Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: s7NJ0a0Xk/+y3bumm9kgq8eql6lCTy265GjHgS6gMC8=
Subject key identifier: FA:36:19:DF:C0:79:2C:CD:63:34:95:60:C5:B3:D0:4F:08:9E:E1:99
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019F90C8600C048C456AEF9DDD2554F0073A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0DEE
Signing time: Thu 23 Jul 2026 21:01:18 +0000
Manifest this update: Thu 23 Jul 2026 21:01:18 +0000
Manifest next update: Fri 24 Jul 2026 21:01:18 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: DDmqEr7H/vtw1nDSFtrjfIVKWql3FGhI+SsFLB1aDzE=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:60:0c:04:8c:45:6a:ef:9d:dd:25:54:f0:07:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jul 23 21:01:18 2026 GMT
Not After : Jul 24 21:01:18 2026 GMT
Subject: CN=fa3619dfc0792ccd63349560c5b3d04f089ee199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:74:4e:ad:07:4b:d9:a7:a9:cd:cf:27:21:
ee:c9:7a:af:79:0c:ad:ce:e0:2c:af:f1:10:a7:aa:
ec:6a:95:28:57:a0:78:a5:50:14:e6:2d:17:f2:c7:
76:2a:0e:5e:7a:9a:f0:ad:95:11:53:6f:a5:72:97:
80:8d:98:9c:9f:6d:a9:3a:48:33:09:4c:58:f0:27:
07:9b:d1:67:09:47:34:bb:17:68:c9:86:b9:a8:d4:
1a:a4:bb:eb:c8:08:0c:2c:dd:ad:84:58:d3:85:0d:
f2:3c:d0:c7:6b:4e:f3:30:f3:30:ed:53:f2:4d:bb:
71:c1:5e:fe:ef:a7:f4:07:f1:6d:09:4f:83:4b:82:
78:74:3a:c0:c9:a6:2d:43:ba:19:51:9b:63:25:0c:
a5:6c:d0:35:7d:1c:2b:49:ba:59:49:33:3d:48:0e:
20:68:02:a5:45:5e:d4:eb:ab:4a:13:c1:7d:5b:66:
36:bd:06:35:0b:5f:9b:b9:b2:47:50:a2:78:db:11:
c0:4b:f5:30:0e:3d:b7:3d:5e:83:7f:07:9d:fd:2e:
f1:dc:af:23:45:4b:ac:ad:89:5a:14:f0:9b:ae:69:
7b:2b:ee:bd:45:d6:af:e8:4f:32:9d:db:85:88:49:
ba:2d:39:c2:c2:35:7f:5a:c3:1f:de:d5:d3:4d:b8:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:19:DF:C0:79:2C:CD:63:34:95:60:C5:B3:D0:4F:08:9E:E1:99
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ad:ce:6b:9b:fa:dd:c8:19:9a:fc:87:f8:c2:c6:06:44:6d:
7f:91:2f:ed:d2:b1:f3:b0:cc:84:86:b5:06:59:c6:42:7a:d0:
06:90:64:96:c4:14:7a:43:f1:65:0d:f4:27:e1:bd:93:55:4b:
28:6e:bf:c2:b4:c5:5f:cb:34:d4:a2:cd:ea:5d:f0:60:28:61:
f4:ec:1e:1a:cf:37:b6:e5:3a:f2:4f:b7:6a:a5:b0:d4:8a:f0:
4a:65:3e:ad:6b:0f:fe:24:7a:4a:4c:44:7d:f4:df:44:29:8a:
e8:41:0b:6f:52:2b:c1:54:ee:e9:e2:b0:77:29:93:21:af:e0:
70:91:87:08:d7:a8:61:e1:95:33:ac:43:a6:f7:c8:35:52:78:
42:d4:f1:13:af:81:9c:1d:25:d9:87:cc:d9:49:19:39:58:02:
aa:d9:9d:60:15:07:1a:ce:44:c3:74:95:86:c7:c6:71:ab:9d:
c2:a8:1e:88:54:f1:4f:1c:e8:78:b5:b0:49:5d:72:47:64:61:
f8:71:5e:0b:58:09:2d:a2:38:9e:bd:3a:f6:72:36:09:96:bd:
5f:ac:44:e8:98:f6:dd:1d:ad:91:18:d9:61:bb:ff:ba:45:09:
f6:41:e8:77:f5:76:3a:8f:2d:1f:b8:ee:0d:c6:ab:50:72:3d:
07:7a:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:20 2026 by rpki-client