Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
File: CmhbcVcgw2L0zL11CmEz0z6pzUg.mft (raw, json)
Hash identifier: sCqVyzqMxDNIXcLuEMWAP+N77eQ9lkOt8TExQfzz+vY=
Subject key identifier: EA:37:4D:85:04:31:61:48:10:F7:7A:8F:BF:82:E9:15:FF:EA:57:37
Authority key identifier: 0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
Certificate issuer: /CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Certificate serial: 019F8F7F8E89AD3313D5356070E91C5269A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:08 +0000
Manifest this update: Thu 23 Jul 2026 15:02:08 +0000
Manifest next update: Fri 24 Jul 2026 15:02:08 +0000
Files and hashes: 1: 0bWhQWuajdVxt380g1tHt_dfDzA.roa (hash: BNIIYhf4bu7N2Q9i17Tx4+jGFkmAZfsMMHPK83i6ScU=)
2: CmhbcVcgw2L0zL11CmEz0z6pzUg.crl (hash: jGIpJ0QnfupBCfLqHN9zZsipoxWBuZsPdPTRUqvDyBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:8e:89:ad:33:13:d5:35:60:70:e9:1c:52:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Validity
Not Before: Jul 23 15:02:08 2026 GMT
Not After : Jul 24 15:02:08 2026 GMT
Subject: CN=ea374d850431614810f77a8fbf82e915ffea5737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:8d:b2:84:32:d4:fd:d4:d8:83:d9:cd:39:
ec:8f:79:90:03:d2:77:60:f8:1e:4f:b6:f7:28:a1:
b9:cd:70:bb:b9:0d:ed:c2:6b:e2:96:a3:43:cb:7e:
34:bd:d0:29:70:c0:4e:ef:c5:98:97:8d:f0:c6:2a:
5d:62:39:3a:a4:4d:b8:48:72:0b:e5:a9:9f:87:ca:
77:21:7b:44:63:d7:23:43:8b:2a:47:16:a6:a5:52:
c8:64:16:d1:44:1d:01:e9:68:b1:f8:db:32:cd:92:
6d:d8:1e:7f:38:e9:40:f0:bf:c8:42:a9:4a:3f:0e:
7e:d2:57:09:12:3a:66:af:0f:c0:77:fc:b4:ad:f6:
af:c8:25:5c:06:81:23:26:ce:ca:3e:7c:00:60:8a:
1e:e9:a9:ee:db:79:3c:23:08:a7:90:eb:27:4b:fe:
3c:a2:00:f3:97:66:77:27:7e:e4:d8:dc:a4:4c:9d:
4c:8c:99:6e:4c:e7:b6:47:b0:d6:70:ba:fa:8c:ba:
5e:a7:ea:42:01:1f:6d:76:dc:7e:f5:33:2d:ad:33:
52:e8:1b:f8:d5:bb:c7:94:8d:6b:ad:66:45:e4:92:
fd:9c:22:4b:4c:29:7c:af:f6:44:a1:2c:8f:07:38:
37:c1:31:44:e7:f5:02:19:5f:09:23:b7:58:c6:47:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:37:4D:85:04:31:61:48:10:F7:7A:8F:BF:82:E9:15:FF:EA:57:37
X509v3 Authority Key Identifier:
keyid:0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:ef:04:80:1b:c3:d0:92:19:36:6d:96:c9:58:ff:58:ff:
9f:64:a0:2c:61:50:ff:b6:14:ef:7d:6e:ab:a0:7e:3b:2c:67:
f1:7c:91:6f:52:a0:8e:f5:05:74:b2:fb:99:78:89:34:9a:3a:
03:29:35:65:6f:f9:66:8a:5f:87:47:ac:7e:60:bd:5a:d3:67:
77:45:36:81:1f:b7:db:e5:5c:57:12:20:de:31:c1:73:4b:d3:
56:97:13:b9:1d:bc:e8:d0:b5:34:ea:b5:59:8d:1a:ba:9c:52:
cb:00:35:ec:85:3b:f2:50:31:72:5c:8b:59:90:c2:6a:72:c1:
5a:d0:55:2b:74:ca:c4:40:3f:bd:b8:4f:27:dc:8c:e7:ad:f5:
d9:f2:33:75:bb:6a:fc:be:4e:73:8c:3c:a9:05:c3:e1:80:cc:
b9:83:89:e6:a8:79:69:9e:37:b3:95:10:df:75:1b:69:ad:39:
6f:5f:86:70:cf:61:a7:82:41:2f:56:29:3c:63:59:51:03:65:
a6:db:05:70:2c:7e:bf:7a:d9:3c:29:2a:0d:d6:ee:3c:71:da:
a3:f1:bb:b9:8b:36:5c:94:32:af:98:94:77:13:21:69:f4:da:
1d:7f:bd:42:b8:65:82:81:d5:64:63:0e:92:5c:d8:96:ff:b7:
1b:eb:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:19 2026 by rpki-client