Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: VqEqTjiLv+f0HsU7o3TsHl8VwDFSSW78dqHfWgpaCB4=
Subject key identifier: B9:75:11:30:E7:4F:30:FF:17:1C:52:47:CF:F9:23:5B:B7:A8:F9:F3
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019D98F4E904DD7FABDB9F2BA67E1B5B25E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0834
Signing time: Fri 17 Apr 2026 01:01:20 +0000
Manifest this update: Fri 17 Apr 2026 01:01:20 +0000
Manifest next update: Sat 18 Apr 2026 01:01:20 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: SROzzwlDjt/JaKmspIrPrK13cxpfoXvXkQF7jd+6ahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e9:04:dd:7f:ab:db:9f:2b:a6:7e:1b:5b:25:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Apr 17 01:01:20 2026 GMT
Not After : Apr 18 01:01:20 2026 GMT
Subject: CN=b9751130e74f30ff171c5247cff9235bb7a8f9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:50:81:d0:9b:60:f0:44:40:40:8b:78:2c:
a2:e7:cd:d9:89:4b:cc:ca:fc:b7:e6:66:12:99:c0:
cd:0e:d9:10:39:46:b7:eb:58:24:32:9b:8c:bf:73:
e5:42:79:ac:2c:07:06:4f:45:83:de:8a:4d:61:cc:
8e:65:7f:2b:51:32:ec:b1:ec:a3:53:67:60:de:46:
8a:a1:3e:8f:6d:ec:37:25:5b:16:52:e3:69:0c:bb:
bc:6c:e7:1b:9a:21:a6:2b:86:c3:61:ca:ee:20:b1:
34:87:78:a4:6f:97:08:d2:c2:08:32:c9:76:9a:48:
10:d2:70:65:8a:08:70:2a:9e:e4:9f:c5:97:6d:27:
3b:b5:08:16:ea:10:3f:50:b3:47:f7:df:a1:2b:ee:
4e:d2:36:1a:29:0d:6b:f6:89:4e:63:9d:92:ac:99:
28:88:3b:20:2e:0f:93:70:71:5d:e5:da:b2:d1:6d:
d4:cc:33:ca:96:84:f8:11:ae:81:6d:e5:7a:e6:e2:
ea:67:0c:ee:cf:df:cc:e6:ac:25:7a:32:0a:f1:0e:
51:90:07:c3:7f:94:39:31:3f:82:c2:80:46:26:2e:
4c:e1:28:21:48:c4:37:39:ac:93:6c:a1:ad:ee:04:
15:0a:3a:4d:be:85:19:b4:be:23:94:d4:f1:99:db:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:75:11:30:E7:4F:30:FF:17:1C:52:47:CF:F9:23:5B:B7:A8:F9:F3
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:8f:d2:b0:99:2a:cf:e7:46:1d:b0:b9:dd:df:b5:f9:42:
a0:e0:d3:81:58:53:42:d6:59:39:16:84:65:02:c2:ce:2c:1f:
5b:c6:08:3b:13:07:32:a9:14:dd:83:d1:c4:dd:e9:00:55:92:
58:91:fb:7f:ab:28:18:78:f9:0e:43:1c:c8:d1:91:dd:c8:6c:
aa:9b:95:24:22:ea:6a:50:0e:5b:93:f3:8a:a8:0c:2e:c6:2d:
cd:15:ca:8b:f8:43:c4:28:ae:73:92:2b:f0:46:8e:c3:5d:57:
e6:aa:49:2f:4a:5a:bb:12:f6:a5:49:bb:ea:22:20:7b:b0:26:
c5:96:09:0e:2d:35:10:7c:cd:dd:59:a5:9d:b5:c7:be:f4:ca:
af:44:33:3f:08:99:c1:81:67:0c:9d:84:33:a1:84:fd:09:2f:
aa:31:c8:23:1b:4b:4e:db:37:71:38:dc:a5:4a:8e:ef:3e:96:
45:63:93:ea:bd:15:1b:aa:dc:4e:98:e5:dd:45:fc:cf:d8:33:
e0:cd:a8:64:b9:c6:46:95:c7:20:db:99:5e:96:77:7c:48:bf:
54:96:43:53:0e:01:5c:13:ba:ee:3c:18:92:f4:01:e0:ce:ab:
7d:30:88:5a:0a:c9:c7:6c:dd:21:f5:a2:b6:62:4a:80:f0:28:
10:27:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:52 2026 by rpki-client