Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: eJA9+b98401fMQ7xvf9eBmKzAEuL2Y+gwDI/FTMENKk=
Subject key identifier: F4:DB:77:97:F0:38:7D:95:1F:27:58:85:10:80:06:C1:3F:7E:FE:F4
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 01A1DE02628DEB02D9B872915FDAB57B0125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0A6A
Signing time: Sun 15 Nov 2026 07:01:00 +0000
Manifest this update: Sun 15 Nov 2026 07:01:00 +0000
Manifest next update: Mon 16 Nov 2026 07:01:00 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: 2exDRN9xH3BH4RoyWgQ+6y6B5qCDkjPv78+FtsBi4F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:62:8d:eb:02:d9:b8:72:91:5f:da:b5:7b:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Nov 15 07:01:00 2026 GMT
Not After : Nov 16 07:01:00 2026 GMT
Subject: CN=f4db7797f0387d951f275885108006c13f7efef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:10:a5:cc:d1:b7:39:2e:16:98:77:1a:7c:
c1:18:47:22:6d:dd:d3:4e:bf:e5:78:95:9a:26:fe:
56:7d:d1:63:04:e7:f2:08:ee:8b:c3:d2:c7:5b:c6:
ca:ab:a8:24:29:c4:e7:61:28:21:b4:51:fb:d3:c0:
df:b4:c1:3a:a9:0b:b5:e7:9d:83:12:6b:df:4c:3e:
ad:da:23:a5:a7:3c:aa:5f:54:57:14:89:28:46:0f:
54:ee:68:42:92:80:81:fb:46:22:34:25:7c:ac:b7:
34:3e:5b:2a:4b:d6:bc:2e:67:d8:1a:72:74:d9:19:
a3:ca:84:5a:90:38:02:cf:f8:67:97:09:ae:5a:e0:
a7:84:c6:f0:fc:f8:36:d8:1a:d1:cb:fe:5a:ec:8c:
d7:9d:df:3d:30:f2:5d:92:b9:9c:ce:61:b5:0a:90:
f2:19:9a:9e:4b:58:c7:d6:84:68:8a:8d:b6:9f:f9:
bc:54:95:03:cc:c0:07:58:0a:26:5e:50:68:7f:a9:
b5:ae:30:86:b3:ea:b8:e3:df:8b:7b:de:5e:bc:85:
ab:c9:42:71:63:30:d0:f0:62:c7:04:35:2c:9d:dd:
3c:86:a9:c3:1c:a7:2b:91:d9:f3:ed:53:cb:14:7a:
eb:41:d7:2b:cd:e7:b5:ee:ec:7c:bb:59:6b:53:fc:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:77:97:F0:38:7D:95:1F:27:58:85:10:80:06:C1:3F:7E:FE:F4
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f2:e3:d6:44:80:b0:e9:a9:0d:0b:bd:1f:c2:83:12:88:0d:
32:4e:87:ca:dd:e8:49:37:49:1f:f4:3b:f3:86:bc:4d:7d:fd:
58:1a:1e:3d:7d:19:6b:91:44:2d:31:60:15:ba:1c:dc:51:7f:
bb:f4:81:01:36:0c:76:8e:fc:87:44:0d:9e:e7:ed:21:33:9f:
dd:ef:2d:e2:96:30:72:57:08:62:f8:ca:56:b6:9d:aa:80:88:
34:cb:2d:36:c1:7f:9c:8e:f3:7f:c4:7c:2a:b4:8e:0f:bd:40:
c6:ac:cc:bf:5a:51:a6:c8:e7:5a:23:ed:48:2f:dc:f7:a2:7c:
ce:00:f7:13:35:93:66:4c:53:41:b8:8d:31:1c:66:45:ef:aa:
d1:e4:f9:fa:ee:7d:95:bb:d6:79:78:72:a0:c5:00:94:af:99:
0d:c5:b6:ab:22:8e:b1:c7:34:e7:1d:0f:48:a7:72:cf:47:71:
e4:69:1c:3d:01:ac:64:6e:61:25:96:c0:19:b8:a7:ed:e5:36:
82:13:cd:33:dc:6b:d3:68:53:a4:eb:9e:fb:c3:b7:68:85:fb:
e2:df:42:a9:a7:2e:bd:2e:c0:b0:fd:a3:be:6c:f4:e0:dd:77:
f6:fd:fb:25:a8:7b:3c:a4:38:a6:e7:88:8e:d1:85:f8:4b:26:
ec:7d:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:33 2026 by rpki-client