Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: R74Q2lItllzTYhpxOHnaS77bIL6Q4SiPz0XXyr+fT+8=
Subject key identifier: AB:C9:BC:63:B4:25:AD:2D:3A:28:94:2E:62:32:90:9B:87:B8:E4:E0
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019D28BB8411BE0903E3807076C9763F38DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0CAF
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: eBpIqMnjCF8IgyDQA80qBGkDYKtW628S7WB8EqZMt/E=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:84:11:be:09:03:e3:80:70:76:c9:76:3f:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=abc9bc63b425ad2d3a28942e6232909b87b8e4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:ff:86:90:e5:7f:8d:d8:cf:29:f1:8b:1d:
f2:fb:47:7f:d0:58:bf:3e:ec:34:79:e0:34:3c:9d:
8b:1e:0a:1c:92:4f:b5:b6:a1:67:5c:58:34:8b:1e:
b9:cc:96:1c:4c:19:5b:86:4e:7b:ab:30:b3:3b:32:
20:4b:2e:8b:ed:c4:b3:d2:8b:af:f3:f6:cb:43:29:
36:1e:e6:f5:a2:f1:5c:b8:d0:15:82:e8:b1:98:c0:
10:a5:26:fb:35:ff:cf:e1:06:94:fb:8a:28:53:fe:
db:dd:f0:23:82:14:03:a7:73:a4:d9:5d:bd:7f:cc:
40:e7:eb:09:97:67:21:3a:72:16:39:95:21:59:02:
37:25:ed:62:7f:ee:e4:b8:65:aa:ca:bd:37:92:ba:
a7:7c:c7:b8:a8:67:84:a5:89:6f:25:0b:95:9a:68:
f6:e2:4f:34:8b:35:9d:44:70:d4:84:64:4f:75:1d:
be:e2:e4:26:76:61:8c:60:d4:ff:74:e4:8e:38:2c:
66:ff:8e:94:86:4b:9d:77:1e:3d:1d:ad:6d:52:f2:
65:87:2f:c7:1e:f7:85:cc:22:88:e8:0f:0f:92:2c:
86:81:a2:7a:35:0b:6c:cf:4c:75:e9:93:2e:a4:16:
bb:2e:c0:0c:1d:cd:41:76:e2:b5:df:d8:5b:a8:e6:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C9:BC:63:B4:25:AD:2D:3A:28:94:2E:62:32:90:9B:87:B8:E4:E0
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ec:52:f4:8d:d2:6c:fa:39:52:e2:8b:87:fc:c9:e0:9a:9d:
3b:76:cb:e8:92:52:b7:52:95:2a:d1:27:5a:8c:cf:a5:04:37:
09:a1:21:f5:8b:31:05:6e:25:4f:a2:04:b5:00:ef:74:ee:57:
5e:a0:36:71:8e:ac:5f:07:b5:4e:7a:09:d8:7a:4d:f1:db:70:
d2:af:95:70:f7:7f:2e:f5:d6:29:33:ed:5b:d0:6e:c0:9f:42:
f8:c9:73:11:5b:4f:04:29:e1:ea:77:4a:fc:1f:6d:c3:80:5e:
43:38:21:4a:06:da:09:36:9b:dd:d7:c7:54:b4:6f:91:f1:f1:
22:5e:94:91:eb:d8:cb:cd:29:35:cd:7c:fe:81:ab:90:0f:b0:
35:92:cf:c6:e4:90:13:24:1d:30:17:6a:d2:be:40:12:17:d6:
96:0d:b2:c9:d5:c7:c6:5f:fc:52:7d:51:00:33:62:ba:75:07:
83:37:d9:be:88:12:92:85:31:c5:3e:15:28:c0:0b:13:4f:00:
c3:ee:bf:a7:7b:56:90:89:bc:1c:7f:31:b4:c7:77:35:c2:cc:
e2:c7:e0:b3:87:e4:6b:c4:38:21:ef:0c:22:ba:37:0d:50:e2:
6e:f7:de:65:24:44:8d:78:9a:b6:84:0c:06:e2:56:bc:e0:f3:
85:d4:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:07:01 2026 by rpki-client