Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: n5cN+uhBJB1PFkNUKLR1IJQ6lmpm22f4xfhzQiRQKDs=
Subject key identifier: 1A:30:2A:44:65:D6:00:0F:16:A7:31:18:8B:9F:C4:26:AC:92:0E:2A
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 019E1EA37B458D51C255CF150F9E179B8020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 0BC0
Signing time: Wed 13 May 2026 00:01:30 +0000
Manifest this update: Wed 13 May 2026 00:01:30 +0000
Manifest next update: Thu 14 May 2026 00:01:30 +0000
Files and hashes: 1: 2v4YgEEU5PZAEx9kaov0Dt0r6ZE.roa (hash: yvRtNPx1WUhuCSJ0MLLVNvVm/bVKPnCTaAl6EEupAH8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: WJ8g9M9eUygT1yreIeWKb5fID520f4PCwZeelUFCQlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:7b:45:8d:51:c2:55:cf:15:0f:9e:17:9b:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: May 13 00:01:30 2026 GMT
Not After : May 14 00:01:30 2026 GMT
Subject: CN=1a302a4465d6000f16a731188b9fc426ac920e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:9e:35:cf:24:e9:f1:c5:f2:9e:26:3d:10:
7d:70:48:6d:a0:a3:03:d6:33:f8:84:bc:f9:a1:fe:
ea:f9:38:7e:92:7a:22:60:b5:d3:5c:85:a1:4c:b7:
c4:16:0b:9b:0c:3d:60:d8:94:c9:bc:c1:9c:a3:d3:
1d:a3:7e:7a:d6:50:5c:69:99:bf:e5:a3:95:3a:19:
26:15:b1:d3:41:68:2d:6a:e2:04:4a:3d:ef:cf:c4:
c5:c8:5d:18:5d:b2:48:37:76:72:77:fa:14:2f:db:
36:db:6b:65:09:d8:17:24:f4:f6:10:9b:7c:cb:d9:
bc:42:b3:f4:9f:ba:cc:7e:8d:5b:2d:b2:f2:59:50:
50:1e:9f:3e:54:3b:31:c3:df:24:55:e6:7f:e6:e6:
6b:1d:31:06:60:51:72:e8:00:2c:2e:b3:84:de:9f:
67:ab:85:ac:80:a2:f2:5f:c0:a6:7e:ed:5c:27:16:
e4:6f:64:85:4b:af:f6:95:eb:1e:4a:77:b8:ea:b4:
e4:ee:4e:dc:17:1a:1c:d4:e0:00:8d:20:26:41:12:
ed:5b:8c:9c:10:b9:bb:c4:2e:0a:6d:85:af:03:57:
54:7b:8a:62:f5:b8:3f:10:56:50:91:51:29:33:81:
73:e9:6c:b5:43:94:5d:4b:a1:73:f0:02:71:1a:fb:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:2A:44:65:D6:00:0F:16:A7:31:18:8B:9F:C4:26:AC:92:0E:2A
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:11:20:02:40:70:7e:6d:14:cb:96:df:53:6e:c8:24:43:af:
b1:f0:f7:45:cd:65:f4:ad:ef:5e:4a:c6:11:93:bf:00:93:24:
57:46:aa:85:d1:15:29:c4:91:81:42:88:f1:3b:be:74:03:c4:
1a:6c:8a:6f:4a:b2:dd:0b:90:72:30:df:57:47:3b:9d:5e:f3:
c8:6b:67:51:e7:5e:6f:80:68:d5:8d:ce:ea:9a:79:76:ac:ba:
ab:72:c0:e6:ca:e8:82:ef:84:4b:8d:37:34:6c:e9:10:0b:78:
65:25:3e:4b:a8:f4:7a:a6:e6:22:9c:ee:68:73:e5:3d:73:5b:
20:20:d1:61:b7:47:94:82:ed:cb:07:2c:71:59:90:75:a0:0a:
8c:50:22:85:82:ae:f6:53:04:6a:a2:50:0a:60:f5:5f:7e:8b:
81:10:e4:70:17:51:84:01:0d:6e:22:22:08:02:a8:18:24:05:
15:4d:fc:73:98:7d:82:60:c5:6a:95:48:58:59:52:7f:2d:f8:
ae:25:73:76:06:ca:fd:2c:37:e9:12:43:cc:d6:42:df:ce:5c:
e1:88:68:ae:91:8d:82:df:f1:c4:87:ae:3b:bb:03:8f:f9:12:
82:92:fb:e9:c7:93:b9:7f:f4:59:07:ef:7c:8c:a3:69:b7:76:
b6:a6:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:33 2026 by rpki-client