Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: TvvCkpBm+DFgHlJQ43dR4OVS7VxuugaYw2wrjGKyuQs=
Subject key identifier: DF:60:C8:DF:92:18:C6:CC:F6:60:BA:2E:49:79:EE:19:AE:66:B1:BA
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019CAB6ACD8B9EA13916F0371B4EE02AF4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 07B9
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: 1ShOgpLflm8DofX7e1il7xZVhPodjJyJlFDBLBp1L/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cd:8b:9e:a1:39:16:f0:37:1b:4e:e0:2a:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=df60c8df9218c6ccf660ba2e4979ee19ae66b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:46:ba:9a:9b:8d:30:fe:8b:91:e2:3e:2d:
92:54:42:c2:7b:04:2c:50:dc:dc:3c:d8:0c:38:67:
94:76:90:4e:81:a6:1c:25:24:3f:b5:23:ab:db:51:
72:85:fb:25:d9:75:5b:9b:a8:5a:17:2a:24:0c:b9:
14:27:6f:21:45:21:b8:78:b7:b4:af:79:92:33:81:
14:87:b0:85:fd:32:61:7c:ba:28:63:36:67:70:53:
ab:63:6a:af:f2:0a:1d:71:7d:71:26:f7:ac:f9:40:
5c:35:28:f7:d3:47:f8:8c:10:d1:76:54:cb:96:b5:
bc:b1:cd:50:4d:5d:3f:15:af:5a:72:e3:bd:c9:88:
d0:c9:32:bf:8f:ef:0c:a5:b8:2e:34:3f:4e:de:6b:
7c:8b:67:50:3e:d2:71:a0:94:f4:32:d9:40:70:2e:
c5:e4:c7:ff:26:fe:d8:46:c0:4a:9c:66:14:e5:33:
0f:05:68:2c:08:62:0f:5f:23:2e:9b:57:1a:8c:b2:
c6:93:71:e0:7b:8e:3c:b5:6f:dc:f0:e6:34:29:60:
d4:c2:ef:3c:0e:24:8d:83:e3:16:d6:50:ab:ac:c7:
2f:02:8c:fd:89:ed:d1:50:91:2c:5f:9b:ab:53:1a:
58:96:40:1d:10:2d:58:fe:8a:25:11:94:0b:b9:e3:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:C8:DF:92:18:C6:CC:F6:60:BA:2E:49:79:EE:19:AE:66:B1:BA
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:c4:76:8f:d0:ac:11:fe:a6:0e:9d:e9:2d:49:ac:85:1b:
e9:50:bd:c4:aa:33:41:dd:c7:2e:9a:b3:84:68:1e:b0:80:06:
a1:7f:c1:be:7a:4c:ed:11:d2:ff:45:e9:e6:71:d2:dc:04:48:
48:75:0c:ed:f5:b7:59:5b:18:0f:c6:e7:44:34:0c:d8:e0:9b:
3b:70:62:3f:88:70:25:cc:1f:a8:a1:ef:1f:37:0d:d3:85:db:
55:a0:7b:f9:0e:85:82:e2:38:f6:9c:5d:97:46:b1:32:68:aa:
f3:98:2e:f2:a3:83:e3:20:c8:97:0c:92:2e:50:2b:60:44:ca:
e4:bd:81:b5:6e:09:cc:2c:79:d3:be:45:1d:d8:41:c6:62:66:
db:55:75:5a:b8:77:8e:d1:69:1f:d1:aa:4f:7f:85:6b:30:0b:
09:bd:12:31:89:b0:32:b2:0c:03:5d:44:f2:95:2a:61:01:fb:
c9:74:ad:78:4e:b2:13:bd:74:76:05:4f:80:8d:b9:71:6f:9c:
cb:80:04:d7:3f:a9:af:6f:75:4c:82:07:ae:be:52:5c:f5:ce:
35:ed:1a:a9:ce:08:82:84:9b:54:52:0e:35:84:7a:af:79:12:
f8:0f:16:19:78:67:d1:88:e9:5a:98:53:2b:5b:8d:18:52:d7:
ad:96:1b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyras2LnqE5FvA3G07gKvSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1
M2IzZTQwHhcNMjYwMzAxMjIwMDI5WhcNMjYwMzAyMjIwMDI5WjAzMTEwLwYDVQQD
EyhkZjYwYzhkZjkyMThjNmNjZjY2MGJhMmU0OTc5ZWUxOWFlNjZiMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+VGupqbjTD+i5HiPi2SVELCewQs
UNzcPNgMOGeUdpBOgaYcJSQ/tSOr21Fyhfsl2XVbm6haFyokDLkUJ28hRSG4eLe0
r3mSM4EUh7CF/TJhfLooYzZncFOrY2qv8godcX1xJves+UBcNSj300f4jBDRdlTL
lrW8sc1QTV0/Fa9acuO9yYjQyTK/j+8MpbguND9O3mt8i2dQPtJxoJT0MtlAcC7F
5Mf/Jv7YRsBKnGYU5TMPBWgsCGIPXyMum1cajLLGk3Hge448tW/c8OY0KWDUwu88
DiSNg+MW1lCrrMcvAoz9ie3RUJEsX5urUxpYlkAdEC1Y/oolEZQLueOKtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9gyN+SGMbM9mC6Lkl57hmuZrG6MB8GA1UdIwQY
MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt
ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2
LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHD/Edo/Q
rBH+pg6d6S1JrIUb6VC9xKozQd3HLpqzhGgesIAGoX/BvnpM7RHS/0Xp5nHS3ARI
SHUM7fW3WVsYD8bnRDQM2OCbO3BiP4hwJcwfqKHvHzcN04XbVaB7+Q6FguI49pxd
l0axMmiq85gu8qOD4yDIlwySLlArYETK5L2BtW4JzCx5075FHdhBxmJm21V1Wrh3
jtFpH9GqT3+FazALCb0SMYmwMrIMA11E8pUqYQH7yXSteE6yE710dgVPgI25cW+c
y4AE1z+pr291TIIHrr5SXPXONe0aqc4IgoSbVFIONYR6r3kS+A8WGXhn0YjpWphT
K1uNGFLXrZYb8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:13 2026 by rpki-client