Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: U5SIhkEYiOgSCdkZkETq/rDhWhjWha/+SdrUKvLwdQo=
Subject key identifier: D5:62:67:A4:77:50:2F:3F:6F:81:44:F9:BB:B5:81:6E:A8:53:9E:AF
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01A03FE0532A190A75F355B808D7E8A9C647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 11A8
Signing time: Wed 26 Aug 2026 21:01:01 +0000
Manifest this update: Wed 26 Aug 2026 21:01:01 +0000
Manifest next update: Thu 27 Aug 2026 21:01:01 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: TD3fFBxtkiLXNjdo0k4URGyTsWX2Nlscv2RJHTVSpFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:53:2a:19:0a:75:f3:55:b8:08:d7:e8:a9:c6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Aug 26 21:01:01 2026 GMT
Not After : Aug 27 21:01:01 2026 GMT
Subject: CN=d56267a477502f3f6f8144f9bbb5816ea8539eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:ea:98:97:30:75:0e:28:e7:04:72:25:1e:
b5:d2:48:bc:06:6d:da:a5:0f:81:bf:b4:88:65:70:
d8:87:8f:28:ed:61:21:96:07:de:37:17:7c:49:1b:
1b:40:d9:63:18:98:90:1d:dd:ac:b4:49:9e:6b:5d:
22:e6:66:a5:05:ad:9a:53:25:e9:97:a6:9a:0f:af:
64:e5:0e:92:67:29:84:0f:83:f8:0e:c3:01:92:aa:
36:78:c6:3a:54:e1:20:ba:f9:60:78:c3:d2:2a:23:
30:57:a4:41:6c:9c:0e:bf:d8:f2:32:39:fc:5e:b5:
98:53:00:56:2b:68:4b:f2:fe:ba:89:5e:ac:57:fe:
10:13:0d:5d:e2:99:7b:51:05:59:e4:d7:44:2e:c1:
04:db:e6:56:a6:77:53:7c:a8:f2:65:ee:43:e2:f9:
72:5c:e0:40:18:fa:09:d7:58:e5:ee:de:28:c5:91:
46:54:a4:2c:47:97:90:48:3e:45:cb:0e:1d:92:d9:
7a:36:d1:dc:08:fa:7a:e4:78:8b:df:e0:d9:36:75:
56:6d:0e:e5:eb:81:c9:89:4d:58:ff:cb:56:2c:3b:
56:9d:d3:58:2e:e0:17:f9:43:10:19:94:a1:89:cf:
ed:51:db:1d:fa:2e:cd:e9:d2:1c:20:d7:8d:59:df:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:67:A4:77:50:2F:3F:6F:81:44:F9:BB:B5:81:6E:A8:53:9E:AF
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:54:ba:94:df:0e:0d:f5:7a:ae:12:7a:a4:3e:03:db:a9:
de:f9:ab:00:15:ce:d7:b9:67:97:bb:23:ae:e1:bf:93:d7:9d:
4c:76:46:3a:19:7b:3d:63:17:ab:d6:c7:2a:92:2f:34:8b:80:
59:49:c0:1f:75:d6:72:f6:e1:de:35:3f:d8:53:1b:7d:c5:3d:
fc:e3:87:75:b6:84:1a:16:90:dc:22:ac:d1:9d:96:8c:80:a1:
f1:46:c9:e0:4b:21:e3:24:86:e1:5d:be:40:d4:f3:00:35:9f:
d4:f9:df:5f:d0:30:16:a1:53:40:3d:54:2b:5a:72:6b:cc:a2:
8a:f1:de:e9:95:a1:84:71:6e:16:06:08:b5:9a:fd:bd:74:94:
85:6f:14:cb:91:9d:dc:9f:a2:34:55:75:b2:ca:2a:29:1d:2e:
d5:cb:e5:e5:3f:33:6d:c0:bf:4d:52:9a:7a:a6:af:a6:11:13:
4f:91:a4:c2:62:36:c4:f9:6e:18:5e:7a:bd:03:33:82:60:26:
0c:98:06:b3:4e:82:1d:b3:8f:dc:2b:8a:7a:3e:6f:78:e2:e2:
bd:eb:bb:dc:fe:18:98:88:37:d1:1e:fe:90:97:93:e5:8a:1e:
03:42:5c:47:61:99:ad:cf:e6:16:13:2e:20:f3:c6:bb:b9:ea:
3a:e9:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:42 2026 by rpki-client