Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: Mt7BGbEvsghgapjKeEe/azD66ib9ZywJKEdKeMcSy/4=
Subject key identifier: 79:08:A3:A1:26:B7:E4:41:5B:DF:42:13:A6:00:88:EF:37:E6:E1:78
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 01A000CA9A2323C5C1F185D1EB038669C4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0E28
Signing time: Fri 14 Aug 2026 15:01:12 +0000
Manifest this update: Fri 14 Aug 2026 15:01:12 +0000
Manifest next update: Sat 15 Aug 2026 15:01:12 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: ilvHhj/gMCUlrdGcLIqHCkytLiTBXBSYnECkUVPIDKQ=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:9a:23:23:c5:c1:f1:85:d1:eb:03:86:69:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Aug 14 15:01:12 2026 GMT
Not After : Aug 15 15:01:12 2026 GMT
Subject: CN=7908a3a126b7e4415bdf4213a60088ef37e6e178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:2d:28:7b:23:39:34:e8:bb:51:b5:48:31:
05:70:ad:32:3c:fe:13:d6:d3:8e:9a:d7:01:f4:5e:
70:29:a9:0a:d8:e5:86:ae:75:3b:26:39:39:ea:e4:
4a:a0:03:92:0b:19:07:d4:db:a6:3e:43:90:21:d6:
13:ef:a6:89:31:b6:a8:16:aa:83:f5:eb:5f:c3:e7:
65:e4:dd:21:ca:a8:8f:96:2a:e7:a7:e2:f4:de:61:
c0:c2:4d:95:ab:d2:a4:0c:be:a3:3e:47:54:55:17:
9e:10:d8:4d:4c:d9:28:64:83:6e:db:45:6c:16:a1:
df:7e:b1:1a:cb:15:29:46:5c:77:19:b5:11:70:26:
6a:9f:af:8e:bf:02:ca:22:87:77:c3:3b:3d:7e:0e:
6d:a7:f6:46:09:1f:66:88:85:12:6b:35:4f:29:23:
1e:22:61:7e:a6:78:d1:e2:81:0d:70:ef:a6:5b:05:
f2:60:d6:a4:8f:d4:36:3f:45:e9:fe:09:73:0c:bb:
62:d0:7f:f6:34:1e:8c:00:29:bc:b0:34:01:f9:89:
8e:89:70:26:96:f7:fc:e4:1f:6b:cb:17:5e:49:b8:
c6:75:a3:9f:d8:d9:31:fe:b0:7c:a1:2c:d0:5f:f7:
4e:2e:86:1c:7f:b5:fd:3f:b8:a7:d8:fa:3d:80:fc:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:08:A3:A1:26:B7:E4:41:5B:DF:42:13:A6:00:88:EF:37:E6:E1:78
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:93:51:88:64:41:ee:26:4c:7c:4c:1b:ed:34:d3:e6:c3:d1:
77:3c:eb:1c:00:e5:b7:4e:3f:db:67:34:ca:c4:9b:a0:e3:9b:
b5:4e:be:d9:e7:be:40:47:29:ed:8b:3b:ba:49:ee:51:8d:42:
da:50:1a:8a:87:c0:38:ad:a4:bd:e1:04:c7:cd:84:ab:25:c3:
f5:32:a0:f2:8e:c5:32:51:56:92:31:c5:be:39:93:c1:77:8e:
29:6b:13:45:4e:3d:13:97:c3:d1:2f:78:52:7b:58:84:d2:dd:
4b:fc:d9:10:63:24:25:f0:03:ca:79:4a:95:15:aa:ce:14:e5:
67:2c:b1:ce:9f:a6:23:1d:4a:8b:76:fb:96:f4:22:06:46:6d:
c2:bd:87:fa:74:64:8b:c4:24:f5:06:f3:65:5d:80:2e:71:e7:
da:40:ce:39:dd:ea:87:30:db:71:59:2e:a6:e9:86:5f:71:92:
f2:86:47:28:96:af:d8:9c:e7:1b:ba:9d:4f:87:93:4d:83:90:
42:0b:37:b3:0b:07:19:d6:d3:4d:5f:6e:fc:e3:ef:f8:af:11:
58:59:f0:65:f2:86:89:1d:56:b7:a1:23:e6:38:e5:fe:c0:99:
03:76:63:a5:39:9f:ab:a1:ee:a1:96:b1:e8:92:3d:af:20:c7:
1e:d5:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:27:42 2026 by rpki-client