Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: tBrLvApYopjOX2rNdgw/CXKa2T4pY/0v6dLuwbRF52Y=
Subject key identifier: 15:EF:73:84:0A:A0:1A:00:BF:A4:2A:0E:F6:BB:78:4B:02:48:CF:0D
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01A13CDC1FE951C6ACB11B092CB9B5C6ABD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 122B
Signing time: Thu 15 Oct 2026 00:00:21 +0000
Manifest this update: Thu 15 Oct 2026 00:00:21 +0000
Manifest next update: Fri 16 Oct 2026 00:00:21 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: qWCfi125C5bb7VusdysdRfIbPbRFEcAFRDH1tRANqq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:1f:e9:51:c6:ac:b1:1b:09:2c:b9:b5:c6:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Oct 15 00:00:21 2026 GMT
Not After : Oct 16 00:00:21 2026 GMT
Subject: CN=15ef73840aa01a00bfa42a0ef6bb784b0248cf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:b8:ae:52:c3:56:00:bc:00:14:2f:ce:3e:
55:00:b7:b3:be:05:c8:c1:cf:43:53:15:bd:02:bf:
67:06:72:24:8e:aa:e0:90:d5:43:a2:c1:19:4e:5b:
84:45:86:61:65:69:52:1a:3a:b6:13:00:cf:bf:a8:
1e:71:b3:6b:8d:0b:72:28:03:ae:6e:10:58:74:ee:
a2:16:81:ec:95:9e:8b:e1:9f:e0:d1:a5:13:bb:22:
7f:0a:a0:36:7f:a6:6d:35:16:6f:43:ea:31:f4:aa:
43:e5:0c:a8:ec:f2:c2:aa:6e:be:8e:3f:b6:60:54:
f3:78:86:ea:23:37:e7:4f:99:96:f9:bb:3a:00:f3:
70:25:b4:ad:42:9e:d6:72:31:80:f2:a8:90:81:d6:
5a:f9:a9:ea:d1:77:7d:28:0d:82:aa:09:59:84:06:
34:74:91:09:05:df:7d:a9:fd:43:2c:86:58:d6:d0:
4b:2f:2b:82:e5:d4:c5:6b:3f:5a:66:a2:0d:be:6b:
83:d9:b3:76:b4:d5:e9:8e:f7:ed:29:8a:48:7f:f8:
74:3f:8a:41:57:82:eb:c0:a5:bb:f7:52:f6:ef:5b:
ec:f9:e5:0b:0a:69:b5:05:46:dc:64:90:54:96:43:
86:61:c4:bd:44:40:c5:5d:4d:25:11:dc:39:38:86:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:73:84:0A:A0:1A:00:BF:A4:2A:0E:F6:BB:78:4B:02:48:CF:0D
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:92:0e:28:6e:23:a3:26:e7:f6:0a:2e:c3:2a:1d:f9:9f:0f:
18:c1:f0:24:de:a7:de:df:a8:0f:7f:3d:2d:37:79:ea:62:2d:
fa:c9:ca:3f:40:8c:76:56:b5:f7:2e:97:ed:5c:33:24:03:d0:
75:4a:95:7b:42:18:10:3b:9f:1b:6b:bd:4b:ba:dd:5d:12:61:
ca:ce:04:40:c0:3a:72:2d:bf:07:f3:dc:89:10:32:2f:22:c4:
79:df:1f:b0:b0:1e:94:39:9a:fd:50:38:ca:8c:ca:b1:54:bb:
c1:cd:1e:d2:c6:1f:3a:e9:4d:92:44:e2:26:4e:dd:71:94:36:
7f:ef:15:69:ce:e8:1d:ec:78:99:26:9b:b7:87:cf:b6:91:16:
fe:a3:ad:64:b1:b5:af:a3:cc:bd:3e:2d:25:ad:f0:10:9e:9e:
c7:40:d1:72:fb:5f:e1:28:80:5c:aa:12:19:5a:ac:d4:a0:a4:
08:57:d7:af:4b:c8:ef:11:12:be:14:73:76:bb:21:02:75:20:
10:45:f9:57:1b:44:7c:a0:fa:ed:da:64:35:88:6b:5c:99:28:
54:ad:5f:c3:b7:aa:86:4f:20:20:89:e0:ca:33:a7:e2:7c:f7:
e9:f8:74:a9:7d:4e:78:9f:21:fc:52:ff:8a:71:01:a8:5f:53:
07:5b:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:14 2026 by rpki-client