Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: X70Sy1BEo8i8lLU+tGjYuRoG6H5TrDpKkKvdWcmBfuA=
Subject key identifier: 49:86:F9:91:BB:4A:D2:5B:97:38:40:4C:60:83:91:1C:05:C8:0C:8D
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019E1C0FAE9F065F11AE55F9917B250223AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0D2D
Signing time: Tue 12 May 2026 12:00:50 +0000
Manifest this update: Tue 12 May 2026 12:00:50 +0000
Manifest next update: Wed 13 May 2026 12:00:50 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: UhWPLOqNzpqp6LGQPj/Y0PaMEcLMzAZNDucJ3hJXZ/k=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:ae:9f:06:5f:11:ae:55:f9:91:7b:25:02:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: May 12 12:00:50 2026 GMT
Not After : May 13 12:00:50 2026 GMT
Subject: CN=4986f991bb4ad25b9738404c6083911c05c80c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:98:2a:b2:85:43:2f:09:72:41:55:77:7a:
54:af:fd:cb:3f:00:2e:e7:09:3e:44:41:33:38:2c:
39:c5:c3:84:db:d8:9b:d1:93:a7:ae:93:eb:ab:ed:
97:03:f2:7f:24:80:8e:a0:13:24:8c:0d:dd:65:6f:
4b:99:2d:eb:95:46:c3:3f:01:17:e6:3f:a7:ad:80:
88:6c:6b:49:e3:7f:61:7f:3c:05:e5:e5:d5:b1:1d:
78:11:34:f9:b9:fe:44:43:2d:6f:f1:10:7a:04:4d:
3a:31:b7:5f:b0:0f:85:a8:7e:a6:dd:f1:29:93:7a:
ed:bb:b8:1e:dc:e3:b8:39:f0:05:c5:a7:d0:00:81:
a1:2a:81:f0:33:0b:78:fe:48:ef:b1:46:c1:58:de:
9a:90:83:43:7e:63:e2:ff:9a:59:70:65:8f:56:14:
be:16:fe:c9:1f:07:b4:f2:a0:36:e7:2e:9c:a0:b4:
1a:ca:db:7c:23:24:ee:9c:b4:39:c0:83:59:b0:55:
41:8d:d8:79:9b:4f:f7:df:3c:8a:92:ee:11:83:88:
97:20:0a:44:45:b2:6c:76:8c:29:b9:71:93:22:9c:
0b:cb:d4:05:d1:33:76:b6:03:71:89:f8:97:f4:0d:
cc:0b:56:23:eb:d0:5d:49:80:86:c0:1f:43:ce:c5:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:F9:91:BB:4A:D2:5B:97:38:40:4C:60:83:91:1C:05:C8:0C:8D
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:26:a0:00:f1:68:d3:35:fe:34:20:ea:61:fb:ad:df:b2:56:
21:b6:ef:a3:bf:97:c1:ab:e0:de:3e:11:a9:45:d5:4b:ac:f1:
fc:55:18:4b:12:27:d6:8d:23:4c:16:b7:16:93:8b:59:8b:0c:
a2:b9:63:57:a8:da:e4:2d:eb:ff:9d:d6:f5:9f:32:55:a4:70:
6d:5b:f5:84:95:24:9a:c0:01:7f:f0:f2:ca:93:99:8e:63:26:
fa:92:38:42:bb:65:ae:c8:6c:d6:be:81:8d:57:6a:59:61:3c:
bc:96:1a:24:52:9f:d3:66:5f:b1:36:71:9b:c8:c6:64:15:0c:
fd:51:34:73:36:3b:99:c9:3d:ca:31:11:e8:d1:1b:db:de:64:
2b:c1:0d:b9:cd:41:10:aa:3a:9c:03:e4:73:29:5c:9f:5b:ea:
6c:8f:d5:df:a5:29:d3:0c:c8:be:4e:8b:71:e0:8d:5f:a9:30:
36:42:7b:f2:ab:32:f9:b4:73:89:2c:a3:3f:7d:6d:40:6d:73:
29:ee:74:c7:ac:ca:ee:77:b7:83:06:1c:90:fc:46:bc:a8:42:
19:5f:7e:6b:c1:0f:67:74:dc:76:a8:1c:3a:a6:52:ee:e2:1e:
36:45:9c:97:28:37:82:9b:88:70:c8:56:a7:b3:1f:5b:01:5f:
10:8f:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:56 2026 by rpki-client