Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: Tk7xrkj6SCG/mo7KZ++weaCn/ask1HTM6MtM8bNOrTM=
Subject key identifier: 3B:9E:D1:E9:D8:F6:55:4A:4A:0D:8B:50:91:1C:CE:A3:24:56:F1:DB
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 019E1BD8D34CE3817C523C14F6F12FB2B0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 12CF
Signing time: Tue 12 May 2026 11:00:55 +0000
Manifest this update: Tue 12 May 2026 11:00:55 +0000
Manifest next update: Wed 13 May 2026 11:00:55 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: eoHDL4n+ppvKwZAM+zxfnOBWd1QWG01IKzubYc17Xpk=)
2: n9FzbJINgcYwHJShublPjUzZTBM.roa (hash: BpAt1xbMGdaHlLf4Q+CKPCiPeYCdr0TW6Zq6Hho4rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:d3:4c:e3:81:7c:52:3c:14:f6:f1:2f:b2:b0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: May 12 11:00:55 2026 GMT
Not After : May 13 11:00:55 2026 GMT
Subject: CN=3b9ed1e9d8f6554a4a0d8b50911ccea32456f1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:ad:a7:72:75:b8:71:0c:1b:92:b6:88:63:
f3:34:e4:4b:16:a9:8b:3f:e3:ef:4a:fc:d2:74:b4:
26:b0:83:b4:d9:f4:16:9f:8f:e4:39:f6:5d:05:12:
d0:44:32:0f:2d:5f:8e:ef:17:ed:89:05:23:c5:94:
09:fd:7c:16:59:de:82:b5:8f:63:e7:05:59:0b:8d:
37:39:c0:88:15:90:cf:1a:f3:c6:20:47:bb:16:2a:
a3:fe:16:ab:78:f5:20:c3:fc:84:fb:48:38:f8:51:
1b:45:a8:89:ed:3b:a0:d3:7d:35:bd:db:e9:d2:1f:
33:99:07:33:de:72:9b:99:74:86:5e:0e:87:cb:7e:
39:6f:dd:87:b1:cf:0c:82:e9:31:5b:0b:e7:19:06:
41:b5:d0:df:9b:8b:ed:c7:f0:19:9e:72:0a:b9:5e:
e6:b2:a6:53:2f:0c:2e:b8:04:1b:2f:0b:50:56:2a:
48:a4:6d:39:05:3b:a5:d0:c5:d5:e3:f6:34:b4:4b:
d6:a3:fd:45:65:28:ef:13:90:b0:f4:61:14:3b:36:
07:60:ae:f9:45:35:89:d8:71:eb:ce:7c:00:3e:96:
41:5d:32:18:58:0f:80:87:7a:0a:be:88:f3:05:74:
f7:c5:f0:22:b1:87:06:7a:5e:f9:47:64:eb:34:b6:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:D1:E9:D8:F6:55:4A:4A:0D:8B:50:91:1C:CE:A3:24:56:F1:DB
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fc:50:2b:59:b4:5b:3f:e4:da:44:f6:48:78:70:2c:68:8d:
71:d1:ae:b0:6d:3e:e4:55:0c:7b:e9:22:fb:eb:0d:7d:a4:82:
8c:13:b3:f4:4b:48:b1:aa:df:74:04:1e:c4:e0:5a:91:f7:5b:
8d:eb:4c:83:da:5e:5d:24:f6:f1:c0:13:54:83:f4:88:61:6a:
12:ea:f6:16:de:f1:e4:81:9e:03:50:a2:a0:fd:0a:f6:46:39:
b4:03:b1:94:9a:7f:73:42:93:fb:43:85:c0:95:b0:0f:8c:01:
19:e2:38:e2:3c:3b:f3:7c:72:5d:e5:31:af:38:8b:bf:b5:8b:
34:85:f4:f1:3e:1d:c0:e3:1b:43:6b:e3:54:9d:85:c8:9e:c0:
ba:d4:6d:4c:d9:a6:46:45:b4:f6:e4:70:44:7b:20:fd:05:fd:
f4:b7:98:39:ea:29:01:98:39:23:5c:9a:cf:5d:c1:f7:10:79:
55:5e:7a:3e:6d:d8:11:45:93:86:71:be:39:6d:1e:b5:9a:86:
e5:b7:fa:0c:65:0f:b0:72:f7:bf:b7:77:08:bf:5a:70:ea:9f:
93:7d:a0:b8:ee:cc:52:95:79:4f:4a:39:ed:19:40:e4:3c:59:
24:fa:54:b4:84:4a:08:d7:96:01:11:1f:0f:a9:0c:81:4d:b0:
cf:12:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:55 2026 by rpki-client