Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: MEiAgJc0j3nU1GJo1EWooyyj/A3WfN8I4i76HDC5Y1g=
Subject key identifier: E3:DB:AA:E4:63:22:ED:D2:B6:9F:EF:53:E5:4D:E7:57:55:36:0C:BF
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 019D2772C83D34CE484F8A41C84EBD78F590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 0B40
Signing time: Thu 26 Mar 2026 00:02:06 +0000
Manifest this update: Thu 26 Mar 2026 00:02:06 +0000
Manifest next update: Fri 27 Mar 2026 00:02:06 +0000
Files and hashes: 1: 2v4YgEEU5PZAEx9kaov0Dt0r6ZE.roa (hash: yvRtNPx1WUhuCSJ0MLLVNvVm/bVKPnCTaAl6EEupAH8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: emAB7V70Rut6ggFa2jX45sc0sOlGoPMsgQUrGsYRoDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c8:3d:34:ce:48:4f:8a:41:c8:4e:bd:78:f5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Mar 26 00:02:06 2026 GMT
Not After : Mar 27 00:02:06 2026 GMT
Subject: CN=e3dbaae46322edd2b69fef53e54de75755360cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:81:cf:cb:80:7d:18:77:92:a6:aa:05:fb:
ad:90:79:ae:d9:b9:15:a9:86:f2:09:28:0f:c7:8c:
82:16:9a:b0:1a:29:5c:43:7f:5b:1b:c6:29:46:c7:
5a:e1:9c:a4:25:f0:3c:fb:c2:1f:79:6e:92:c0:ae:
c0:67:3b:f1:49:d8:1d:3e:11:8f:46:7e:ba:4f:82:
49:f2:a8:ba:58:23:3a:7e:92:3a:5e:33:d0:ea:0f:
71:f6:28:25:9a:35:9b:7e:ae:4f:9c:19:47:7b:ef:
24:96:92:d9:50:ba:f4:7a:db:17:85:5d:35:68:81:
46:de:58:ef:c7:8f:33:a1:d6:dc:ed:cc:f2:53:4c:
84:82:e8:99:61:60:af:cb:88:ae:c5:73:17:8c:79:
f7:2e:11:f0:9d:2c:f9:2a:35:08:3a:ca:10:12:d5:
da:ba:4a:b7:62:ad:07:ce:1f:94:b4:d4:40:99:e7:
b3:e5:26:25:06:a0:c0:8d:1d:df:5f:f2:7d:93:72:
4c:a4:fe:9a:34:d0:c9:b2:d8:c9:08:e9:6c:b8:0b:
30:f0:bf:91:5c:bd:90:3d:a9:06:78:71:66:77:09:
4a:fa:6b:9c:c9:e7:d8:1d:2d:1f:3f:85:0d:15:03:
14:e7:3f:6b:82:e6:ed:c5:f3:79:7a:53:a9:ae:3b:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DB:AA:E4:63:22:ED:D2:B6:9F:EF:53:E5:4D:E7:57:55:36:0C:BF
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:1a:05:4d:e4:7e:ba:03:59:57:4d:0d:0e:b7:a1:da:72:
65:85:43:bf:43:16:ab:8f:74:69:11:69:8f:53:99:b3:42:2d:
af:7d:aa:29:f9:6b:1f:c4:ec:be:9d:32:32:88:86:fa:5f:35:
3e:40:24:27:e7:0f:c3:f7:c6:a6:3a:ad:33:d1:05:ed:a3:40:
64:4a:2b:71:83:78:79:5a:c2:e2:9b:3b:4d:cc:2a:74:2d:8e:
0a:4c:c9:91:7f:ca:96:91:b9:91:6c:c9:d8:00:50:f4:6a:e3:
7e:08:bb:ec:49:af:a7:3f:e3:4d:ea:7a:cc:52:77:0c:e2:8b:
1f:04:bf:85:b9:92:e7:09:a6:95:6a:b6:ec:6a:46:e5:3a:e1:
28:f8:07:2f:8d:b8:7a:46:af:e6:b5:d2:24:ac:cf:c3:e9:34:
b0:cc:68:31:37:e0:d8:16:ae:b2:24:19:28:6e:ff:79:83:16:
19:ed:31:06:9e:06:1f:8b:7b:09:86:38:e5:39:a4:b5:e6:55:
fa:e1:85:1e:ec:66:31:2d:b5:2d:e1:6f:ba:ed:5a:c1:dd:0f:
2f:28:06:a1:47:ee:15:e7:b5:52:90:7c:f2:ca:a8:73:f4:59:
f4:f0:15:1f:de:9c:12:5e:78:d8:6a:fa:6a:d0:8c:b5:85:ee:
80:10:0b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncsg9NM5IT4pByE69ePWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjFkMGYyYzNkMjFlNTRjNGQxODEyNzYwNDQzNWE5MGYy
NGRiNTEwHhcNMjYwMzI2MDAwMjA2WhcNMjYwMzI3MDAwMjA2WjAzMTEwLwYDVQQD
EyhlM2RiYWFlNDYzMjJlZGQyYjY5ZmVmNTNlNTRkZTc1NzU1MzYwY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5aBz8uAfRh3kqaqBfutkHmu2bkV
qYbyCSgPx4yCFpqwGilcQ39bG8YpRsda4ZykJfA8+8IfeW6SwK7AZzvxSdgdPhGP
Rn66T4JJ8qi6WCM6fpI6XjPQ6g9x9iglmjWbfq5PnBlHe+8klpLZULr0etsXhV01
aIFG3ljvx48zodbc7czyU0yEguiZYWCvy4iuxXMXjHn3LhHwnSz5KjUIOsoQEtXa
ukq3Yq0Hzh+UtNRAmeez5SYlBqDAjR3fX/J9k3JMpP6aNNDJstjJCOlsuAsw8L+R
XL2QPakGeHFmdwlK+mucyefYHS0fP4UNFQMU5z9rgubtxfN5elOprjsxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPbquRjIu3Stp/vU+VN51dVNgy/MB8GA1UdIwQY
MBaAFAux0PLD0h5UxNGBJ2BENakPJNtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQt
Nzk5ZjdmNDU2MTYwLzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lOGI5NWQtYzRmOS00NjJlLTgyNzQtNzk5ZjdmNDU2MTYw
LzEvQzdIUThzUFNIbFRFMFlFbllFUTFxUThrMjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcisaBU3k
froDWVdNDQ63odpyZYVDv0MWq490aRFpj1OZs0Itr32qKflrH8Tsvp0yMoiG+l81
PkAkJ+cPw/fGpjqtM9EF7aNAZEorcYN4eVrC4ps7TcwqdC2OCkzJkX/KlpG5kWzJ
2ABQ9Grjfgi77Emvpz/jTep6zFJ3DOKLHwS/hbmS5wmmlWq27GpG5TrhKPgHL424
ekav5rXSJKzPw+k0sMxoMTfg2BausiQZKG7/eYMWGe0xBp4GH4t7CYY45TmkteZV
+uGFHuxmMS21LeFvuu1awd0PLygGoUfuFee1UpB88sqoc/RZ9PAVH96cEl542Gr6
atCMtYXugBALeg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:56:22 2026 by rpki-client