Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: FXj7cUy6rOoTZ4q3isO4u/CX4VmbuoQiAiNdKm6e0KQ=
Subject key identifier: 3A:2D:6E:F1:ED:4C:A7:77:B9:5D:2C:00:40:19:97:C0:4A:0F:0D:AC
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 01A0C40DB66D8B9D3C4EC823C448D80B3E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 09D8
Signing time: Mon 21 Sep 2026 13:00:28 +0000
Manifest this update: Mon 21 Sep 2026 13:00:28 +0000
Manifest next update: Tue 22 Sep 2026 13:00:28 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: BFjUMnKBHynMhh6icZw3wdDOWv7JFY2qURjk/yNazaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:b6:6d:8b:9d:3c:4e:c8:23:c4:48:d8:0b:3e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Sep 21 13:00:28 2026 GMT
Not After : Sep 22 13:00:28 2026 GMT
Subject: CN=3a2d6ef1ed4ca777b95d2c00401997c04a0f0dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:99:aa:0f:4d:cd:13:6c:72:ca:25:e1:79:
4c:f1:55:17:6e:2b:04:83:e8:d5:03:a5:93:eb:36:
d0:ed:1a:76:5d:c2:5a:63:6b:64:ee:0b:71:3e:f3:
72:df:86:fd:48:1f:2b:b7:91:c4:a9:24:92:eb:4a:
9d:ad:bf:9c:97:81:25:88:25:07:e1:91:bc:75:7a:
30:5f:82:65:67:c9:34:6e:f8:19:6f:62:b8:ab:78:
e1:b8:01:6e:f9:3c:a2:ce:e2:0e:0d:0c:15:7d:cd:
a5:ee:4f:f1:34:90:49:d9:49:f5:65:57:ce:56:f8:
e3:61:51:d5:8f:a1:25:59:46:4f:af:4b:07:4b:2b:
2e:ba:84:01:c5:5b:67:bc:b8:e4:61:f2:70:d1:63:
31:10:d8:58:10:19:14:a8:69:7b:39:10:62:f6:9a:
c2:c7:ca:dd:fc:cd:16:42:be:03:49:96:c5:90:04:
80:28:1b:63:df:d5:20:1d:11:d2:41:34:dd:41:40:
9b:2e:75:c3:dd:d6:8e:fa:0b:d9:0a:2c:26:4c:f7:
e7:1d:49:3f:54:9d:ab:05:6c:e2:4b:13:bf:ed:d4:
9e:9f:30:ab:0c:f3:42:aa:6b:3c:32:ee:24:e5:d8:
59:8b:6c:c2:dc:f3:13:c9:bf:8d:15:4b:43:d2:2d:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:6E:F1:ED:4C:A7:77:B9:5D:2C:00:40:19:97:C0:4A:0F:0D:AC
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:dd:eb:16:81:cb:ae:2c:37:f2:18:0c:06:c6:96:a7:6b:d9:
36:ee:1b:3c:e6:7d:70:57:23:82:b9:5a:8e:c8:df:73:32:4b:
41:69:05:96:80:ce:94:ad:34:12:67:5c:ef:42:14:48:ee:b9:
57:1e:2c:e3:90:b5:27:ed:7a:ca:4e:e9:72:7e:b4:2b:50:b8:
fe:8b:cd:79:84:f3:25:7e:75:a7:76:6d:8e:2b:16:ba:b0:3e:
5b:ed:95:93:fd:a6:b8:13:60:20:4e:bf:96:a5:4b:95:ae:86:
3c:2a:35:c1:e5:08:60:2b:98:c2:53:64:cd:c4:cb:ca:47:a2:
81:4a:c1:d4:a4:5d:cf:3a:eb:18:7e:80:5f:d3:29:05:20:34:
79:bb:f8:a2:84:81:32:51:6f:cc:72:d3:dd:49:66:27:e0:b1:
1c:a4:92:dc:a0:e3:82:39:25:2a:f7:7a:99:48:ba:30:76:5f:
a5:8c:2f:86:25:9a:40:49:6e:6d:d1:60:b0:7f:d2:14:24:07:
43:8a:3c:c0:0b:7a:de:37:3c:d7:83:1f:92:f5:43:65:dc:e7:
02:09:ac:96:d8:0f:0e:a0:e8:37:f8:66:2d:94:f3:65:02:9d:
86:f1:a9:8f:b9:7b:ef:bf:03:27:fb:cb:64:1a:70:31:8d:d1:
6f:62:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:04:55 2026 by rpki-client