Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: dtVavjeAzfgTn2hg3cFKuvRBpybwtA2fIMys0e4+wHM=
Subject key identifier: 1F:66:22:7E:C9:32:E3:CE:A4:54:00:4F:71:0D:BB:9D:39:27:08:CC
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 01A10D399065308AB0056773BC670A4262E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0EB3
Signing time: Mon 05 Oct 2026 18:00:38 +0000
Manifest this update: Mon 05 Oct 2026 18:00:38 +0000
Manifest next update: Tue 06 Oct 2026 18:00:38 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: p41SSDZhGXZ8de4nJmSf2MKUB3uCXY+m2hW1Lh4JYIs=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:39:90:65:30:8a:b0:05:67:73:bc:67:0a:42:62:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Oct 5 18:00:38 2026 GMT
Not After : Oct 6 18:00:38 2026 GMT
Subject: CN=1f66227ec932e3cea454004f710dbb9d392708cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:7a:9f:bf:d4:30:b6:27:61:0b:3b:ee:f6:
bc:c3:5c:b2:4f:af:a2:df:02:f6:48:b6:98:11:36:
56:52:cc:b2:f8:80:8e:c7:d5:cf:b4:8e:b0:5e:af:
30:08:d6:4e:14:5a:ab:48:dd:84:a9:80:9d:65:75:
8f:c5:0d:7c:1e:e7:ef:58:02:d7:b0:cc:d9:bd:3f:
df:e5:97:97:da:84:c3:f5:e2:eb:89:ef:91:84:b0:
30:ca:06:46:0d:16:a7:60:79:89:3d:6c:6b:36:2e:
07:52:60:a0:ca:c1:b5:07:f9:e7:52:0b:42:1a:71:
e6:1d:6f:18:86:54:6d:14:32:7e:1d:57:7b:04:cf:
94:97:eb:60:d7:0a:56:8d:bf:bd:73:b5:2d:bd:3c:
f7:2a:f7:0c:f1:9a:4f:ea:b5:cc:02:3e:11:c4:ba:
b2:b4:18:ce:17:77:d2:be:13:b3:cf:d5:da:f6:da:
25:f7:a6:dc:21:f9:24:9a:db:ca:ce:df:8d:07:01:
35:2c:6f:5f:36:65:7c:41:a1:7b:7b:c1:af:6d:da:
b8:42:d3:f7:2d:04:40:e8:e7:e8:d1:b7:b4:6e:3e:
d6:8a:8d:38:eb:45:a3:5b:c8:bb:51:66:68:e8:38:
09:c1:4b:fe:07:ac:3d:55:32:f4:3b:c4:e1:e2:98:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:66:22:7E:C9:32:E3:CE:A4:54:00:4F:71:0D:BB:9D:39:27:08:CC
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b9:31:19:d2:8c:de:4d:1d:a8:20:57:86:6d:14:3d:84:eb:
13:82:51:6f:d8:31:89:e6:48:12:b1:9e:67:cb:45:d8:93:e2:
60:12:6d:05:07:3d:76:2c:f0:3c:de:53:b3:b7:3a:98:e2:7f:
67:f2:54:14:b1:58:81:c0:48:e8:7d:21:d9:66:96:9b:6e:d0:
c0:87:b9:6f:32:ca:6d:04:46:bf:4d:a8:89:e3:82:1b:05:75:
21:25:e4:32:3a:48:26:2c:20:d4:da:d0:c2:ec:99:08:40:7c:
39:91:94:dc:bd:64:81:8f:98:58:57:49:cc:74:e7:59:33:f9:
c7:b9:4e:34:23:9a:09:ec:ce:f1:6f:b5:df:cb:7d:cf:27:e8:
02:46:f4:f4:b3:d7:c2:0d:32:79:c2:c2:71:5a:fe:b7:63:0a:
e6:b5:4d:55:e9:00:b9:18:67:9e:47:8c:2d:35:83:56:ec:c3:
15:e0:9a:a7:18:15:36:e1:f4:55:ba:e2:23:d7:e1:37:e2:0b:
89:c7:73:48:53:d2:9b:36:52:c2:05:e2:e5:c1:c6:d9:88:7c:
35:81:0e:82:46:cb:31:82:c2:4d:49:1b:9a:6b:72:bc:c8:db:
63:3e:40:c8:21:65:57:eb:35:24:12:39:db:7e:a8:ce:36:5a:
b4:c6:5a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaENOZBlMIqwBWdzvGcKQmLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0
YjRkOTAwHhcNMjYxMDA1MTgwMDM4WhcNMjYxMDA2MTgwMDM4WjAzMTEwLwYDVQQD
EygxZjY2MjI3ZWM5MzJlM2NlYTQ1NDAwNGY3MTBkYmI5ZDM5MjcwOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfB6n7/UMLYnYQs77va8w1yyT6+i
3wL2SLaYETZWUsyy+ICOx9XPtI6wXq8wCNZOFFqrSN2EqYCdZXWPxQ18HufvWALX
sMzZvT/f5ZeX2oTD9eLrie+RhLAwygZGDRanYHmJPWxrNi4HUmCgysG1B/nnUgtC
GnHmHW8YhlRtFDJ+HVd7BM+Ul+tg1wpWjb+9c7UtvTz3KvcM8ZpP6rXMAj4RxLqy
tBjOF3fSvhOzz9Xa9tol96bcIfkkmtvKzt+NBwE1LG9fNmV8QaF7e8Gvbdq4QtP3
LQRA6Ofo0be0bj7Wio0460WjW8i7UWZo6DgJwUv+B6w9VTL0O8Th4pilNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9mIn7JMuPOpFQAT3ENu505JwjMMB8GA1UdIwQY
MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt
ZDllYjhkNTczNjZjLzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj
LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7kxGdKM
3k0dqCBXhm0UPYTrE4JRb9gxieZIErGeZ8tF2JPiYBJtBQc9dizwPN5Ts7c6mOJ/
Z/JUFLFYgcBI6H0h2WaWm27QwIe5bzLKbQRGv02oieOCGwV1ISXkMjpIJiwg1NrQ
wuyZCEB8OZGU3L1kgY+YWFdJzHTnWTP5x7lONCOaCezO8W+138t9zyfoAkb09LPX
wg0yecLCcVr+t2MK5rVNVekAuRhnnkeMLTWDVuzDFeCapxgVNuH0VbriI9fhN+IL
icdzSFPSmzZSwgXi5cHG2Yh8NYEOgkbLMYLCTUkbmmtyvMjbYz5AyCFlV+s1JBI5
236ozjZatMZabg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 02:12:16 2026 by rpki-client