Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: bhM3w8jOR/y58Y0OSw6CgzRmBRz5YhBtVa09Zwq/3IA=
Subject key identifier: 4F:F8:30:6B:90:09:86:D4:2D:DD:F0:55:0B:36:DB:46:B8:49:9A:98
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 01A0CE91353AE045DC774A1622C124ECF656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0F40
Signing time: Wed 23 Sep 2026 14:00:17 +0000
Manifest this update: Wed 23 Sep 2026 14:00:17 +0000
Manifest next update: Thu 24 Sep 2026 14:00:17 +0000
Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: m3RRC2B/mxnUbRUjmmlKTvVAoaXSd6Vae8tmm7H5ku4=)
4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:35:3a:e0:45:dc:77:4a:16:22:c1:24:ec:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Sep 23 14:00:17 2026 GMT
Not After : Sep 24 14:00:17 2026 GMT
Subject: CN=4ff8306b900986d42dddf0550b36db46b8499a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:c5:cd:26:ba:b7:8d:27:3c:0a:11:44:bf:
d2:7b:6e:78:87:15:e6:0e:b8:24:30:13:d8:75:60:
8e:01:5e:49:4f:d1:07:fb:e9:7c:80:59:7e:47:d3:
e1:1a:f2:4d:5e:d7:46:64:4b:3e:96:e6:c2:49:a2:
46:e2:b2:c8:01:59:a2:f8:d0:61:03:c6:58:cb:0e:
af:50:43:11:d0:26:53:42:a3:82:55:2d:78:e7:df:
93:8f:66:cf:83:78:f6:31:86:5b:61:f0:d7:20:dc:
39:73:40:05:87:37:c5:4b:f7:5c:c5:15:da:87:98:
b9:23:86:d4:8a:53:9f:9b:b9:ec:5a:a4:2a:54:8f:
b4:60:a2:1d:5e:d6:c5:78:71:87:df:b2:6b:85:69:
6a:2b:c2:4c:a5:4b:ab:82:c8:de:d0:c6:d9:5e:b4:
c8:d2:1e:cd:45:89:b5:16:4e:cb:54:94:cd:7d:6e:
88:04:83:50:0e:a1:f4:7e:b2:e7:6d:fd:f2:e1:1f:
8e:29:e8:28:97:03:15:b8:5f:3d:78:16:10:99:03:
9d:90:03:14:d7:33:0d:20:f5:00:7a:d8:65:c9:ec:
7e:b3:2d:98:c0:f6:9d:8b:3c:e9:4e:ca:57:1e:a3:
7d:89:18:87:83:d2:24:21:f3:b7:ff:07:c3:b0:48:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:30:6B:90:09:86:D4:2D:DD:F0:55:0B:36:DB:46:B8:49:9A:98
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b1:e0:93:b1:65:08:8a:4d:47:36:7f:fe:e1:55:13:5d:67:
6b:75:c8:f4:2c:80:9d:4d:b6:89:24:ad:fa:0b:76:c5:9d:4d:
ea:7f:e8:a5:88:80:60:db:62:e2:af:74:c3:80:b6:c5:e2:6f:
21:85:4b:a1:0f:a7:39:82:bf:f8:49:6f:23:dd:0c:1e:05:0c:
fe:cb:85:17:06:6c:ff:0c:13:02:86:a0:b1:89:37:5b:76:97:
8b:8f:e4:cb:54:a4:64:59:d4:3c:51:7e:73:57:9a:83:03:97:
c6:d6:99:0f:bb:43:bb:b8:41:64:c6:a3:b7:37:e4:f5:63:39:
f3:0f:e3:a7:34:08:f9:1e:da:fe:5a:74:1a:07:1b:d4:82:97:
1c:b6:93:ef:68:38:ea:f4:3a:3f:69:7c:81:79:0c:8e:49:f2:
5e:9f:ca:1c:42:c0:90:e9:9f:0e:a5:aa:36:10:6f:3b:97:ca:
38:1a:ec:82:3d:02:8e:26:b9:a2:83:cb:b6:69:b3:c9:a5:ab:
3a:12:9a:98:e1:07:f9:e5:9c:06:96:f9:b0:86:9c:b6:ef:3d:
73:82:cd:e2:7e:21:59:4b:bc:db:f6:f4:39:55:43:69:ad:c5:
52:dc:05:12:3b:76:f3:3f:a0:02:c6:ac:0f:7b:6b:8c:40:48:
2f:00:d6:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkTU64EXcd0oWIsEk7PZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0
NmY1NWMwHhcNMjYwOTIzMTQwMDE3WhcNMjYwOTI0MTQwMDE3WjAzMTEwLwYDVQQD
Eyg0ZmY4MzA2YjkwMDk4NmQ0MmRkZGYwNTUwYjM2ZGI0NmI4NDk5YTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9PFzSa6t40nPAoRRL/Se254hxXm
DrgkMBPYdWCOAV5JT9EH++l8gFl+R9PhGvJNXtdGZEs+lubCSaJG4rLIAVmi+NBh
A8ZYyw6vUEMR0CZTQqOCVS1459+Tj2bPg3j2MYZbYfDXINw5c0AFhzfFS/dcxRXa
h5i5I4bUilOfm7nsWqQqVI+0YKIdXtbFeHGH37JrhWlqK8JMpUurgsje0MbZXrTI
0h7NRYm1Fk7LVJTNfW6IBINQDqH0frLnbf3y4R+OKegolwMVuF89eBYQmQOdkAMU
1zMNIPUAethlyex+sy2YwPadizzpTspXHqN9iRiHg9IkIfO3/wfDsEg0UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/4MGuQCYbULd3wVQs220a4SZqYMB8GA1UdIwQY
MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt
YWQyOGZhOTY2YjUxLzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx
LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLHgk7Fl
CIpNRzZ//uFVE11na3XI9CyAnU22iSSt+gt2xZ1N6n/opYiAYNti4q90w4C2xeJv
IYVLoQ+nOYK/+ElvI90MHgUM/suFFwZs/wwTAoagsYk3W3aXi4/ky1SkZFnUPFF+
c1eagwOXxtaZD7tDu7hBZMajtzfk9WM58w/jpzQI+R7a/lp0Ggcb1IKXHLaT72g4
6vQ6P2l8gXkMjknyXp/KHELAkOmfDqWqNhBvO5fKOBrsgj0Cjia5ooPLtmmzyaWr
OhKamOEH+eWcBpb5sIactu89c4LN4n4hWUu82/b0OVVDaa3FUtwFEjt28z+gAsas
D3trjEBILwDWcw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:44 2026 by rpki-client