Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: 1bZNgAa4uF530hQj4KNIRa4h9hH6LYHel+8YHiQqUsM=
Subject key identifier: 57:7D:9B:DE:3E:D7:9F:E4:63:F7:F3:D1:4C:51:48:2E:1C:B4:CB:5E
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 01A00093625AECC0C6C439DF6FA7958942FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 13CA
Signing time: Fri 14 Aug 2026 14:00:53 +0000
Manifest this update: Fri 14 Aug 2026 14:00:53 +0000
Manifest next update: Sat 15 Aug 2026 14:00:53 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: duD10WiscNF+GiV45vI8c3zccJT0WuWTsobARFsPVhs=)
2: n9FzbJINgcYwHJShublPjUzZTBM.roa (hash: BpAt1xbMGdaHlLf4Q+CKPCiPeYCdr0TW6Zq6Hho4rko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:62:5a:ec:c0:c6:c4:39:df:6f:a7:95:89:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Aug 14 14:00:53 2026 GMT
Not After : Aug 15 14:00:53 2026 GMT
Subject: CN=577d9bde3ed79fe463f7f3d14c51482e1cb4cb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:1c:84:85:81:3c:60:02:c3:5a:68:cd:5a:
2e:14:16:56:ab:88:2b:5c:6b:86:26:a7:f4:df:64:
a2:23:a1:d3:db:06:1c:cb:f8:f6:6d:d9:87:14:b4:
09:b5:ef:02:a6:e3:52:8c:98:88:73:3a:46:91:04:
e6:d5:4e:19:8a:26:f1:bf:9a:d3:ee:ec:75:dc:a6:
89:fa:b6:b1:4c:0b:d0:d8:4b:da:fe:2f:b1:3c:c8:
52:78:ad:82:bd:17:8e:5f:df:cd:f2:71:7f:9e:85:
f5:c6:e7:5b:a7:2b:b0:f8:f4:29:8e:32:6e:1c:1e:
36:2e:c6:44:1a:c9:be:cf:34:3a:7d:51:b5:47:11:
7b:d1:86:14:31:87:b9:b6:21:1e:8d:f4:18:df:f5:
a9:bc:23:24:d2:d3:7d:4f:47:24:ae:95:04:7d:a8:
86:5c:e6:06:7d:eb:de:a6:fb:b1:ca:47:0c:1f:95:
de:69:57:98:42:c5:af:3f:3b:9c:4d:37:60:a8:74:
e5:73:9d:8a:ad:94:e8:fc:69:eb:5b:ea:f5:cc:a3:
14:bd:73:59:52:f8:e7:f5:58:63:b6:5b:c3:52:33:
34:b1:58:67:41:d0:69:96:00:cc:6b:5c:19:69:97:
95:ff:03:c8:73:c8:62:55:0a:ad:fb:5f:c6:48:5d:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:9B:DE:3E:D7:9F:E4:63:F7:F3:D1:4C:51:48:2E:1C:B4:CB:5E
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:05:16:d8:48:af:d7:c3:aa:c0:6c:1b:15:ac:4b:8a:d4:
ae:93:56:7e:33:93:8a:73:25:2f:36:80:8f:79:e8:6d:37:ce:
fd:37:12:1a:b2:c0:83:7f:33:e1:77:20:d9:29:a6:1e:34:b7:
d9:37:a7:79:53:c5:19:10:18:f7:b1:99:f0:3e:83:a1:ac:11:
3a:95:05:19:6b:01:12:d0:38:49:78:67:fe:4d:62:0a:cd:6c:
4e:45:89:76:ec:ec:3a:61:32:3e:b2:d1:c5:1e:fd:d5:73:9d:
dc:5e:f1:44:21:0d:6d:18:c7:5b:c4:11:44:50:e5:f9:7a:01:
7c:b9:a2:bd:a7:8f:15:55:50:df:12:af:8b:69:37:7d:10:df:
69:31:f1:c4:20:6b:22:a3:b9:ff:a2:57:0a:66:04:1f:8c:ae:
ef:ff:36:de:41:06:0e:34:32:63:ab:3d:c0:c2:75:da:87:67:
0e:1e:99:b0:23:7a:99:51:bc:81:b3:07:2c:d1:fc:35:bc:3e:
48:07:86:f8:8e:2e:88:10:ef:09:08:f2:c9:f3:60:48:2e:60:
43:5b:23:ce:2f:09:8a:13:3d:f4:89:ad:3b:d4:4e:f1:ef:00:
88:1d:32:9a:22:26:02:31:d9:d2:08:2b:ee:31:2c:7c:10:54:
62:ce:70:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk2Ja7MDGxDnfb6eViUL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDAzZTcxZWY4YzNkOTczY2U3NmQ0MjA0MmY3ZGZhMTg5
MTY4OGIwHhcNMjYwODE0MTQwMDUzWhcNMjYwODE1MTQwMDUzWjAzMTEwLwYDVQQD
Eyg1NzdkOWJkZTNlZDc5ZmU0NjNmN2YzZDE0YzUxNDgyZTFjYjRjYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7MchIWBPGACw1pozVouFBZWq4gr
XGuGJqf032SiI6HT2wYcy/j2bdmHFLQJte8CpuNSjJiIczpGkQTm1U4Ziibxv5rT
7ux13KaJ+raxTAvQ2Eva/i+xPMhSeK2CvReOX9/N8nF/noX1xudbpyuw+PQpjjJu
HB42LsZEGsm+zzQ6fVG1RxF70YYUMYe5tiEejfQY3/WpvCMk0tN9T0ckrpUEfaiG
XOYGfevepvuxykcMH5XeaVeYQsWvPzucTTdgqHTlc52KrZTo/GnrW+r1zKMUvXNZ
Uvjn9VhjtlvDUjM0sVhnQdBplgDMa1wZaZeV/wPIc8hiVQqt+1/GSF2pnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd9m94+15/kY/fz0UxRSC4ctMteMB8GA1UdIwQY
MBaAFAtAPnHvjD2XPOdtQgQvffoYkWiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQt
MGM2ODc3N2E0MDE5LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQtMGM2ODc3N2E0MDE5
LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5EFFthI
r9fDqsBsGxWsS4rUrpNWfjOTinMlLzaAj3nobTfO/TcSGrLAg38z4Xcg2SmmHjS3
2TeneVPFGRAY97GZ8D6DoawROpUFGWsBEtA4SXhn/k1iCs1sTkWJduzsOmEyPrLR
xR791XOd3F7xRCENbRjHW8QRRFDl+XoBfLmivaePFVVQ3xKvi2k3fRDfaTHxxCBr
IqO5/6JXCmYEH4yu7/823kEGDjQyY6s9wMJ12odnDh6ZsCN6mVG8gbMHLNH8Nbw+
SAeG+I4uiBDvCQjyyfNgSC5gQ1sjzi8JihM99ImtO9RO8e8AiB0ymiImAjHZ0ggr
7jEsfBBUYs5wXg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:59 2026 by rpki-client