Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: oDWLhLvKv+kASImTNOA/LwllrCgQn5RNRaTOQn2E+Vg=
Subject key identifier: 0C:CA:FE:72:D2:86:2F:A6:4E:DB:A0:35:C3:B9:FB:EB:84:B8:A1:A3
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 01A0E43F21F4741CA05DC43E7F78D5ED1DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 1534
Signing time: Sun 27 Sep 2026 19:02:17 +0000
Manifest this update: Sun 27 Sep 2026 19:02:17 +0000
Manifest next update: Mon 28 Sep 2026 19:02:17 +0000
Files and hashes: 1: OhJpimseggO-Y4_hoEiI1nB-3a4.roa (hash: zDlcOi1opjdDim5XNlXyOBikBSD080S2FUrAKbWMWcM=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: 0JsYygQls+BJ1N7le+jsKXG9exVsmYJtzE2zhRFA8gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3f:21:f4:74:1c:a0:5d:c4:3e:7f:78:d5:ed:1d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Sep 27 19:02:17 2026 GMT
Not After : Sep 28 19:02:17 2026 GMT
Subject: CN=0ccafe72d2862fa64edba035c3b9fbeb84b8a1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:54:42:29:38:db:77:e3:01:c3:45:93:32:
c8:83:64:54:c5:36:1e:ea:11:35:f3:1e:b6:15:ca:
db:be:fa:6f:47:72:c2:1f:92:f4:88:ad:aa:77:31:
ab:8a:ca:2b:80:8b:a7:d1:54:65:c7:6d:8b:3e:c8:
ec:54:2e:1c:a7:4e:89:5a:9b:48:4a:ca:69:b4:e7:
ed:fd:d5:61:bf:a0:83:ee:cb:b5:9c:09:2b:e0:fb:
29:cb:3b:6f:40:a7:57:e2:68:39:bc:f1:98:d2:3c:
bb:61:69:3e:9c:57:8b:5a:4c:5f:b9:6a:de:5c:c7:
c3:08:da:ed:21:8a:fc:37:c7:1a:3d:75:26:75:5c:
1b:84:d5:7c:be:30:3c:bb:7f:77:a8:06:e4:be:f4:
a9:58:e9:75:89:8f:f5:4f:74:7d:54:f1:85:f0:0d:
0b:cf:0e:49:7a:f7:0f:6e:58:2f:d9:70:ff:c7:da:
7d:a2:b2:17:34:cc:4f:62:ac:f4:c8:19:ac:ce:7c:
af:ad:9c:e3:0d:98:a1:30:75:7f:72:f0:8f:bb:aa:
92:8e:97:cf:ad:f8:a5:a3:63:56:ab:20:00:7b:e7:
1b:84:a7:9a:8f:2a:94:1d:4d:e4:5e:9a:5a:51:bd:
cd:39:7b:c1:06:39:6f:53:2f:7a:73:71:93:e8:b4:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:FE:72:D2:86:2F:A6:4E:DB:A0:35:C3:B9:FB:EB:84:B8:A1:A3
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:ae:12:b7:e5:c1:7d:46:c9:16:a8:98:05:77:77:ab:73:
63:07:4f:60:05:3c:cf:d2:16:b4:34:06:a3:68:81:52:80:dd:
0c:1c:3e:8c:17:6f:1f:47:59:9f:60:b9:f5:11:5c:c0:0f:c4:
c9:31:01:6d:db:3c:5d:af:1a:83:9a:75:16:e7:05:03:f8:f4:
d3:f3:17:68:4f:f7:3b:27:ab:55:08:28:61:15:09:96:e0:e4:
aa:ea:aa:ae:43:8d:66:1c:d0:30:c1:bd:7e:77:80:27:fa:6d:
6e:fa:b9:aa:da:42:30:48:de:5f:ad:d9:2a:12:b3:09:ac:38:
bb:97:cb:ce:b6:ef:7f:37:13:ff:2e:ad:c0:78:b0:79:5a:ad:
95:e3:53:85:86:24:ca:fa:92:3e:f0:3b:5e:46:5e:ba:ca:3b:
93:d4:88:3d:cd:bc:3f:61:ff:13:e6:66:de:61:25:ba:4c:d5:
24:bd:7f:0b:bc:4b:c8:34:08:d5:4f:a8:4e:82:23:33:9e:66:
24:6b:4f:1b:53:50:3e:3e:cb:d4:a2:53:e8:2c:10:d4:68:98:
d7:c7:ca:83:5d:2c:a1:ec:17:60:5b:82:64:8f:5e:71:9d:f5:
5e:9e:e3:02:db:d1:9a:13:41:56:32:14:cf:f4:dc:20:5b:fd:
20:d2:1b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPyH0dBygXcQ+f3jV7R3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YmQ4ZWFlMTY2OWRlYjNhM2ZhNDE4NjQ5MWUwNWNiMzJj
ZTA5MmEwHhcNMjYwOTI3MTkwMjE3WhcNMjYwOTI4MTkwMjE3WjAzMTEwLwYDVQQD
EygwY2NhZmU3MmQyODYyZmE2NGVkYmEwMzVjM2I5ZmJlYjg0YjhhMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf5UQik423fjAcNFkzLIg2RUxTYe
6hE18x62FcrbvvpvR3LCH5L0iK2qdzGrisorgIun0VRlx22LPsjsVC4cp06JWptI
SspptOft/dVhv6CD7su1nAkr4PspyztvQKdX4mg5vPGY0jy7YWk+nFeLWkxfuWre
XMfDCNrtIYr8N8caPXUmdVwbhNV8vjA8u393qAbkvvSpWOl1iY/1T3R9VPGF8A0L
zw5JevcPblgv2XD/x9p9orIXNMxPYqz0yBmsznyvrZzjDZihMHV/cvCPu6qSjpfP
rfilo2NWqyAAe+cbhKeajyqUHU3kXppaUb3NOXvBBjlvUy96c3GT6LS/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzK/nLShi+mTtugNcO5++uEuKGjMB8GA1UdIwQY
MBaAFLe9jq4Wad6zo/pBhkkeBcsyzgkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMGJkYmQtODAxYy00YjBiLTlmYmUt
YWUxNWQ1MDc1OTBlLzEvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMGJkYmQtODAxYy00YjBiLTlmYmUtYWUxNWQ1MDc1OTBl
LzEvdDcyT3JoWnAzck9qLWtHR1NSNEZ5ekxPQ1NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+iuErfl
wX1GyRaomAV3d6tzYwdPYAU8z9IWtDQGo2iBUoDdDBw+jBdvH0dZn2C59RFcwA/E
yTEBbds8Xa8ag5p1FucFA/j00/MXaE/3OyerVQgoYRUJluDkquqqrkONZhzQMMG9
fneAJ/ptbvq5qtpCMEjeX63ZKhKzCaw4u5fLzrbvfzcT/y6twHiweVqtleNThYYk
yvqSPvA7XkZeuso7k9SIPc28P2H/E+Zm3mElukzVJL1/C7xLyDQI1U+oToIjM55m
JGtPG1NQPj7L1KJT6CwQ1GiY18fKg10soewXYFuCZI9ecZ31Xp7jAtvRmhNBVjIU
z/TcIFv9INIbDg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:44:50 2026 by rpki-client