9d:4f:04:94:57:8a:68:11:a8:b4:17:fa:52:2b:18:
68:2e:65:f2:5f:08:86:03:1f:61:f5:59:32:35:a2:2c:03:54:
ac:a9:d5:d1:5c:08:0c:4f:3a:cc:bf:4d:9b:ac:c4:1e:b9:50:
df:bd:eb:14:9b:e9:24:da:17:52:65:ca:72:f1:3a:78:32:2f:
4a:99:59:f6:e2:64:18:cd:82:4a:8d:bf:2e:c3:b1:e7:b0:42:
db:25:fe:5b:64:64:71:81:3a:64:77:cf:78:3a:9c:62:8e:a9:
c2:dd:eb:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKaceSZcIbtQf6zSjOjtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjYwNzI3MDYwMTA2WhcNMjYwNzI4MDYwMTA2WjAzMTEwLwYDVQQD
Eyg4YmM3MzdjMTM5ZjllODE0OGY5YTk4MmQ0NjMyN2IzNGViOTllNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbLOxYro+gOSM+Nc0hJOsHEDuc8a
EZTHXDpZ/3LwFqWgnjf4o7V4p/M366cITmIsaOyH2Vg6OYaOCG7J+DeBBJvduAJS
J7z+anZt0ctzltBdcV4hVWG+rh56KwIFknSPREFgLzY8xuBm6ui5BtLNdFJQNXpZ
jfa+ysZ8b/aTTCdabYQzWLO9H7YWRq8XnHpexzcqDjWc5wwJByaP2p2m9LhbgDCn
EIj7hGXgMqu132p5m5kfu6sbQKvpbm7S712WqplVh80wWZhrAf+j2jn6E8aDTxaH
Yb/dYf4FaXKjfrT+ouFiaA85LxlUDajhhZ6MX7KQGkVnG7tSKG/2/v8LmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvHN8E5+egUj5qYLUYyezTrmeeRMB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv0YoqTO
xLL1Qff1GQq36vv4iNyI5XZN6URBK6NAbHXM4CfqeQdUmfk8k0acAKkAsfqY4Jxp
WhpHP1wY7vVT2iStYOZFxxqxZTTsIt3YDXLvI7UwuFKYrDLfETrz+lEJlCrYNiWc
+C5DMoKsKnNqx3yjLKgM+sm7oRkQ1ni+NRG/iFaYCPukmT0g9D2Wk1w/8GknnU8E
lFeKaBGotBf6UisYaC5l8l8IhgMfYfVZMjWiLANUrKnV0VwIDE86zL9Nm6zEHrlQ
373rFJvpJNoXUmXKcvE6eDIvSplZ9uJkGM2CSo2/LsOx57BC2yX+W2RkcYE6ZHfP
eDqcYo6pwt3r1A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:07 2026 by rpki-client