Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: GJkKDez7ouQmANrwKsmwosNaNvirfMDNzCRjjmQIp4I=
Subject key identifier: 38:B5:0B:FF:D1:44:BA:3D:96:AA:FF:35:E0:BF:C6:94:67:6B:37:02
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019E2F60185F698A30887550C244A8464095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0D37
Signing time: Sat 16 May 2026 06:01:27 +0000
Manifest this update: Sat 16 May 2026 06:01:27 +0000
Manifest next update: Sun 17 May 2026 06:01:27 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: VgppL9J0tqIK07aBSJIrnBBziFNTEZiMuANksV64kLE=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:60:18:5f:69:8a:30:88:75:50:c2:44:a8:46:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: May 16 06:01:27 2026 GMT
Not After : May 17 06:01:27 2026 GMT
Subject: CN=38b50bffd144ba3d96aaff35e0bfc694676b3702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:b5:71:36:9f:cc:b2:4e:0e:cb:8c:33:f3:
f3:c6:ed:50:46:45:2c:e1:32:d2:b1:69:92:76:29:
d8:46:66:93:92:86:f7:d3:f9:43:2d:27:eb:d6:9b:
1d:14:62:71:b6:5f:53:96:9a:7e:1c:8b:60:a9:a8:
c7:e8:a2:a7:bc:c7:93:fc:e9:2a:73:30:e3:2b:c5:
76:77:9e:cf:80:36:83:31:09:c4:cb:07:6f:c5:86:
00:36:5a:9f:8f:19:b7:30:90:89:26:76:3a:c7:90:
2a:f9:85:39:d9:d2:8f:81:0a:51:b0:17:95:82:34:
de:9a:0a:86:79:31:4d:71:76:93:4f:7a:c0:ed:04:
c0:8a:d9:c2:6f:8e:8a:7e:dc:c3:ba:13:5c:46:8c:
1d:91:4a:23:75:b1:81:48:c0:87:0b:01:38:16:56:
30:07:34:55:24:9b:46:ba:9e:8a:f7:fa:96:1e:69:
fe:3f:51:9b:56:8a:e4:6d:22:f6:c1:30:dd:67:ea:
d7:0b:6a:5f:6e:8b:a2:36:1c:ef:28:82:9d:75:83:
0e:db:6f:bc:5a:01:56:7c:31:7f:5e:f2:ad:56:6f:
4b:b5:7e:27:05:ed:70:62:12:b4:95:4f:76:1b:73:
fc:42:72:97:a0:95:4f:3f:4c:07:39:6a:4a:07:ca:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:0B:FF:D1:44:BA:3D:96:AA:FF:35:E0:BF:C6:94:67:6B:37:02
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ac:85:1b:43:e4:a8:06:52:02:be:63:2a:0f:e0:9a:e7:62:
48:af:dd:6d:35:c6:3c:8c:73:48:f3:91:6c:49:5f:be:63:7e:
8e:e2:67:d4:11:b8:65:6d:c8:f2:5f:16:f4:05:cc:6e:a9:71:
c6:0a:d2:97:94:0a:eb:7e:7c:76:06:53:5a:b2:2c:69:5a:f2:
14:ff:d1:51:6c:3d:24:13:7d:e8:5f:74:f6:34:90:91:19:af:
92:13:43:49:69:ca:65:fe:65:6d:70:9a:ac:3e:97:59:4b:24:
16:29:1e:f1:8c:96:db:3c:2f:4c:79:eb:9b:64:a0:96:ea:a4:
d7:1b:00:5f:b0:82:d8:0a:eb:8a:4a:f8:18:73:5a:61:d6:26:
7e:9e:e2:ff:55:a2:3e:d9:06:c9:08:cc:4e:b4:23:9a:e5:d9:
a4:08:05:f8:7c:05:30:c8:52:f2:ca:1f:e4:6f:1b:a0:b3:f6:
82:75:a2:82:91:4e:d8:f4:bf:fd:31:1f:47:c9:ac:76:68:f2:
52:21:56:7f:c1:3b:b0:3e:f5:66:56:16:36:ec:70:c5:9c:3f:
a3:e0:7e:44:c9:97:a6:9f:3e:57:86:9d:c4:92:8a:b9:94:4c:
b6:df:b1:b5:1d:c8:94:9f:db:9a:f7:cc:89:eb:d3:48:80:b8:
07:94:d9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vYBhfaYowiHVQwkSoRkCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0
YjRkOTAwHhcNMjYwNTE2MDYwMTI3WhcNMjYwNTE3MDYwMTI3WjAzMTEwLwYDVQQD
EygzOGI1MGJmZmQxNDRiYTNkOTZhYWZmMzVlMGJmYzY5NDY3NmIzNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIi1cTafzLJODsuMM/Pzxu1QRkUs
4TLSsWmSdinYRmaTkob30/lDLSfr1psdFGJxtl9Tlpp+HItgqajH6KKnvMeT/Okq
czDjK8V2d57PgDaDMQnEywdvxYYANlqfjxm3MJCJJnY6x5Aq+YU52dKPgQpRsBeV
gjTemgqGeTFNcXaTT3rA7QTAitnCb46KftzDuhNcRowdkUojdbGBSMCHCwE4FlYw
BzRVJJtGup6K9/qWHmn+P1GbVorkbSL2wTDdZ+rXC2pfbouiNhzvKIKddYMO22+8
WgFWfDF/XvKtVm9LtX4nBe1wYhK0lU92G3P8QnKXoJVPP0wHOWpKB8qlsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi1C//RRLo9lqr/NeC/xpRnazcCMB8GA1UdIwQY
MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt
ZDllYjhkNTczNjZjLzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj
LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKyFG0Pk
qAZSAr5jKg/gmudiSK/dbTXGPIxzSPORbElfvmN+juJn1BG4ZW3I8l8W9AXMbqlx
xgrSl5QK6358dgZTWrIsaVryFP/RUWw9JBN96F909jSQkRmvkhNDSWnKZf5lbXCa
rD6XWUskFike8YyW2zwvTHnrm2Sgluqk1xsAX7CC2Arrikr4GHNaYdYmfp7i/1Wi
PtkGyQjMTrQjmuXZpAgF+HwFMMhS8sof5G8boLP2gnWigpFO2PS//TEfR8msdmjy
UiFWf8E7sD71ZlYWNuxwxZw/o+B+RMmXpp8+V4adxJKKuZRMtt+xtR3IlJ/bmvfM
ievTSIC4B5TZcg==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:37 2026 by rpki-client