Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: 4rU7jPGPsc58JqRB6yIi3i7xfmbsblcwdt2j9WyQKMQ=
Subject key identifier: 2D:16:70:A7:65:96:07:3F:FC:AF:78:45:15:A1:B9:C9:3C:B6:BF:3D
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 019CB7DD6F0651B46468D06B116EF3BF40E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0D22
Signing time: Wed 04 Mar 2026 08:01:08 +0000
Manifest this update: Wed 04 Mar 2026 08:01:08 +0000
Manifest next update: Thu 05 Mar 2026 08:01:08 +0000
Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: 7ePG4jMYuDy/LdCYpolswnqw14DnpxJ3cG+6IzH3FOQ=)
4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:dd:6f:06:51:b4:64:68:d0:6b:11:6e:f3:bf:40:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Mar 4 08:01:08 2026 GMT
Not After : Mar 5 08:01:08 2026 GMT
Subject: CN=2d1670a76596073ffcaf784515a1b9c93cb6bf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:24:74:94:7d:9c:08:fc:63:fb:57:3f:31:
22:67:8f:d3:14:fb:13:a0:47:5c:4b:f0:3b:b4:f5:
1d:65:ec:d1:c1:05:5f:e1:e5:7c:62:fe:bb:e4:e2:
35:9d:8b:66:47:3a:2b:13:7e:fc:c3:98:3e:b7:8e:
bb:8d:ba:81:8c:a2:32:18:ae:e6:9f:fe:bf:7c:2e:
ab:cd:8c:5e:56:d4:98:b5:db:38:67:f5:7a:09:b2:
f4:9d:8e:6a:d1:53:18:00:e2:5d:a4:ab:01:67:67:
d8:b2:e4:cf:0e:0a:1b:1a:24:62:ad:23:26:9e:76:
1a:02:32:86:d9:13:0e:3a:eb:27:6c:82:9d:c0:35:
59:68:4d:b4:4f:f4:4a:06:d0:0b:c9:fb:6b:38:a8:
bf:00:77:d7:77:41:b7:dc:f2:22:e6:dc:5f:a9:30:
26:e8:28:42:bd:70:9c:94:c8:d9:e3:2c:c9:06:48:
6e:b6:66:9b:c2:62:5e:b5:34:b0:21:b4:88:f2:7c:
05:86:2c:6a:3d:84:5d:4b:0d:75:bc:07:15:fd:9a:
9b:fc:10:a6:ba:5a:fe:37:54:48:88:a0:66:6e:4a:
48:03:a5:47:5d:70:5a:aa:69:03:7f:c9:5a:14:d8:
92:44:a6:aa:df:22:40:d0:c6:3b:ea:09:e4:a3:9e:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:70:A7:65:96:07:3F:FC:AF:78:45:15:A1:B9:C9:3C:B6:BF:3D
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6b:85:1a:58:4e:34:97:f9:0c:d4:a2:d1:8b:f6:28:e4:66:
f4:99:65:ef:95:0f:d8:29:48:a6:3b:79:ac:2f:6b:ab:84:a8:
ae:a0:f3:f1:b4:15:c8:ed:2f:16:91:07:af:4a:48:ae:f8:7b:
a5:d5:c4:4d:a3:00:00:2b:a6:17:ec:90:61:46:aa:14:c5:34:
9d:c9:df:cd:43:e7:0e:33:c3:f2:0a:76:a4:44:ea:1e:75:a4:
ba:1c:f4:52:dd:65:cc:22:d7:9e:7d:df:27:be:58:55:6e:ba:
1b:0f:a2:d6:5c:be:ed:80:75:3e:5b:f0:38:6e:3b:15:24:33:
23:34:df:75:53:d6:a8:e4:a6:71:cd:f2:cc:bf:93:fc:83:01:
ee:e0:9d:2e:af:56:bc:4e:df:aa:ba:ab:10:59:a1:30:dd:d8:
c3:4d:5b:f6:4c:7b:cd:31:f7:c7:c8:d0:9f:87:9a:58:b2:12:
05:21:b1:a9:1e:47:de:88:a4:42:77:0b:ef:5f:67:75:f0:58:
34:58:73:5a:d8:07:fc:aa:35:35:60:15:9e:4d:af:1d:c4:8f:
70:e6:c9:60:63:7c:5c:42:d8:98:de:20:7a:2c:b3:74:24:f7:
1d:3f:e7:73:96:c0:be:6d:df:87:67:36:be:44:8c:95:17:a7:
c0:79:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:46 2026 by rpki-client