Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: 5j0mt0ZIib2Jn1R9QrXLFP5/hTfBc6xbzbVUNxqsN3g=
Subject key identifier: 9D:07:71:45:E7:23:3A:C2:2B:B9:3B:94:11:F1:B9:63:A7:F1:A2:AB
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019E30A997479A41EE6CF2FB4C28EF4F78CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 1097
Signing time: Sat 16 May 2026 12:01:21 +0000
Manifest this update: Sat 16 May 2026 12:01:21 +0000
Manifest next update: Sun 17 May 2026 12:01:21 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: eqGWTY9Yi+RTCtjYM7zYIr1O+YS9FwFCJVd+IuphCbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:97:47:9a:41:ee:6c:f2:fb:4c:28:ef:4f:78:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: May 16 12:01:21 2026 GMT
Not After : May 17 12:01:21 2026 GMT
Subject: CN=9d077145e7233ac22bb93b9411f1b963a7f1a2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:bf:b8:00:79:8f:ab:01:88:c0:86:e6:8e:
97:48:04:03:49:8e:66:ef:fd:b4:c9:76:66:99:2e:
89:be:99:16:ed:35:c4:ba:4b:e3:39:e5:1f:2d:cd:
e2:6b:2b:ab:4a:b8:c5:bc:ed:39:89:40:c2:3f:f9:
3e:2d:ca:80:cd:1a:c4:8d:f1:0d:00:be:e3:e8:d1:
b5:59:86:80:fa:98:58:ad:90:29:e2:8f:f6:9a:c3:
03:00:96:c6:c2:15:72:a0:5b:f6:6c:ae:20:78:b3:
f1:55:06:56:ea:d2:97:b4:01:52:93:b6:e3:e1:7c:
cd:8a:cd:1d:ab:bd:06:d0:24:3f:df:6c:a5:e5:c0:
2b:fb:f4:2c:50:30:5f:62:0e:68:76:17:89:4c:04:
52:03:22:95:e3:70:3f:33:39:24:d6:70:93:77:d6:
71:ca:81:2c:38:ef:23:0b:8b:56:55:ee:11:2d:39:
b0:74:e9:5e:0f:87:64:c9:a8:c6:b3:fd:b4:ec:ed:
4e:60:ae:70:64:82:d7:58:0f:47:93:7b:c7:11:b0:
10:f9:b9:70:9f:5e:27:fa:90:02:f1:65:c8:6e:c2:
b8:e0:7f:59:41:c0:14:44:bc:ba:50:ef:a9:b4:e1:
98:80:bd:b3:f5:a0:72:b0:6a:5b:e0:43:ad:05:80:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:71:45:E7:23:3A:C2:2B:B9:3B:94:11:F1:B9:63:A7:F1:A2:AB
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:62:bb:e9:a6:e0:3b:23:7e:e1:c1:c2:db:8c:e4:70:5f:3e:
63:50:71:37:22:18:12:31:ed:98:36:05:8e:b0:9b:ca:a7:bd:
d3:d2:78:ce:4b:2b:c3:4a:45:f9:ad:ef:ff:05:2d:f1:51:75:
59:a0:af:8b:a6:5a:c1:92:e8:84:cf:d9:7c:7c:37:eb:b5:06:
ff:38:63:4b:e2:e7:75:e9:dd:c5:d1:8f:e6:5b:56:ae:c1:ae:
66:44:94:d7:59:1b:ab:60:cb:50:b8:99:e8:dd:2b:c7:6d:49:
62:c7:ba:63:86:e8:68:12:bb:e8:52:42:3a:b7:b1:18:10:d0:
ae:80:16:23:84:a0:38:e8:67:e6:8c:5e:a5:1e:de:86:65:bb:
70:d5:fa:11:cd:9d:a7:f3:0f:30:61:da:3f:50:23:f2:d1:97:
44:1d:2d:b4:bb:37:85:c6:bf:3d:fa:52:95:99:cd:3b:1c:03:
5d:34:68:4a:c4:f7:f4:67:ad:44:88:eb:4e:12:d8:09:38:52:
7a:fb:2f:3a:12:99:53:1d:9f:81:fc:6b:d9:37:33:8c:23:19:
14:3a:86:79:9d:15:8d:8b:00:5c:d6:9c:60:23:29:22:14:98:
97:1b:f7:d4:58:f1:83:00:55:1a:59:2d:b5:50:0b:b5:cd:43:
af:d4:df:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqZdHmkHubPL7TCjvT3jLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0
MGE1ODgwHhcNMjYwNTE2MTIwMTIxWhcNMjYwNTE3MTIwMTIxWjAzMTEwLwYDVQQD
Eyg5ZDA3NzE0NWU3MjMzYWMyMmJiOTNiOTQxMWYxYjk2M2E3ZjFhMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjm/uAB5j6sBiMCG5o6XSAQDSY5m
7/20yXZmmS6JvpkW7TXEukvjOeUfLc3iayurSrjFvO05iUDCP/k+LcqAzRrEjfEN
AL7j6NG1WYaA+phYrZAp4o/2msMDAJbGwhVyoFv2bK4geLPxVQZW6tKXtAFSk7bj
4XzNis0dq70G0CQ/32yl5cAr+/QsUDBfYg5odheJTARSAyKV43A/Mzkk1nCTd9Zx
yoEsOO8jC4tWVe4RLTmwdOleD4dkyajGs/207O1OYK5wZILXWA9Hk3vHEbAQ+blw
n14n+pAC8WXIbsK44H9ZQcAURLy6UO+ptOGYgL2z9aBysGpb4EOtBYCbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0HcUXnIzrCK7k7lBHxuWOn8aKrMB8GA1UdIwQY
MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt
MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz
LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimK76abg
OyN+4cHC24zkcF8+Y1BxNyIYEjHtmDYFjrCbyqe909J4zksrw0pF+a3v/wUt8VF1
WaCvi6ZawZLohM/ZfHw367UG/zhjS+LndendxdGP5ltWrsGuZkSU11kbq2DLULiZ
6N0rx21JYse6Y4boaBK76FJCOrexGBDQroAWI4SgOOhn5oxepR7ehmW7cNX6Ec2d
p/MPMGHaP1Aj8tGXRB0ttLs3hca/PfpSlZnNOxwDXTRoSsT39GetRIjrThLYCThS
evsvOhKZUx2fgfxr2TczjCMZFDqGeZ0VjYsAXNacYCMpIhSYlxv31FjxgwBVGlkt
tVALtc1Dr9Tf/g==
-----END CERTIFICATE-----
Generated at Sat May 16 18:42:31 2026 by rpki-client