Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: IhWg8X1ftn6i7DfUCO2ncDGQs0xb2s0VnjAMviV9ohM=
Subject key identifier: E2:FA:70:55:F6:64:0D:D7:4E:E1:A7:43:F3:A6:07:A8:1E:96:70:D7
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 019FAB6337BC2ECA847D163D2B648C41FEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 027F
Signing time: Wed 29 Jul 2026 01:00:33 +0000
Manifest this update: Wed 29 Jul 2026 01:00:33 +0000
Manifest next update: Thu 30 Jul 2026 01:00:33 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: HwXKgjwgKi8A/33m0hqcL+IcAM1SSmVTafTzMBSqJBY=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
3: llmMHNqMSoDUXRxE5hAlr6D6GAE.roa (hash: R5kL9/aM+FrgRUOf+AsKqKfQFvEpHbyhgcOmGd1LC1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:37:bc:2e:ca:84:7d:16:3d:2b:64:8c:41:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Jul 29 01:00:33 2026 GMT
Not After : Jul 30 01:00:33 2026 GMT
Subject: CN=e2fa7055f6640dd74ee1a743f3a607a81e9670d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:53:9d:4d:b8:05:99:43:e7:13:c8:37:9f:
9a:40:be:bf:89:24:3a:aa:3a:8a:7d:a6:05:d4:4d:
d2:a3:58:52:8f:e1:7a:5d:e3:a5:a1:98:2c:8d:c5:
5f:9d:3f:6b:bc:d9:e9:f4:65:c9:53:04:26:ea:4a:
72:2c:3b:77:2d:5e:cf:85:35:59:7f:2b:a4:c3:a0:
83:04:61:21:c6:25:ca:ac:a8:98:a1:d4:57:5a:9a:
11:a0:4e:22:e4:76:49:f6:a8:8f:f7:bb:5f:2e:58:
05:c0:c2:85:16:9d:00:4d:3c:b3:c5:3c:49:93:21:
f7:ac:d7:78:8c:33:09:a1:f4:19:76:64:6f:67:89:
0f:bc:08:d6:97:13:ad:f9:f5:3f:1f:66:ba:a9:1c:
88:71:f3:56:e0:9a:b0:55:38:f2:9a:f0:97:b0:f4:
3a:d4:79:97:6c:4c:5c:4a:1f:ab:f3:64:09:49:5f:
8b:03:1e:7f:9d:62:30:c9:63:4b:55:9d:c6:89:f2:
12:88:66:05:38:5f:30:83:37:db:fa:89:e7:cb:ba:
c8:b1:52:9c:a7:c8:1e:b7:d5:d9:d2:c4:35:d4:df:
c8:ee:b4:76:6d:51:e8:8c:f2:6b:35:b8:70:69:45:
e5:4c:7a:f9:42:07:db:4e:75:02:40:a0:94:7c:b4:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:70:55:F6:64:0D:D7:4E:E1:A7:43:F3:A6:07:A8:1E:96:70:D7
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:98:ca:e6:bc:60:fe:95:4e:ab:a8:d5:f1:55:70:e0:f6:72:
47:51:a0:84:f3:b9:a8:c0:55:24:1b:05:c5:4c:1d:ac:16:d3:
e4:f9:ce:a8:da:5e:65:49:b3:ea:3d:4f:16:c3:05:57:84:ff:
ad:cc:45:65:27:1e:e7:9b:01:96:bd:4b:8a:fa:ba:fa:c7:8d:
89:4e:60:d9:a0:26:60:8b:41:97:86:d7:94:5b:aa:7a:1a:c3:
b1:7b:2d:a5:cf:93:6b:32:ea:0d:88:10:ad:b4:c0:90:3a:12:
7f:f7:a0:2a:e8:f3:1a:ec:ee:1a:0c:16:2c:91:a1:84:c0:c9:
02:3f:1f:0d:98:ed:63:10:42:43:3e:35:e9:57:e7:cd:a6:71:
2c:38:6b:0a:5c:07:13:70:a0:81:e0:5e:9b:1d:3f:25:14:c1:
8f:40:1d:66:89:62:29:cd:40:eb:e2:da:7f:6e:55:ab:31:bb:
cb:19:9c:db:eb:81:40:04:4a:fb:93:12:7c:3c:0a:59:30:df:
c4:32:bc:42:8c:67:8d:f2:5a:c4:cc:97:45:f5:a1:86:1f:bf:
5d:04:b7:d0:a5:42:be:25:e0:a0:44:8f:aa:21:34:fe:0c:94:
98:41:cb:1b:30:56:55:4e:d7:d2:f3:e9:99:91:40:8b:e4:d1:
59:96:65:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYze8LsqEfRY9K2SMQf6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0
NTYzNjIwHhcNMjYwNzI5MDEwMDMzWhcNMjYwNzMwMDEwMDMzWjAzMTEwLwYDVQQD
EyhlMmZhNzA1NWY2NjQwZGQ3NGVlMWE3NDNmM2E2MDdhODFlOTY3MGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYpTnU24BZlD5xPIN5+aQL6/iSQ6
qjqKfaYF1E3So1hSj+F6XeOloZgsjcVfnT9rvNnp9GXJUwQm6kpyLDt3LV7PhTVZ
fyukw6CDBGEhxiXKrKiYodRXWpoRoE4i5HZJ9qiP97tfLlgFwMKFFp0ATTyzxTxJ
kyH3rNd4jDMJofQZdmRvZ4kPvAjWlxOt+fU/H2a6qRyIcfNW4JqwVTjymvCXsPQ6
1HmXbExcSh+r82QJSV+LAx5/nWIwyWNLVZ3GifISiGYFOF8wgzfb+onny7rIsVKc
p8get9XZ0sQ11N/I7rR2bVHojPJrNbhwaUXlTHr5QgfbTnUCQKCUfLT//wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL6cFX2ZA3XTuGnQ/OmB6gelnDXMB8GA1UdIwQY
MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt
MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5
LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJjK5rxg
/pVOq6jV8VVw4PZyR1GghPO5qMBVJBsFxUwdrBbT5PnOqNpeZUmz6j1PFsMFV4T/
rcxFZSce55sBlr1Livq6+seNiU5g2aAmYItBl4bXlFuqehrDsXstpc+TazLqDYgQ
rbTAkDoSf/egKujzGuzuGgwWLJGhhMDJAj8fDZjtYxBCQz416VfnzaZxLDhrClwH
E3CggeBemx0/JRTBj0AdZoliKc1A6+Laf25VqzG7yxmc2+uBQARK+5MSfDwKWTDf
xDK8QoxnjfJaxMyXRfWhhh+/XQS30KVCviXgoESPqiE0/gyUmEHLGzBWVU7X0vPp
mZFAi+TRWZZlPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:29 2026 by rpki-client