Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: AcVPDQZgqSiUVqttcQkv9FB1uXNF9sgTRNjq9qkEf9Y=
Subject key identifier: DB:08:09:A2:D6:5C:B9:27:6D:66:87:97:3B:1F:3D:4C:8E:2D:71:BE
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 01A103C92A839A6771D3EC87B9880413173B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 09F9
Signing time: Sat 03 Oct 2026 22:01:17 +0000
Manifest this update: Sat 03 Oct 2026 22:01:17 +0000
Manifest next update: Sun 04 Oct 2026 22:01:17 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: yQWdyHSeKKKhaLK5KxrEINsJsFUR8782fomveOjBIko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:2a:83:9a:67:71:d3:ec:87:b9:88:04:13:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Oct 3 22:01:17 2026 GMT
Not After : Oct 4 22:01:17 2026 GMT
Subject: CN=db0809a2d65cb9276d6687973b1f3d4c8e2d71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:ab:93:c3:d8:f9:bc:a6:13:63:a6:34:bd:
55:d2:9d:97:be:f9:0d:25:27:8e:2a:b0:77:8c:fb:
98:e0:fc:5e:b7:18:f6:57:e1:0d:9e:20:86:b0:90:
5b:e6:12:28:a1:07:96:3f:ff:99:11:00:73:3e:df:
44:8c:7a:bf:e9:4e:d2:3c:6f:9a:6b:c8:3d:c0:3e:
b5:53:9c:a2:d3:2a:f5:5e:62:f5:1a:5f:e9:44:19:
20:a0:3e:df:a2:26:36:83:1d:c0:4f:57:d2:6d:35:
25:fc:9f:6a:e6:1c:71:f5:3c:21:b7:44:76:1b:37:
a5:3e:97:13:86:82:f5:4d:ff:2f:79:e7:c0:f2:5a:
65:b8:31:cb:c3:1c:c4:30:42:b4:f5:26:27:f2:d3:
41:74:93:40:60:c4:02:10:38:c6:ac:89:c5:91:17:
b9:98:1e:30:6e:89:12:48:b8:1a:41:d0:4a:54:a8:
68:66:62:84:b9:3f:5c:aa:10:d2:75:f5:d4:bf:05:
3d:db:4f:fe:5b:f7:76:2d:8c:d2:1c:e1:ed:ed:ea:
77:a6:13:34:20:cd:28:bc:e2:88:09:1b:a8:2d:88:
83:cd:78:47:81:fc:02:c1:cc:82:6c:9a:80:ed:1d:
af:9e:1f:ea:f7:40:53:6e:5a:e2:a0:83:75:eb:e8:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:09:A2:D6:5C:B9:27:6D:66:87:97:3B:1F:3D:4C:8E:2D:71:BE
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9b:88:31:a1:0e:3d:c0:3c:e5:06:da:34:56:74:b5:a9:45:
44:56:48:6e:65:d8:b2:ae:15:8c:c0:1a:b5:d3:51:f4:41:c6:
59:92:b6:e3:0f:1e:82:81:cd:aa:cc:6a:5e:6f:2f:1f:0b:16:
49:3d:b3:e5:36:96:de:17:8d:47:4b:f5:7c:60:89:ba:09:1b:
de:67:95:a1:6b:20:5e:ae:3f:c6:8b:4a:47:64:0a:16:96:c2:
5e:cb:e8:b6:4c:a8:06:12:4a:65:e6:09:23:b3:29:ac:e2:6d:
6c:9e:c9:39:05:41:aa:de:76:a0:45:e9:c0:e4:ae:dd:61:28:
6c:19:dc:cb:fd:0c:77:61:6c:3d:93:e2:df:e8:db:e0:c2:dc:
99:0b:f6:40:c7:82:d5:98:8d:af:98:f3:3c:5a:7f:cf:2a:cf:
81:7b:21:73:f4:f5:08:5e:66:53:33:fc:3c:cc:e4:df:fa:d0:
9c:18:32:63:7f:5c:fe:cf:21:d4:2b:01:96:13:f7:9f:c0:db:
b7:11:28:71:98:d5:02:77:f2:08:5d:79:00:92:6a:dd:36:6f:
90:03:fc:c9:11:bd:c1:dc:13:35:80:8b:cf:c8:1d:4c:c6:fa:
e9:88:3e:b0:31:c2:e0:c4:14:4e:90:0a:7a:72:84:4a:10:11:
3a:4f:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:34 2026 by rpki-client