Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: r1Xg3g0p0cc/KsAQPM1QMM37bMx60v286tRlEuArQeM=
Subject key identifier: D8:C7:2B:6F:44:29:5B:C8:C0:F1:5D:59:15:63:10:EB:6C:5A:9B:7B
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019F8F102B57C0CCBE38C26F54044DB259F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0938
Signing time: Thu 23 Jul 2026 13:00:29 +0000
Manifest this update: Thu 23 Jul 2026 13:00:29 +0000
Manifest next update: Fri 24 Jul 2026 13:00:29 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: OgIDvD7EDbGwW3I/tEjikmuuCQUuUv1X6+3P1YDpFjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:2b:57:c0:cc:be:38:c2:6f:54:04:4d:b2:59:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Jul 23 13:00:29 2026 GMT
Not After : Jul 24 13:00:29 2026 GMT
Subject: CN=d8c72b6f44295bc8c0f15d59156310eb6c5a9b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:e3:be:f0:fd:ca:90:07:9d:d9:cf:02:02:
08:fe:3a:02:95:35:16:1f:7f:1e:ad:6d:81:a6:4c:
0f:65:be:01:a7:c3:0d:51:89:1c:93:0f:81:29:09:
0a:13:93:1d:ef:6d:88:02:33:b5:16:bb:98:18:30:
71:89:89:b0:65:4c:e1:5a:c5:57:41:c1:8d:2c:d6:
ef:63:7f:0d:6c:0c:4f:b8:98:4d:a4:65:37:1c:2b:
6e:af:dc:59:d5:80:c2:d3:17:d6:5f:6e:35:25:a8:
b1:e2:19:47:9f:26:41:9c:e9:01:23:64:01:5f:00:
58:06:3e:a6:2b:c1:86:16:c4:ba:52:c7:71:53:57:
26:5a:05:df:3f:51:73:58:ce:0f:b7:51:43:6d:d4:
98:3c:94:34:86:a9:97:b4:a2:ad:92:8e:d4:47:2f:
46:33:32:d5:5c:b1:5c:dc:78:8f:83:fc:71:28:8c:
5b:57:b5:0e:e7:4d:ea:c9:e9:26:ba:0e:f3:d8:16:
d1:83:8a:86:69:8a:9e:8e:24:e5:8c:a1:9e:2f:14:
2a:c7:41:44:59:60:19:c1:49:0d:f4:83:4b:60:f6:
48:e6:eb:83:27:09:10:98:38:ca:71:c8:1f:a4:32:
55:a4:68:af:05:ff:df:8a:30:92:dd:5c:40:e2:bb:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:2B:6F:44:29:5B:C8:C0:F1:5D:59:15:63:10:EB:6C:5A:9B:7B
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fd:f9:be:23:ee:10:ce:62:07:89:cd:e5:8f:cd:e1:23:c4:
06:3c:24:42:e0:8e:aa:21:96:84:41:87:f6:e3:08:60:7d:d5:
51:08:42:88:f9:9e:78:b2:d7:d9:46:4b:58:cf:10:c5:2a:19:
ca:2c:3e:e2:3a:e6:b1:f8:4a:5e:2b:51:76:84:ca:35:ea:60:
41:bc:6a:88:79:72:18:fd:40:ae:f5:b8:5a:5e:43:6c:16:05:
d9:13:4e:ca:50:52:8e:fa:ac:7c:1e:9f:d8:9d:cd:00:13:41:
8c:b2:a6:c4:f2:aa:95:c7:e9:fc:14:fe:b2:91:a4:6c:3c:9d:
bf:9e:36:d0:f3:db:8b:d8:77:81:d8:f0:1f:fb:76:a8:63:f3:
b4:d3:ce:18:19:fe:fa:c1:56:62:03:c0:f3:07:7b:fe:40:47:
ee:2c:84:b6:23:82:0b:69:a0:04:6b:22:19:d8:bd:c6:a1:a7:
1d:2e:5d:a3:a0:f9:09:a2:b1:23:c0:0a:1e:26:18:d3:5c:e5:
51:94:44:35:c0:02:70:c6:3c:4d:74:8f:09:03:6e:45:8a:20:
5c:98:1f:29:57:57:56:89:7a:b9:62:b9:c6:42:46:62:98:70:
0f:63:9a:f8:f2:8a:58:57:7e:de:77:4d:1e:28:1c:98:f3:2f:
c3:3a:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:04 2026 by rpki-client