Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: pf53GY6tsAECoSECRlSde2nW6bYx4xNXZua58E92LkA=
Subject key identifier: C8:CD:11:09:41:76:9E:88:88:47:34:96:3E:99:E0:21:FC:E6:B2:7A
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01A0D0B6D1618AE1E73BDFFA2307529B4B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 11F3
Signing time: Thu 24 Sep 2026 00:00:37 +0000
Manifest this update: Thu 24 Sep 2026 00:00:37 +0000
Manifest next update: Fri 25 Sep 2026 00:00:37 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: 7rtLt9KsLxjAMdbSithz2YiZB0Bpzphfqi0mQzm+4oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:d1:61:8a:e1:e7:3b:df:fa:23:07:52:9b:4b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Sep 24 00:00:37 2026 GMT
Not After : Sep 25 00:00:37 2026 GMT
Subject: CN=c8cd110941769e88884734963e99e021fce6b27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:75:50:ce:f6:a0:ef:a7:e0:37:62:c9:24:
cb:15:89:66:ee:c2:0e:b0:15:b0:15:a4:83:5f:54:
d9:1f:8e:81:fe:1a:b2:e5:09:2d:8b:af:4c:ee:89:
5b:4d:b0:80:0d:1b:29:50:b7:e8:e2:3e:50:29:29:
1d:99:49:ed:09:7c:e9:a0:9b:a4:83:4b:a0:cc:2a:
74:b5:f2:8a:0b:c9:3b:75:1f:05:ae:0c:10:8e:d6:
41:52:bb:e9:08:6f:d6:1b:ea:0f:96:3a:a6:c5:cc:
f0:da:b3:4f:c9:ee:3b:88:6a:b9:d1:51:62:e7:f5:
4e:8a:1e:49:f7:a4:92:d8:af:a0:d6:b7:60:61:48:
27:85:6c:dc:82:2c:cb:9b:64:cb:18:58:ae:b2:ee:
37:5b:6a:3e:e8:5b:9c:ed:bf:50:6e:c0:9d:a1:d6:
7c:fc:ae:b9:bf:e5:bb:ff:6e:0c:a8:b7:c8:f7:1b:
ba:e1:65:5d:1b:d1:14:05:15:8c:3c:56:13:2b:fb:
3b:82:ed:9c:da:c6:55:83:69:cb:e1:b5:7a:a1:5b:
dc:29:11:3c:5d:2c:ad:0c:ef:a7:92:e0:41:83:0c:
0c:f8:b9:0d:0c:34:42:5b:f0:2b:e5:d8:1f:2a:69:
47:38:b3:ca:e8:8b:b0:0c:2f:d5:b0:14:64:6f:2b:
76:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:11:09:41:76:9E:88:88:47:34:96:3E:99:E0:21:FC:E6:B2:7A
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fa:e4:00:25:77:a6:2b:ba:2f:92:49:fa:1f:73:d3:77:35:
ad:75:b5:95:6b:9b:14:fc:2a:54:41:bd:c1:31:e4:d3:20:a6:
42:26:43:18:b7:ac:97:3d:4d:b1:32:51:c7:24:82:0b:0d:9a:
d9:91:2e:dc:13:c1:49:e0:e1:50:4d:78:fa:2f:4e:15:fa:6a:
75:05:b4:96:34:a1:c3:6f:b5:6d:a6:dd:00:a6:36:a2:d8:9c:
65:37:f3:3d:f8:9b:79:e7:ec:f4:9c:bd:c7:0f:fc:f3:2d:69:
59:27:b8:ef:06:07:7a:e7:97:df:fc:39:ef:62:e8:aa:f9:b0:
62:4d:e9:47:42:53:13:a2:02:c4:8c:98:8b:18:be:f6:4e:eb:
38:b4:df:45:39:66:a1:bd:45:fa:dc:91:2d:72:9d:b7:d4:bd:
dc:39:e1:d6:1f:bd:39:a1:27:7a:ae:04:e6:60:47:37:f4:57:
47:2a:6a:d9:bb:7a:94:fa:b5:2c:ea:5a:d9:c9:c7:e6:3b:37:
ef:d0:f5:4c:0f:e1:d5:5d:1f:69:f6:e9:d8:10:dd:0a:78:cd:
92:dd:17:7e:81:7b:2c:b0:14:3d:98:4b:61:11:e0:30:4e:de:
db:fe:d2:36:51:c3:a2:97:72:9a:23:16:d9:54:75:0d:70:20:
c3:15:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:53:01 2026 by rpki-client