Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: O1ebBhwCNJQiUB+ts3uywbMYUM3EocZQaJHGGMbvmj8=
Subject key identifier: C7:79:12:FD:80:A7:46:D2:04:28:68:91:2A:26:15:05:00:B9:EE:BA
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019E1D5993B72C3F2ADFE684FF5FD62AEA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 108D
Signing time: Tue 12 May 2026 18:01:10 +0000
Manifest this update: Tue 12 May 2026 18:01:10 +0000
Manifest next update: Wed 13 May 2026 18:01:10 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: s3XbMSPAT+Nxztd/OlpeHnT3CssyMEjCpoXpOlxbqVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:93:b7:2c:3f:2a:df:e6:84:ff:5f:d6:2a:ea:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: May 12 18:01:10 2026 GMT
Not After : May 13 18:01:10 2026 GMT
Subject: CN=c77912fd80a746d2042868912a26150500b9eeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:53:a3:b0:2d:9f:98:07:f2:20:88:06:06:
aa:9f:63:70:ad:ee:bd:0e:44:98:bf:1d:7b:06:b1:
49:a3:ce:dc:31:f5:06:0f:99:f8:b6:57:92:a0:ff:
be:12:3c:32:f7:30:a9:0a:31:a0:2c:26:dc:87:d1:
aa:ef:f7:c6:38:f7:b5:91:44:e2:e0:ad:48:d2:5c:
21:b0:b6:86:fe:8b:73:a4:76:c7:d7:2f:c0:e0:57:
92:6e:73:8b:e8:9f:fd:6a:0f:65:45:7e:82:54:87:
70:9c:9c:80:05:31:17:30:ba:d3:d5:10:09:74:54:
29:3a:b7:06:b1:f3:a3:26:1f:fd:54:d7:b3:fd:6c:
41:e9:64:7f:6f:ac:79:8b:b4:d5:2c:aa:a0:17:6d:
a8:a1:01:b9:c0:3c:e4:ef:0c:e4:7a:1b:f3:10:26:
29:b2:06:3e:25:84:21:24:ac:a3:e6:c5:18:dc:b1:
27:5a:27:67:98:8c:8a:69:7f:ab:6b:45:bc:65:c6:
12:72:e6:80:fd:ca:a0:01:80:d9:dd:42:78:dc:38:
35:aa:9f:32:40:e7:2e:e9:f3:55:b7:ac:cc:62:11:
87:82:54:4d:7c:a2:94:dc:7d:97:41:13:36:d4:f5:
b9:db:b2:3a:c9:70:ee:09:11:2c:95:07:9f:c6:d0:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:12:FD:80:A7:46:D2:04:28:68:91:2A:26:15:05:00:B9:EE:BA
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:36:70:49:1c:4e:0b:95:63:03:35:e7:5d:0c:01:03:d9:be:
f5:06:44:05:f4:f9:69:ec:cd:8e:ed:51:57:fe:78:c6:e6:da:
37:14:47:bc:cc:2b:41:a3:4b:62:96:eb:95:fd:cf:28:5b:e6:
fe:5c:5c:02:4e:b0:4d:ba:78:1b:34:24:57:8c:1d:0d:9c:88:
38:38:8d:fc:ce:b0:cb:da:19:bb:93:49:e6:cc:b4:c3:1c:72:
c6:50:2e:c7:f6:c8:ca:b5:ea:46:53:1e:f4:f6:86:50:74:56:
5a:d3:06:11:12:6b:ac:c9:5b:0e:c1:33:5a:9c:43:7c:25:85:
cb:0a:6b:b0:c0:e6:7e:8c:42:a4:d3:4e:9f:f5:34:a8:7b:c3:
e4:5a:d5:9b:21:89:0b:28:ba:83:29:37:fd:24:44:3a:c7:40:
8e:12:2f:d0:61:e6:22:16:e1:8a:bb:05:87:fc:d4:7d:f0:ef:
15:a0:79:80:ed:af:b7:92:ba:dc:0e:04:77:02:44:1e:bc:fb:
a0:9f:e1:66:c1:5b:a8:68:42:da:49:75:69:26:1b:56:17:e3:
9c:7a:65:73:f9:5e:f5:98:f8:db:0f:fd:ce:59:26:2e:07:08:
f9:80:d3:b4:ac:09:af:71:59:7d:e2:ad:0c:62:d6:88:83:21:
93:62:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:10 2026 by rpki-client