Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
File: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft (raw, json)
Hash identifier: g8SfscWLfXgbHuiOAbmLoWOdhDSpaq4GS4YNDnEc7sY=
Subject key identifier: 47:B9:26:9F:9A:E9:0C:8B:40:7D:A2:69:9D:24:F5:A1:EE:45:42:27
Authority key identifier: EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
Certificate issuer: /CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Certificate serial: 01A0D200EA28E4D292E9652F007AA4534A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
Manifest number: 0284
Signing time: Thu 24 Sep 2026 06:01:10 +0000
Manifest this update: Thu 24 Sep 2026 06:01:10 +0000
Manifest next update: Fri 25 Sep 2026 06:01:10 +0000
Files and hashes: 1: 2gPdkQWW9jUCbizX1SsNX62y_98.roa (hash: VSRNfwKyTAYD9LB8Wv+fsBtowZBw7KWBvIp7E5dQ+Cg=)
2: 7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl (hash: WUxRvFbCm8RY+bg0m57h0qCKLGvIXxRD0JF11bdVRpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:ea:28:e4:d2:92:e9:65:2f:00:7a:a4:53:4a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece15063cb0b3e78888cb4d0f22a04a193dd6706
Validity
Not Before: Sep 24 06:01:10 2026 GMT
Not After : Sep 25 06:01:10 2026 GMT
Subject: CN=47b9269f9ae90c8b407da2699d24f5a1ee454227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:54:ba:76:48:99:f9:21:cd:43:c0:04:c3:
64:14:10:a0:d3:10:9f:e7:7d:3a:88:a9:88:df:81:
55:07:b7:8f:40:29:7e:5c:f6:f4:86:c0:54:07:80:
85:80:d4:6b:87:dd:ec:63:49:bc:81:86:81:ee:3c:
5a:ef:d2:bf:f7:83:d8:cd:d0:f3:09:c1:2c:0d:fc:
8b:07:44:08:05:33:6f:9c:b3:94:fb:9f:92:a7:90:
cf:43:10:fe:ba:a3:1a:58:f7:2b:12:a7:e2:c8:0c:
82:21:04:2c:25:74:3a:73:05:5c:b7:ee:da:4e:39:
83:57:b8:06:a2:f6:1a:77:5f:ba:fe:80:31:2b:c4:
6a:1f:61:ef:11:56:a5:f8:e8:e6:df:4b:bc:c4:c2:
c0:43:62:5c:fb:a2:7b:29:5b:7c:e1:37:bc:95:4a:
8c:78:f5:38:a7:0f:08:75:14:b9:a9:8e:4d:25:0d:
16:8a:2d:16:2b:2b:fc:13:91:05:d3:4e:ab:3f:7c:
2b:48:eb:4e:97:b3:d5:6f:fa:53:25:74:2a:87:21:
93:d2:c3:ad:2a:b0:44:fe:01:f4:e8:52:db:e4:68:
59:d1:3c:0a:b7:2d:25:b3:66:0f:ea:75:2b:fc:cd:
0d:25:1e:02:20:ed:c0:a2:44:0a:66:ac:28:87:1f:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:26:9F:9A:E9:0C:8B:40:7D:A2:69:9D:24:F5:A1:EE:45:42:27
X509v3 Authority Key Identifier:
keyid:EC:E1:50:63:CB:0B:3E:78:88:8C:B4:D0:F2:2A:04:A1:93:DD:67:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OFQY8sLPniIjLTQ8ioEoZPdZwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/544bc7-f204-4a40-a30d-805efcd1149c/1/7OFQY8sLPniIjLTQ8ioEoZPdZwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:93:89:e9:3c:85:f3:75:08:18:02:e9:26:b4:2b:0e:3b:0c:
ed:30:48:25:b7:be:42:5f:7e:8c:bd:6a:76:49:e0:17:c7:7c:
5d:37:7f:f5:b5:e3:f8:52:58:25:de:c3:73:43:17:42:6c:75:
8d:55:29:e4:a7:fe:fb:2d:24:90:b0:5b:71:ad:4e:78:21:dd:
58:16:9e:44:93:f6:d0:1a:fe:75:7e:ca:b4:cd:15:0f:ca:6a:
21:94:36:c3:06:7e:4d:de:e8:99:de:97:40:85:f4:e2:8d:5a:
8e:f6:cd:f0:d0:09:cc:91:0a:1e:7a:e5:2c:2e:2f:a3:b1:31:
22:08:10:fc:3d:22:55:ce:42:55:67:a8:e4:4a:a0:76:0b:14:
e0:47:2e:5a:be:9c:b6:b1:ac:c0:a0:c6:98:33:b4:5b:48:c2:
46:1c:36:32:a0:dc:d4:11:b5:64:86:4c:17:61:e2:21:e1:42:
76:2e:d4:4e:1c:7e:32:8d:d9:f1:c2:e9:2b:b0:07:63:2d:66:
47:f1:e8:09:1d:cb:a7:bd:0c:47:d6:cf:40:6f:70:bb:37:88:
55:48:be:ad:9e:4c:ce:fc:2c:cf:82:77:87:27:67:e5:47:f4:
16:2c:fb:93:da:12:55:ab:b6:40:d8:8f:aa:31:24:ab:36:52:
f5:8f:b8:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAOoo5NKS6WUvAHqkU0pmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZTE1MDYzY2IwYjNlNzg4ODhjYjRkMGYyMmEwNGExOTNk
ZDY3MDYwHhcNMjYwOTI0MDYwMTEwWhcNMjYwOTI1MDYwMTEwWjAzMTEwLwYDVQQD
Eyg0N2I5MjY5ZjlhZTkwYzhiNDA3ZGEyNjk5ZDI0ZjVhMWVlNDU0MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMpUunZImfkhzUPABMNkFBCg0xCf
5306iKmI34FVB7ePQCl+XPb0hsBUB4CFgNRrh93sY0m8gYaB7jxa79K/94PYzdDz
CcEsDfyLB0QIBTNvnLOU+5+Sp5DPQxD+uqMaWPcrEqfiyAyCIQQsJXQ6cwVct+7a
TjmDV7gGovYad1+6/oAxK8RqH2HvEVal+Ojm30u8xMLAQ2Jc+6J7KVt84Te8lUqM
ePU4pw8IdRS5qY5NJQ0Wii0WKyv8E5EF006rP3wrSOtOl7PVb/pTJXQqhyGT0sOt
KrBE/gH06FLb5GhZ0TwKty0ls2YP6nUr/M0NJR4CIO3AokQKZqwohx/ZTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe5Jp+a6QyLQH2iaZ0k9aHuRUInMB8GA1UdIwQY
MBaAFOzhUGPLCz54iIy00PIqBKGT3WcGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NDRiYzctZjIwNC00YTQwLWEzMGQt
ODA1ZWZjZDExNDljLzEvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NDRiYzctZjIwNC00YTQwLWEzMGQtODA1ZWZjZDExNDlj
LzEvN09GUVk4c0xQbmlJakxUUThpb0VvWlBkWndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZOJ6TyF
83UIGALpJrQrDjsM7TBIJbe+Ql9+jL1qdkngF8d8XTd/9bXj+FJYJd7Dc0MXQmx1
jVUp5Kf++y0kkLBbca1OeCHdWBaeRJP20Br+dX7KtM0VD8pqIZQ2wwZ+Td7omd6X
QIX04o1ajvbN8NAJzJEKHnrlLC4vo7ExIggQ/D0iVc5CVWeo5EqgdgsU4EcuWr6c
trGswKDGmDO0W0jCRhw2MqDc1BG1ZIZMF2HiIeFCdi7UThx+Mo3Z8cLpK7AHYy1m
R/HoCR3Lp70MR9bPQG9wuzeIVUi+rZ5Mzvwsz4J3hydn5Uf0Fiz7k9oSVau2QNiP
qjEkqzZS9Y+49A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:49:46 2026 by rpki-client