Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: XvhQMrt3izV0ainp/igYmrVK+8nPQvEcub9B8YYXnDU=
Subject key identifier: 96:00:B7:1A:55:60:98:38:11:E6:A7:F4:66:71:AF:C0:8E:CF:A8:FD
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019EBE7FAFFAC2DC106C247EC6ECD7B93214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 08CC
Signing time: Sat 13 Jun 2026 01:01:39 +0000
Manifest this update: Sat 13 Jun 2026 01:01:39 +0000
Manifest next update: Sun 14 Jun 2026 01:01:39 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: rENfTl86TJrg59DfUZTDN+ujCsM4BNJluHiCgIGkxdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:af:fa:c2:dc:10:6c:24:7e:c6:ec:d7:b9:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Jun 13 01:01:39 2026 GMT
Not After : Jun 14 01:01:39 2026 GMT
Subject: CN=9600b71a5560983811e6a7f46671afc08ecfa8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:96:bc:6a:d4:7c:cf:5a:87:d0:1e:b6:d3:
82:27:7c:56:77:36:0a:34:14:7a:29:67:b8:05:bd:
23:46:9f:62:5b:32:e2:b7:79:6a:86:4e:dd:f0:e4:
d4:05:a7:a6:22:52:54:e2:c3:a0:89:69:7a:53:11:
e2:b6:1f:1e:c7:63:04:23:b9:db:71:e1:bc:54:43:
5e:33:7a:d5:5a:10:54:6e:dd:fc:37:02:5a:46:66:
a0:42:43:d6:b9:a9:be:ed:ef:83:fb:eb:f6:47:18:
73:cf:6b:14:76:13:d6:bf:b5:67:e5:ba:a5:f8:be:
68:27:25:4a:16:7a:b4:5c:29:75:29:bc:d0:30:c3:
47:a9:fe:ea:93:c1:08:d4:ef:9f:ef:c7:9b:d0:d5:
7a:0a:d5:70:7b:77:47:b0:11:cc:e8:fc:46:ae:57:
7e:83:2c:78:9b:b5:59:9d:e5:b4:c4:40:a4:97:5f:
0b:df:5d:88:c3:e9:19:92:40:07:25:d8:ff:88:e8:
33:2b:35:78:4c:c2:3d:48:62:e1:67:51:22:e8:30:
f4:d5:f6:da:ce:c1:da:87:5b:09:5c:2a:05:98:e8:
ff:2b:bb:92:95:e2:a6:2c:2d:12:db:2e:74:4c:a7:
65:36:0e:bb:31:2b:8b:55:26:00:bf:d3:5c:d4:bd:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:B7:1A:55:60:98:38:11:E6:A7:F4:66:71:AF:C0:8E:CF:A8:FD
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:32:f2:2e:ed:31:f7:18:9a:a7:ec:a8:9b:be:8c:c8:70:fd:
f1:71:2b:63:a4:28:4c:c6:1e:ff:8c:d3:fd:24:e2:6d:59:95:
11:3b:e4:8d:ce:c3:bb:89:2e:f4:0a:b4:54:22:eb:69:54:b2:
29:a3:d4:b8:37:52:43:c3:d5:1e:5a:ae:36:2a:84:b0:fa:22:
dd:1f:18:1b:fd:06:91:2d:c4:95:ba:f0:ce:d1:d1:ba:2d:82:
97:34:d6:50:2d:49:8e:de:9a:a8:32:63:95:a6:1f:ff:a9:74:
07:78:9a:ff:2f:8d:3c:89:55:d3:66:f4:14:85:a8:cd:3c:f2:
ef:72:80:38:d7:bd:b6:9e:1e:54:7e:f7:91:01:09:1d:53:c0:
5e:d8:97:a7:50:1d:fa:75:90:f8:cc:fa:2d:b9:de:74:72:5c:
d3:0b:4f:be:d0:ae:3b:7f:8f:26:35:98:f3:32:1f:32:27:79:
06:36:a5:29:73:96:8b:e2:9f:9b:93:f5:60:80:1b:01:59:be:
51:70:f0:da:07:74:7b:66:3d:d4:d1:24:e2:b9:d6:3c:78:b4:
57:cc:9f:72:ad:11:7d:a6:4b:63:d4:5f:3d:fb:53:33:b3:ce:
91:ee:ca:02:0e:41:3f:f3:54:c2:12:8b:23:1c:d4:58:e8:03:
73:ea:9e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f6/6wtwQbCR+xuzXuTIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1
M2IzZTQwHhcNMjYwNjEzMDEwMTM5WhcNMjYwNjE0MDEwMTM5WjAzMTEwLwYDVQQD
Eyg5NjAwYjcxYTU1NjA5ODM4MTFlNmE3ZjQ2NjcxYWZjMDhlY2ZhOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPKWvGrUfM9ah9AettOCJ3xWdzYK
NBR6KWe4Bb0jRp9iWzLit3lqhk7d8OTUBaemIlJU4sOgiWl6UxHith8ex2MEI7nb
ceG8VENeM3rVWhBUbt38NwJaRmagQkPWuam+7e+D++v2Rxhzz2sUdhPWv7Vn5bql
+L5oJyVKFnq0XCl1KbzQMMNHqf7qk8EI1O+f78eb0NV6CtVwe3dHsBHM6PxGrld+
gyx4m7VZneW0xECkl18L312Iw+kZkkAHJdj/iOgzKzV4TMI9SGLhZ1Ei6DD01fba
zsHah1sJXCoFmOj/K7uSleKmLC0S2y50TKdlNg67MSuLVSYAv9Nc1L2gTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYAtxpVYJg4Eean9GZxr8COz6j9MB8GA1UdIwQY
MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt
ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2
LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTLyLu0x
9xiap+yom76MyHD98XErY6QoTMYe/4zT/STibVmVETvkjc7Du4ku9Aq0VCLraVSy
KaPUuDdSQ8PVHlquNiqEsPoi3R8YG/0GkS3ElbrwztHRui2ClzTWUC1Jjt6aqDJj
laYf/6l0B3ia/y+NPIlV02b0FIWozTzy73KAONe9tp4eVH73kQEJHVPAXtiXp1Ad
+nWQ+Mz6LbnedHJc0wtPvtCuO3+PJjWY8zIfMid5BjalKXOWi+Kfm5P1YIAbAVm+
UXDw2gd0e2Y91NEk4rnWPHi0V8yfcq0RfaZLY9RfPftTM7POke7KAg5BP/NUwhKL
IxzUWOgDc+qeAg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:59 2026 by rpki-client