Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: II8FfZdFWiEYwNmoFX3Hkddw5E3fzI/pD064eiso5AU=
Subject key identifier: 2F:24:CF:AC:2E:93:F4:0F:9D:18:A4:72:A6:0B:6D:8F:E9:4D:59:CA
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019F9022FCAF2022AAE409FDB503CB920352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 114D
Signing time: Thu 23 Jul 2026 18:00:39 +0000
Manifest this update: Thu 23 Jul 2026 18:00:39 +0000
Manifest next update: Fri 24 Jul 2026 18:00:39 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: 6CbPxmONYqS0jvM1ikLCumFnJX+CsZZZBLink/1H5iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:fc:af:20:22:aa:e4:09:fd:b5:03:cb:92:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jul 23 18:00:39 2026 GMT
Not After : Jul 24 18:00:39 2026 GMT
Subject: CN=2f24cfac2e93f40f9d18a472a60b6d8fe94d59ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:1c:74:e3:32:3f:70:b7:68:4c:61:c7:64:
fd:36:34:3c:06:16:83:cb:fe:27:31:de:4b:78:f2:
43:b9:6e:cb:63:4b:d7:a5:b9:89:67:0f:5a:6c:68:
a7:65:25:eb:a5:80:8d:34:81:b6:c9:19:d6:f6:2d:
aa:bc:c9:4c:87:e7:88:02:fe:83:5e:8c:f2:07:b8:
05:51:99:a5:f8:7f:2c:1d:af:2d:ef:dc:bd:cf:71:
5f:8d:e9:d7:6e:6e:c6:38:ef:2b:4e:b6:07:d7:35:
63:2a:ea:0d:6d:5f:9e:47:e5:5d:9f:8c:e1:96:5a:
b4:27:58:c9:2a:c9:ba:ac:7d:7c:71:0c:57:64:75:
cb:e8:83:a2:cd:a5:09:79:a8:94:7a:f9:1c:cb:b6:
30:26:52:28:b4:26:d2:25:7d:7c:3e:7b:af:28:00:
cb:39:4c:64:96:e0:6e:70:66:dc:b4:67:aa:b0:b2:
fa:10:94:3f:49:af:e8:4a:71:69:03:db:fd:63:f9:
17:fa:b2:33:42:1c:a7:30:12:0b:1f:99:69:dd:35:
95:7d:d1:a8:03:f6:f3:8a:bf:7e:51:f6:26:fb:d8:
e5:0f:36:fa:22:0d:d0:7b:21:f9:12:ed:23:99:2b:
1f:74:3c:50:54:11:c4:0e:c4:14:70:36:ab:d0:53:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:24:CF:AC:2E:93:F4:0F:9D:18:A4:72:A6:0B:6D:8F:E9:4D:59:CA
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b9:4c:e1:c9:ef:e3:76:ab:af:f0:cc:a6:ba:6e:92:4b:f2:
71:d4:c3:70:3a:4f:7d:3c:e5:e5:08:73:37:8f:d6:40:67:7c:
4f:6b:14:46:1d:95:99:62:05:19:db:5c:70:5d:96:35:69:73:
0b:a5:85:42:2c:cc:1c:40:b0:0c:88:fc:a4:bb:d8:a0:f8:5d:
37:81:24:61:1f:b4:90:41:7c:2a:1e:90:06:55:3f:56:d5:bd:
78:7d:ca:8d:73:93:d3:58:4a:76:d8:04:a8:f2:11:59:cc:d1:
d0:0b:24:3a:86:50:13:99:7e:9c:c2:cc:66:71:90:a9:e6:ce:
51:f7:ff:65:22:77:91:27:5a:73:d9:7f:25:b0:f9:f4:2f:6e:
aa:a0:b3:68:3d:db:4f:d9:b9:fe:71:8d:3a:88:e9:09:0f:18:
a1:e9:3f:eb:03:2a:69:b0:be:c5:15:80:f5:e9:73:a1:0b:a8:
52:ff:2e:69:f1:d4:c5:ba:c2:75:c1:a8:47:5b:b5:ec:9f:c2:
1e:6c:1a:1d:bc:5c:f5:81:86:c0:f9:63:2e:4e:37:bc:87:e9:
44:3b:08:f0:fd:16:bd:4d:ea:62:fb:ac:b9:70:bd:ef:32:84:
1e:21:03:69:37:a8:c7:39:d4:ea:79:37:ee:49:48:45:0e:26:
9b:a5:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:50 2026 by rpki-client