Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: TO8tEB/3RS0rR6sYMag+L+ohX0LwCBVL7wzgu5kBpRE=
Subject key identifier: DC:98:9C:1F:89:E2:57:6E:E1:F1:C2:42:4E:11:70:7D:64:0F:C7:9E
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 01A05AB253295B9CEFF0BC4CD99BFF731694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0F04
Signing time: Tue 01 Sep 2026 02:00:31 +0000
Manifest this update: Tue 01 Sep 2026 02:00:31 +0000
Manifest next update: Wed 02 Sep 2026 02:00:31 +0000
Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: D1PaDOfUd8ZducVYn/WcfkrJhlAgyKceYkK1R0Q1j2I=)
4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:b2:53:29:5b:9c:ef:f0:bc:4c:d9:9b:ff:73:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Sep 1 02:00:31 2026 GMT
Not After : Sep 2 02:00:31 2026 GMT
Subject: CN=dc989c1f89e2576ee1f1c2424e11707d640fc79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:a7:1a:4f:a5:5e:cf:6f:30:06:4e:1a:9f:
fe:64:ff:38:ed:68:8b:94:55:0a:10:a7:f6:5c:4f:
f3:14:3d:60:dd:b4:a2:b2:0e:8f:80:ea:46:19:68:
fc:62:27:57:97:9c:fd:6d:c4:37:7c:f8:41:22:8f:
7e:74:ff:fd:f2:ea:26:9f:3d:07:e4:ae:3f:70:5c:
10:bf:b7:a0:1c:75:1a:05:7c:70:9c:ee:09:69:75:
b3:24:12:9f:1a:04:58:6d:5e:a6:d1:ed:bf:64:04:
9e:f1:7f:92:47:b1:f9:99:2a:93:44:aa:5c:ce:81:
5f:bb:45:2f:e7:36:cd:75:48:01:b0:fc:4f:f0:2b:
4a:69:5b:0e:1f:a6:26:a1:ff:28:eb:39:5e:49:38:
43:d3:e3:fd:41:53:74:14:0e:fa:77:74:9d:81:a6:
01:6d:cb:e4:42:1a:31:d1:44:76:f2:37:aa:7e:83:
22:20:b3:67:01:14:98:f5:dd:9d:86:87:b1:e5:9f:
f7:48:2f:1e:17:4a:05:9e:e4:3c:16:27:47:d7:5f:
49:1f:06:9f:7b:a1:32:e4:12:84:74:79:11:14:43:
68:11:a1:98:b2:11:f0:0a:8c:ac:57:67:d0:64:4f:
1e:80:5e:5b:f7:74:0c:2f:04:08:6d:d4:9b:72:e3:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:9C:1F:89:E2:57:6E:E1:F1:C2:42:4E:11:70:7D:64:0F:C7:9E
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ad:1a:e8:91:79:d7:33:f5:52:3e:23:02:29:fd:03:fe:18:
52:d0:fb:08:d6:3a:6e:a0:d2:36:14:34:9a:dd:19:06:95:09:
a3:8a:e0:9a:30:88:17:7e:94:2f:ad:3a:15:91:1d:d1:27:fb:
93:ce:aa:22:27:58:7f:02:55:fc:f4:06:89:e4:62:bb:51:31:
98:d4:b5:58:b6:2c:67:94:f4:c6:63:5a:eb:25:34:40:fd:ff:
fd:c8:cb:8a:c7:db:9b:38:fb:25:4a:ed:39:75:a0:24:b7:e2:
e5:f8:6c:02:97:c3:0b:69:1d:65:8e:c1:f9:36:28:fe:0d:a9:
ea:ea:15:0a:c4:cf:24:75:a2:b8:a5:ab:a5:1f:ca:12:e4:6c:
40:68:bd:65:a0:21:ad:67:96:3f:6d:8c:10:20:a3:40:fe:e5:
08:b7:f9:7a:d7:8b:c9:16:d0:01:d1:b4:85:88:73:b1:b9:e0:
a0:a0:61:cc:48:bf:c5:cb:31:99:28:f8:ea:1b:62:bc:57:97:
0f:40:96:b1:90:f2:c9:f6:5b:37:3c:8b:c7:e3:7d:0c:1f:27:
b4:fe:2b:7f:c9:43:dd:2d:d8:c3:c8:e4:e4:c5:c6:4e:4d:8d:
69:19:dd:17:37:24:62:d4:b1:c7:3b:f1:7e:51:ad:c0:bf:8f:
0d:a9:c6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:28 2026 by rpki-client