Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: lQgLsgbRMewn1ehU9LnIFg0QUC2SpLpZEv3GPK0Fl8I=
Subject key identifier: A9:15:08:1B:82:D1:29:D3:2C:50:15:ED:8C:99:53:77:94:CA:74:1A
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019D9B50FEB3AFFFF1BBF21F9A07FDE1957A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 09CE
Signing time: Fri 17 Apr 2026 12:01:09 +0000
Manifest this update: Fri 17 Apr 2026 12:01:09 +0000
Manifest next update: Sat 18 Apr 2026 12:01:09 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: y/8LzdftvAXwSyd4+7pLtSGlHFqup0W59ob6BwHmxGg=)
2: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (hash: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:fe:b3:af:ff:f1:bb:f2:1f:9a:07:fd:e1:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Apr 17 12:01:09 2026 GMT
Not After : Apr 18 12:01:09 2026 GMT
Subject: CN=a915081b82d129d32c5015ed8c99537794ca741a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:96:a1:88:5c:ca:b6:e5:3e:de:93:52:6b:
9d:66:20:2a:56:28:17:0e:6b:03:e4:29:45:db:0c:
14:0c:75:06:4c:a4:8a:c3:77:40:53:dd:a3:84:fc:
69:1c:27:6d:89:a0:dc:10:37:61:42:d7:29:dd:96:
37:cf:3c:c8:53:49:ef:e6:8c:12:8a:69:9a:e2:66:
e1:9d:9b:86:42:05:8d:69:00:94:61:04:00:e9:97:
6d:0f:89:cf:8e:7b:eb:39:1b:70:46:ad:24:e4:1c:
f3:fd:44:67:c9:c1:18:9d:20:05:8f:ae:73:39:5e:
ac:54:6d:fd:fa:e4:cf:82:45:fe:73:ae:8c:69:1f:
61:69:e8:77:52:c3:1e:ce:0c:c3:84:76:e7:bb:f6:
a3:aa:d3:3c:f0:e3:3c:84:db:09:5c:9f:40:e4:a8:
04:a3:63:1b:51:d5:8f:f2:a1:b5:71:c2:fb:ab:ea:
85:2a:9a:48:d5:88:75:0c:d2:dd:11:05:43:09:28:
b1:66:0a:ba:72:1d:d6:38:40:13:78:37:67:6d:52:
68:4b:53:a9:d7:f3:96:bf:0a:86:9f:c7:44:15:46:
e2:40:e7:d4:c8:6d:c1:84:a2:fe:39:5e:74:63:97:
9c:8d:50:51:35:60:99:5d:e3:2c:17:92:06:51:b6:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:08:1B:82:D1:29:D3:2C:50:15:ED:8C:99:53:77:94:CA:74:1A
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:57:3b:cd:4a:2e:62:0d:60:58:3f:d3:44:3e:44:5f:3b:a3:
25:4f:da:13:94:58:fd:90:5b:a9:1a:36:e0:59:b8:29:99:a3:
9d:61:3c:01:47:a7:ef:e0:fc:16:fe:83:55:8e:2a:81:85:f3:
25:30:9a:32:68:38:5d:48:6d:52:d9:8c:57:7d:23:39:e7:c3:
e2:41:17:6c:48:b2:e4:ee:23:8e:a9:77:06:a6:09:2a:ba:a5:
35:68:e4:e7:32:6c:ff:26:03:81:02:9a:4f:fc:48:9c:ef:44:
da:e6:8e:ec:58:b3:ab:0e:93:57:7d:03:d8:9e:3a:77:33:0b:
9e:40:24:a6:dd:fd:0b:f4:2c:33:07:1d:83:74:35:81:56:fb:
bd:c7:8a:37:a1:ab:cc:73:2f:d0:44:2e:46:d0:04:77:4c:a9:
de:1e:1a:58:2d:41:e7:d2:c6:78:4a:37:11:3f:9b:52:29:5f:
01:af:87:f8:cc:19:23:c6:22:4b:23:ae:7b:11:d7:dd:10:b7:
ef:d2:d9:b6:c9:11:52:09:3f:07:c3:e2:af:2d:35:04:ec:c5:
ca:6a:c3:04:69:7e:06:dd:d6:51:66:65:db:9c:0f:0e:76:67:
84:f5:2b:2f:55:ba:d2:f0:52:7d:00:49:f9:97:19:35:22:09:
9a:58:35:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUP6zr//xu/Ifmgf94ZV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjJiYmNkMWMyZDhkN2FkZjc0MWQ3MDRkOWRjNjRiOWU2
MTRmZGEwHhcNMjYwNDE3MTIwMTA5WhcNMjYwNDE4MTIwMTA5WjAzMTEwLwYDVQQD
EyhhOTE1MDgxYjgyZDEyOWQzMmM1MDE1ZWQ4Yzk5NTM3Nzk0Y2E3NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeaWoYhcyrblPt6TUmudZiAqVigX
DmsD5ClF2wwUDHUGTKSKw3dAU92jhPxpHCdtiaDcEDdhQtcp3ZY3zzzIU0nv5owS
imma4mbhnZuGQgWNaQCUYQQA6ZdtD4nPjnvrORtwRq0k5Bzz/URnycEYnSAFj65z
OV6sVG39+uTPgkX+c66MaR9haeh3UsMezgzDhHbnu/ajqtM88OM8hNsJXJ9A5KgE
o2MbUdWP8qG1ccL7q+qFKppI1Yh1DNLdEQVDCSixZgq6ch3WOEATeDdnbVJoS1Op
1/OWvwqGn8dEFUbiQOfUyG3BhKL+OV50Y5ecjVBRNWCZXeMsF5IGUbbGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkVCBuC0SnTLFAV7YyZU3eUynQaMB8GA1UdIwQY
MBaAFA/yu80cLY1633QdcE2dxkueYU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMt
NmFiMDU1NjhhZGUyLzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMtNmFiMDU1NjhhZGUy
LzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVc7zUou
Yg1gWD/TRD5EXzujJU/aE5RY/ZBbqRo24Fm4KZmjnWE8AUen7+D8Fv6DVY4qgYXz
JTCaMmg4XUhtUtmMV30jOefD4kEXbEiy5O4jjql3BqYJKrqlNWjk5zJs/yYDgQKa
T/xInO9E2uaO7Fizqw6TV30D2J46dzMLnkAkpt39C/QsMwcdg3Q1gVb7vceKN6Gr
zHMv0EQuRtAEd0yp3h4aWC1B59LGeEo3ET+bUilfAa+H+MwZI8YiSyOuexHX3RC3
79LZtskRUgk/B8Piry01BOzFymrDBGl+Bt3WUWZl25wPDnZnhPUrL1W60vBSfQBJ
+ZcZNSIJmlg1xA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:58 2026 by rpki-client