Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: 29HE5XCk0HnfTF+CbjdyfEksax0heECJTZTGd2aQE28=
Subject key identifier: 3A:B0:26:FF:1B:04:E0:7E:34:0F:AD:DE:AA:6F:EE:6A:91:D4:E8:70
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019F3370F9F34194A1836297E7845C3EBDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 111D
Signing time: Sun 05 Jul 2026 18:01:09 +0000
Manifest this update: Sun 05 Jul 2026 18:01:09 +0000
Manifest next update: Mon 06 Jul 2026 18:01:09 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: 6fJFLqRu8/n1Alwew9mGVUAb5NpLNeDQXLo8FTgMKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:70:f9:f3:41:94:a1:83:62:97:e7:84:5c:3e:bd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jul 5 18:01:09 2026 GMT
Not After : Jul 6 18:01:09 2026 GMT
Subject: CN=3ab026ff1b04e07e340faddeaa6fee6a91d4e870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:a3:29:c3:f8:63:94:ae:2f:f4:7e:4c:9e:
47:75:10:69:3d:33:1a:d5:5f:60:bc:e5:26:41:17:
27:dc:b4:59:fa:bd:df:d0:ab:57:59:63:ff:e8:cf:
47:94:24:32:31:ce:f0:ae:2f:60:ba:92:ae:56:29:
91:07:58:7e:3b:d5:c5:59:c0:38:81:a8:aa:d1:8c:
9f:73:90:9d:ff:30:a4:9c:01:07:42:b8:c1:8d:07:
6f:b4:f2:c9:2b:65:85:0c:f9:f8:33:27:b5:6f:d5:
9e:9e:45:36:0f:13:13:0c:93:78:b2:d4:ca:7e:70:
ab:91:97:22:e7:ae:45:78:0d:43:5d:5f:b2:38:89:
af:83:1d:fb:ec:3c:a1:31:0e:db:d0:5e:ad:5b:29:
13:93:50:23:6f:df:b0:87:94:68:8e:1d:b4:c3:81:
d0:39:94:01:dd:35:51:51:1b:35:d5:27:53:f0:aa:
08:e8:7e:98:08:94:9b:4f:2a:cf:ad:cb:e5:79:df:
4c:83:3b:d1:af:3c:50:2c:0f:42:a9:0e:8f:09:57:
31:b3:b8:3f:d2:c6:0d:e3:3b:2d:97:f5:9f:03:91:
b4:8d:16:83:94:59:65:03:35:28:8f:2a:d0:60:82:
a3:6a:01:16:a1:50:85:a7:3f:bf:81:d9:78:f6:5d:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:26:FF:1B:04:E0:7E:34:0F:AD:DE:AA:6F:EE:6A:91:D4:E8:70
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dc:f4:89:b9:51:e8:33:d5:13:5f:7c:f7:f7:ef:af:2d:40:
7f:7e:6f:ed:1c:29:4b:3d:92:24:02:15:09:3e:96:00:c7:27:
12:6b:dc:ea:12:fd:21:b5:e1:a6:06:c5:42:98:a0:33:eb:57:
e2:91:59:45:78:b5:76:1f:c7:e1:99:dc:14:5e:a9:07:f1:05:
3e:25:b6:66:44:a8:62:17:b8:cb:2c:38:02:ad:36:e9:eb:2f:
29:d8:0e:4c:16:31:b2:39:3b:99:9f:61:a9:97:05:65:a8:f3:
47:b4:94:fd:7c:29:cc:c8:c1:06:6b:9b:05:28:d9:22:e1:ba:
91:a4:20:3d:a6:9e:30:c9:a6:07:91:7b:86:2a:b7:53:a9:2a:
5c:f9:c1:96:8f:f4:7e:2c:da:79:15:e8:bc:30:b4:e7:af:15:
8d:d5:7d:b4:88:7e:a9:49:17:61:97:4f:6d:45:3d:ba:73:90:
6a:c3:6a:ef:84:0f:47:1e:92:3d:aa:5a:81:d3:07:5a:5a:22:
f1:8c:8b:9f:46:41:ed:9a:9e:29:8a:23:31:0e:7d:69:af:af:
6c:66:9e:16:95:e0:d9:d0:a0:59:7c:4e:5b:b6:0d:6b:c0:93:
48:9c:63:84:af:bf:d6:f1:52:a8:e1:2f:83:8b:b9:78:d6:74:
99:85:81:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8zcPnzQZShg2KX54RcPr31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0
MGE1ODgwHhcNMjYwNzA1MTgwMTA5WhcNMjYwNzA2MTgwMTA5WjAzMTEwLwYDVQQD
EygzYWIwMjZmZjFiMDRlMDdlMzQwZmFkZGVhYTZmZWU2YTkxZDRlODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ejKcP4Y5SuL/R+TJ5HdRBpPTMa
1V9gvOUmQRcn3LRZ+r3f0KtXWWP/6M9HlCQyMc7wri9gupKuVimRB1h+O9XFWcA4
gaiq0Yyfc5Cd/zCknAEHQrjBjQdvtPLJK2WFDPn4Mye1b9WenkU2DxMTDJN4stTK
fnCrkZci565FeA1DXV+yOImvgx377DyhMQ7b0F6tWykTk1Ajb9+wh5Rojh20w4HQ
OZQB3TVRURs11SdT8KoI6H6YCJSbTyrPrcvled9MgzvRrzxQLA9CqQ6PCVcxs7g/
0sYN4zstl/WfA5G0jRaDlFllAzUojyrQYIKjagEWoVCFpz+/gdl49l2llwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqwJv8bBOB+NA+t3qpv7mqR1OhwMB8GA1UdIwQY
MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt
MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz
LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9z0iblR
6DPVE1989/fvry1Af35v7RwpSz2SJAIVCT6WAMcnEmvc6hL9IbXhpgbFQpigM+tX
4pFZRXi1dh/H4ZncFF6pB/EFPiW2ZkSoYhe4yyw4Aq026esvKdgOTBYxsjk7mZ9h
qZcFZajzR7SU/XwpzMjBBmubBSjZIuG6kaQgPaaeMMmmB5F7hiq3U6kqXPnBlo/0
fizaeRXovDC0568VjdV9tIh+qUkXYZdPbUU9unOQasNq74QPRx6SPapagdMHWloi
8YyLn0ZB7ZqeKYojMQ59aa+vbGaeFpXg2dCgWXxOW7YNa8CTSJxjhK+/1vFSqOEv
g4u5eNZ0mYWBUQ==
-----END CERTIFICATE-----
Generated at Mon Jul 6 03:26:32 2026 by rpki-client