Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: 09eeZ8xHPECuZYZR0IGJpt76RL7w2lW+Nlm92EY6PF8=
Subject key identifier: F3:7F:81:AB:41:37:EF:B4:3E:9B:D1:94:B7:0A:54:A3:C0:D8:B7:7F
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019FA072788AA2D91CE367D24550F69B246D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 07F2
Signing time: Sun 26 Jul 2026 22:01:24 +0000
Manifest this update: Sun 26 Jul 2026 22:01:24 +0000
Manifest next update: Mon 27 Jul 2026 22:01:24 +0000
Files and hashes: 1: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: SO0Jopi+Md7rrKJtJ/A1Y7PMCYX8NnpbJNhtl9cOEvE=)
2: fXgOCRgOegnV1PEEj7p5LXQbx44.roa (hash: HzRwFTg0Qc4HS5vLz9pBbUoRgZKToj/APhUhfPnSo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:78:8a:a2:d9:1c:e3:67:d2:45:50:f6:9b:24:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Jul 26 22:01:24 2026 GMT
Not After : Jul 27 22:01:24 2026 GMT
Subject: CN=f37f81ab4137efb43e9bd194b70a54a3c0d8b77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:47:c3:c6:45:66:34:31:bd:22:10:dd:1a:
8c:a9:de:47:b8:0a:bd:7d:6a:51:8b:02:e6:fd:50:
ad:90:3e:4c:c0:46:d5:c9:d5:25:2f:9d:37:a8:17:
b7:28:2e:c8:1f:86:3d:6b:f8:80:16:30:13:71:73:
b0:20:81:f3:8a:fd:5f:73:0a:31:90:32:00:9d:ac:
97:0d:f1:39:f4:25:c9:03:fb:b9:74:ce:c0:94:50:
c8:3f:65:ab:77:32:7d:08:24:eb:5e:3d:b5:8f:c3:
48:22:20:89:ef:b9:f9:be:2a:16:2c:57:1b:68:f5:
dd:b1:66:71:e0:d9:66:d3:71:8b:84:79:85:cd:ff:
d0:9f:79:a0:b2:7a:6f:61:fb:77:d4:3d:fe:6f:d0:
36:30:44:83:65:e1:69:e1:27:4b:80:67:1f:28:db:
7d:8c:2f:b8:8c:b3:2d:eb:2e:0a:a9:2d:9d:56:17:
56:b1:72:9d:76:58:50:b8:2d:7c:fe:73:15:e9:ba:
ee:1f:1a:57:c5:cb:43:84:ee:e5:06:33:b6:ca:73:
95:b6:2b:cb:d8:d9:56:d8:5a:a4:10:e3:0e:91:25:
29:ed:8f:13:1d:fd:51:f2:05:71:f9:4c:01:04:52:
0d:8f:db:b5:f9:20:f4:7d:18:f1:40:4a:ca:a7:73:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:81:AB:41:37:EF:B4:3E:9B:D1:94:B7:0A:54:A3:C0:D8:B7:7F
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:c8:27:04:2a:bb:e4:39:7f:55:78:21:5f:2f:92:c7:b7:
e1:89:6f:14:99:28:a4:ea:c6:2e:ba:e8:58:d4:de:33:fb:4f:
51:f9:7b:b2:8b:c3:a7:d1:a0:90:4d:6b:ac:27:fa:5d:3d:de:
b9:b8:d9:49:70:c7:1b:db:6e:66:ff:1e:b4:12:90:01:86:b8:
94:cc:ba:db:41:bb:00:46:f4:73:00:09:ac:dc:cf:f4:2b:01:
98:26:c1:4f:2e:76:17:94:8e:74:88:80:26:72:9d:8c:89:fb:
fa:64:cf:f1:ae:a3:85:50:35:a9:31:74:3f:eb:76:6b:92:99:
d1:83:6b:9c:9a:86:d4:6e:ed:77:62:56:5f:ef:62:af:ad:93:
69:24:12:44:15:f5:eb:d0:fd:c8:ab:6f:99:95:30:ba:0e:a7:
36:79:e8:de:9c:b1:41:10:0c:05:99:6b:ce:e9:14:8b:d2:71:
89:a2:a6:66:a2:bd:c1:33:5c:3b:9c:67:08:4a:24:a1:8d:1b:
2c:e0:89:82:fc:dd:de:1e:b5:1f:9b:33:04:2a:70:3f:a5:d4:
69:80:3a:5c:9f:0a:61:a3:23:86:15:dc:d1:f7:72:a6:65:d2:
4a:2b:7a:58:98:6f:ac:b8:75:6e:68:bf:d9:d0:3b:a4:7f:46:
90:5f:fd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcniKotkc42fSRVD2myRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNzE1MDZiZmFiOTEyYzdiODE3MWI5NmI4NWEwOTliMTQw
ZTZjZDgwHhcNMjYwNzI2MjIwMTI0WhcNMjYwNzI3MjIwMTI0WjAzMTEwLwYDVQQD
EyhmMzdmODFhYjQxMzdlZmI0M2U5YmQxOTRiNzBhNTRhM2MwZDhiNzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q5Hw8ZFZjQxvSIQ3RqMqd5HuAq9
fWpRiwLm/VCtkD5MwEbVydUlL503qBe3KC7IH4Y9a/iAFjATcXOwIIHziv1fcwox
kDIAnayXDfE59CXJA/u5dM7AlFDIP2WrdzJ9CCTrXj21j8NIIiCJ77n5vioWLFcb
aPXdsWZx4Nlm03GLhHmFzf/Qn3mgsnpvYft31D3+b9A2MESDZeFp4SdLgGcfKNt9
jC+4jLMt6y4KqS2dVhdWsXKddlhQuC18/nMV6bruHxpXxctDhO7lBjO2ynOVtivL
2NlW2FqkEOMOkSUp7Y8THf1R8gVx+UwBBFINj9u1+SD0fRjxQErKp3PuDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN/gatBN++0PpvRlLcKVKPA2Ld/MB8GA1UdIwQY
MBaAFHJxUGv6uRLHuBcblrhaCZsUDmzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQt
ZDIyNTAzMmQxODU4LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQtZDIyNTAzMmQxODU4
LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABA3IJwQq
u+Q5f1V4IV8vkse34YlvFJkopOrGLrroWNTeM/tPUfl7sovDp9GgkE1rrCf6XT3e
ubjZSXDHG9tuZv8etBKQAYa4lMy620G7AEb0cwAJrNzP9CsBmCbBTy52F5SOdIiA
JnKdjIn7+mTP8a6jhVA1qTF0P+t2a5KZ0YNrnJqG1G7td2JWX+9ir62TaSQSRBX1
69D9yKtvmZUwug6nNnno3pyxQRAMBZlrzukUi9JxiaKmZqK9wTNcO5xnCEokoY0b
LOCJgvzd3h61H5szBCpwP6XUaYA6XJ8KYaMjhhXc0fdypmXSSit6WJhvrLh1bmi/
2dA7pH9GkF/9Cg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:59 2026 by rpki-client