Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: EtZm1ktDDW4X5BiH4GEUsURLfyzARFiiLOcLdF4tpNQ=
Subject key identifier: 41:C5:A6:8D:A6:2A:50:47:31:AB:FA:14:DF:AE:73:E3:CF:7B:5B:CB
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 01A08BD63C1FFA720DFAE7BC522339DC9453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0EFB
Signing time: Thu 10 Sep 2026 15:01:07 +0000
Manifest this update: Thu 10 Sep 2026 15:01:07 +0000
Manifest next update: Fri 11 Sep 2026 15:01:07 +0000
Files and hashes: 1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: Zzpkgwk7TXnFamusvlmhfAGqbOiiehQ+6/HO21u+pW4=)
2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:3c:1f:fa:72:0d:fa:e7:bc:52:23:39:dc:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Sep 10 15:01:07 2026 GMT
Not After : Sep 11 15:01:07 2026 GMT
Subject: CN=41c5a68da62a504731abfa14dfae73e3cf7b5bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:09:4a:93:8e:96:d4:19:91:58:74:6e:48:
62:d6:f4:e4:6e:4b:7b:1a:eb:f8:97:a9:d0:cf:28:
35:3f:7d:92:d2:8d:62:c2:7d:aa:b1:99:e3:14:e0:
f0:bb:30:2a:ca:e8:a2:f9:82:0f:cf:1b:4a:db:c0:
0a:93:02:39:b9:cd:58:96:b3:70:91:11:76:b4:7b:
ea:4e:d1:3e:cf:f2:a6:00:96:63:5e:57:ea:88:77:
35:37:47:37:22:b9:a8:e9:f2:1b:2b:8a:a2:67:12:
9c:60:c8:cb:a3:8c:d8:53:13:56:10:7d:3f:da:e3:
a3:ad:7e:e6:c3:02:c2:11:87:fb:58:c2:cd:87:00:
b1:3e:3b:73:ac:3d:2b:01:1b:b2:2b:d8:c9:d6:c7:
99:95:58:f6:90:8d:0a:d3:e1:9d:70:12:70:fe:ee:
02:b5:a3:07:20:c8:e0:b8:3b:e6:f5:26:e6:90:80:
d9:31:6c:65:79:cd:0f:12:3c:cf:03:85:ae:ef:38:
ca:e8:8d:6e:6b:42:88:95:22:24:c6:08:90:2d:2e:
31:14:85:c0:40:4d:37:11:04:4d:4f:3f:e1:cf:b9:
25:f7:0b:f6:d4:70:00:fe:e3:9d:66:fc:17:06:bd:
0e:cf:26:46:35:cc:f3:22:7e:ba:b0:05:3a:a0:5b:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:A6:8D:A6:2A:50:47:31:AB:FA:14:DF:AE:73:E3:CF:7B:5B:CB
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:60:9e:37:90:52:51:37:f8:0f:b3:09:c9:91:81:54:0d:87:
b9:f0:d1:a4:da:d5:a1:26:e9:52:09:29:ee:10:9a:fa:50:38:
50:e3:76:d8:e1:00:27:af:f7:3d:23:73:0d:5a:a3:2e:36:6a:
07:7d:54:2b:73:5a:ae:45:d1:63:92:ff:2c:2e:b7:33:2f:82:
b5:09:a1:3e:61:60:95:59:3a:30:0b:c6:94:69:5b:f6:b7:ab:
4c:49:ea:d5:5d:bd:50:18:69:4b:dc:0b:d8:86:40:5a:dd:e3:
87:83:86:c9:c8:03:d3:71:d9:e3:a1:29:a7:7d:6c:5b:8b:1d:
c6:51:d3:c6:54:9f:79:d2:7b:d7:54:d5:15:eb:05:9f:04:33:
1d:5d:d4:6e:20:8a:6e:ef:2f:12:2c:69:08:a5:de:be:11:3e:
e2:d6:68:89:cc:15:b0:30:ed:ac:0a:78:3f:6b:fe:f8:14:ef:
41:86:a9:1a:94:be:86:c7:8d:48:8a:54:d5:5a:76:e4:0f:74:
55:71:a8:0c:76:98:9b:98:f7:fd:fb:82:38:e5:72:01:bf:b7:
2c:e2:12:a6:47:0a:70:33:29:f9:a2:fe:21:2b:1b:3f:41:42:
2e:8c:1b:d7:8a:a2:f2:f7:54:02:ae:66:67:40:a3:2b:6e:c0:
00:c8:39:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1jwf+nIN+ue8UiM53JRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0
MzVlY2UwHhcNMjYwOTEwMTUwMTA3WhcNMjYwOTExMTUwMTA3WjAzMTEwLwYDVQQD
Eyg0MWM1YTY4ZGE2MmE1MDQ3MzFhYmZhMTRkZmFlNzNlM2NmN2I1YmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6oJSpOOltQZkVh0bkhi1vTkbkt7
Guv4l6nQzyg1P32S0o1iwn2qsZnjFODwuzAqyuii+YIPzxtK28AKkwI5uc1YlrNw
kRF2tHvqTtE+z/KmAJZjXlfqiHc1N0c3Irmo6fIbK4qiZxKcYMjLo4zYUxNWEH0/
2uOjrX7mwwLCEYf7WMLNhwCxPjtzrD0rARuyK9jJ1seZlVj2kI0K0+GdcBJw/u4C
taMHIMjguDvm9SbmkIDZMWxlec0PEjzPA4Wu7zjK6I1ua0KIlSIkxgiQLS4xFIXA
QE03EQRNTz/hz7kl9wv21HAA/uOdZvwXBr0OzyZGNczzIn66sAU6oFszRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHFpo2mKlBHMav6FN+uc+PPe1vLMB8GA1UdIwQY
MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt
OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl
LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2CeN5BS
UTf4D7MJyZGBVA2HufDRpNrVoSbpUgkp7hCa+lA4UON22OEAJ6/3PSNzDVqjLjZq
B31UK3NarkXRY5L/LC63My+CtQmhPmFglVk6MAvGlGlb9rerTEnq1V29UBhpS9wL
2IZAWt3jh4OGycgD03HZ46Epp31sW4sdxlHTxlSfedJ711TVFesFnwQzHV3UbiCK
bu8vEixpCKXevhE+4tZoicwVsDDtrAp4P2v++BTvQYapGpS+hseNSIpU1Vp25A90
VXGoDHaYm5j3/fuCOOVyAb+3LOISpkcKcDMp+aL+ISsbP0FCLowb14qi8vdUAq5m
Z0CjK27AAMg5Aw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:42 2026 by rpki-client