Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: ctvdu0GTe0WzjqrWOt6wANAassPrgRwir4hnr/Xs7Ik=
Subject key identifier: 3D:7C:54:97:A5:12:D7:8D:D8:2C:26:2B:B7:C4:10:78:D9:D0:1F:5F
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 019DA189A517290D5E5836F1D8ECE72DAF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0D9B
Signing time: Sat 18 Apr 2026 17:00:45 +0000
Manifest this update: Sat 18 Apr 2026 17:00:45 +0000
Manifest next update: Sun 19 Apr 2026 17:00:45 +0000
Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: N8X9Xr4VuYFp3sGhPh2IfOxvoLWlFbVhnKb/jKogzwE=)
4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:89:a5:17:29:0d:5e:58:36:f1:d8:ec:e7:2d:af:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Apr 18 17:00:45 2026 GMT
Not After : Apr 19 17:00:45 2026 GMT
Subject: CN=3d7c5497a512d78dd82c262bb7c41078d9d01f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:76:6e:32:bb:a4:72:0f:a2:0c:38:53:97:
15:36:8f:44:ec:8c:62:21:0d:c4:df:8a:16:ed:58:
e7:7d:02:9e:6b:35:87:c7:f4:31:00:31:0b:fe:fa:
f4:c3:d0:25:1a:6c:9e:f2:db:b7:e6:ca:ba:f1:32:
84:d4:c5:61:58:00:7f:ec:52:ba:75:4e:c6:bd:92:
cd:dc:f3:d6:fc:75:0f:88:1d:1a:32:40:82:3f:38:
a0:08:02:0f:11:1f:6b:ca:f4:eb:86:11:d3:e8:09:
bb:76:87:d7:38:fa:8d:9e:12:cc:19:73:69:cb:f9:
da:56:7e:4e:88:8d:42:83:f6:dd:16:87:84:93:fc:
e6:0f:63:bf:43:b3:b3:5b:be:f4:5a:d2:66:4e:09:
da:5c:d4:54:37:0a:ba:6f:f9:aa:08:71:8c:82:6b:
c0:81:dc:90:1c:82:3d:64:1f:46:55:c8:1f:5b:31:
4f:54:30:64:c0:b4:cd:8d:e5:11:64:07:b3:41:96:
55:08:fd:9a:7e:5a:93:c3:7a:5b:bf:f6:6b:53:cf:
4e:b6:ce:00:d1:85:f4:e0:d7:e1:48:d5:f1:2e:4c:
50:07:2b:50:a6:3b:54:a0:1d:49:be:85:e9:ba:b0:
dd:0c:79:bb:46:7d:55:d2:3f:b3:88:7b:12:47:4e:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:54:97:A5:12:D7:8D:D8:2C:26:2B:B7:C4:10:78:D9:D0:1F:5F
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:42:c6:e2:37:3a:7c:e7:0d:35:52:f9:5b:c8:8d:21:1d:3a:
87:76:b7:b9:d2:5b:76:3f:f6:6a:15:ad:13:8b:80:3b:25:6a:
8b:9e:40:38:c9:1a:96:27:df:2e:9a:eb:97:19:b8:11:6b:ca:
e7:95:af:d0:3b:94:6b:b7:fd:bc:ad:6b:84:37:ea:18:dc:1f:
8b:38:31:83:3e:a1:2d:cf:c7:8b:14:e9:a4:f7:1f:d7:21:c9:
55:dc:e2:4c:92:5c:72:1f:16:1b:49:6c:7d:33:62:30:77:e0:
79:3e:41:10:29:1e:61:7b:41:e4:50:a6:e0:81:2d:42:20:58:
cb:12:56:a3:ec:c5:cf:1d:a4:db:63:20:a5:be:75:ad:03:b9:
a9:a5:6b:d9:bc:22:51:37:b0:4b:33:3c:68:08:93:b2:68:d5:
99:9a:b5:0b:aa:2e:97:d8:82:d1:ed:a8:bf:d5:54:9a:1c:1b:
6b:e2:2e:7a:eb:53:c1:9d:06:b5:f2:92:e8:1d:d1:14:ed:6e:
da:7a:6c:bd:98:86:e2:64:57:6e:e7:b5:8c:dc:93:af:0f:f9:
d2:52:ca:74:f1:93:f4:6a:98:a1:c5:cc:89:da:ab:f0:37:42:
94:03:89:af:cd:89:76:fb:31:27:46:6e:0f:08:04:9a:32:7b:
7b:7c:03:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2hiaUXKQ1eWDbx2OznLa93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0
NmY1NWMwHhcNMjYwNDE4MTcwMDQ1WhcNMjYwNDE5MTcwMDQ1WjAzMTEwLwYDVQQD
EygzZDdjNTQ5N2E1MTJkNzhkZDgyYzI2MmJiN2M0MTA3OGQ5ZDAxZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nh2bjK7pHIPogw4U5cVNo9E7Ixi
IQ3E34oW7VjnfQKeazWHx/QxADEL/vr0w9AlGmye8tu35sq68TKE1MVhWAB/7FK6
dU7GvZLN3PPW/HUPiB0aMkCCPzigCAIPER9ryvTrhhHT6Am7dofXOPqNnhLMGXNp
y/naVn5OiI1Cg/bdFoeEk/zmD2O/Q7OzW770WtJmTgnaXNRUNwq6b/mqCHGMgmvA
gdyQHII9ZB9GVcgfWzFPVDBkwLTNjeURZAezQZZVCP2aflqTw3pbv/ZrU89Ots4A
0YX04NfhSNXxLkxQBytQpjtUoB1JvoXpurDdDHm7Rn1V0j+ziHsSR07M3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD18VJelEteN2CwmK7fEEHjZ0B9fMB8GA1UdIwQY
MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt
YWQyOGZhOTY2YjUxLzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx
LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWELG4jc6
fOcNNVL5W8iNIR06h3a3udJbdj/2ahWtE4uAOyVqi55AOMkaliffLprrlxm4EWvK
55Wv0DuUa7f9vK1rhDfqGNwfizgxgz6hLc/HixTppPcf1yHJVdziTJJcch8WG0ls
fTNiMHfgeT5BECkeYXtB5FCm4IEtQiBYyxJWo+zFzx2k22Mgpb51rQO5qaVr2bwi
UTewSzM8aAiTsmjVmZq1C6oul9iC0e2ov9VUmhwba+IueutTwZ0GtfKS6B3RFO1u
2npsvZiG4mRXbue1jNyTrw/50lLKdPGT9GqYocXMidqr8DdClAOJr82JdvsxJ0Zu
DwgEmjJ7e3wDLA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:16 2026 by rpki-client