Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json)
Hash identifier: iLr5z74OiaDaco2bfOdSOjINAXkweGODmslxyNlt7IY=
Subject key identifier: 76:31:6C:8E:FF:9C:18:58:B8:D7:53:F5:E4:4F:50:DB:C0:E1:7F:24
Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Certificate serial: 01A0005C960F962C1F8FCF3A83F48D9CC134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
Manifest number: 14D4
Signing time: Fri 14 Aug 2026 13:01:02 +0000
Manifest this update: Fri 14 Aug 2026 13:01:02 +0000
Manifest next update: Sat 15 Aug 2026 13:01:02 +0000
Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: O59j+gq3kDX1+kDyfkf4bP+a+rHOLoCp0Drp1Lw+Kn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:96:0f:96:2c:1f:8f:cf:3a:83:f4:8d:9c:c1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956
Validity
Not Before: Aug 14 13:01:02 2026 GMT
Not After : Aug 15 13:01:02 2026 GMT
Subject: CN=76316c8eff9c1858b8d753f5e44f50dbc0e17f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:95:93:da:ff:f2:62:a0:24:9e:be:d8:de:
99:7c:20:8d:51:b5:53:11:3f:a7:81:d8:04:6a:50:
d3:30:12:dc:94:44:24:d3:05:81:89:a9:db:99:17:
dd:12:7c:9b:2e:f3:f1:bc:c1:a0:83:17:e7:2f:62:
55:46:db:f8:0b:37:7a:5a:a1:ca:be:94:e3:62:75:
53:8c:50:e7:27:2e:37:81:12:4d:25:70:bb:97:7c:
84:62:55:1d:4a:48:5d:98:87:12:2e:bf:56:92:7d:
30:9e:ba:bc:d7:5c:a4:bb:01:d1:b8:7c:59:ec:4b:
0b:1d:1d:77:f1:fe:41:3d:dc:12:2b:8f:ce:eb:17:
bb:24:f0:67:11:0e:15:d4:47:39:b0:59:62:5f:e7:
ab:a3:81:3e:99:54:de:bd:44:3f:3d:e6:b1:85:32:
85:4c:ab:a7:46:3b:cc:f0:b2:f0:77:f1:56:cd:76:
83:8e:db:30:b2:4e:72:55:d7:d4:90:8b:db:99:4c:
1c:96:4d:a6:dc:e7:7c:cb:91:69:a7:17:f6:12:50:
fc:35:22:5c:83:56:9f:5e:59:0a:97:4d:ef:a6:f0:
47:08:49:a9:d2:be:79:45:72:92:1e:68:15:fd:72:
cd:a8:f9:3f:3b:dc:e1:6d:23:a6:e0:21:8b:15:2e:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:6C:8E:FF:9C:18:58:B8:D7:53:F5:E4:4F:50:DB:C0:E1:7F:24
X509v3 Authority Key Identifier:
keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:b0:d4:95:81:6a:e8:e4:7d:45:e5:80:aa:10:fd:3e:69:
41:6c:05:5e:de:fa:1f:59:d6:1b:9e:25:55:f9:30:bf:75:0c:
34:7e:3f:c2:29:d4:2b:7e:bb:16:c0:6d:16:34:c6:d8:c4:2e:
08:0d:24:c3:7d:a2:db:44:27:fe:7b:74:2d:f4:7c:ec:79:11:
d4:ef:b8:1e:cd:7b:c0:bf:56:3e:54:67:de:26:cd:35:c0:e0:
ac:d0:6c:10:53:df:c3:92:3c:43:1a:bd:f3:99:5c:e9:20:e4:
21:47:0e:96:a2:e0:19:30:16:2b:ca:11:7d:b7:69:45:04:a3:
f6:21:27:1f:3c:4f:6a:a3:20:f7:5a:99:20:2d:b4:25:d6:8e:
98:8b:65:41:50:65:ab:86:89:0b:29:5e:40:4f:2c:b1:f7:42:
d5:d4:57:8d:cd:ff:2d:74:b6:b5:30:72:84:e7:11:e5:a1:d5:
df:7e:71:d2:58:c9:2b:d3:67:3c:a2:31:82:47:71:19:3d:39:
f0:61:6a:58:f7:72:99:3f:1f:5d:bf:19:89:0a:79:fd:f9:de:
d2:e8:49:67:62:45:9a:fc:a5:0c:b0:d0:cf:06:55:11:96:ce:
5a:8f:fa:3c:4f:00:35:a8:af:4d:4d:06:2e:f4:6f:ad:42:a5:
cc:d7:cc:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXJYPliwfj886g/SNnME0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjMzODdiZTZkMjBkNGEyY2UxM2NjMDkyZTg3Zjc3N2I4
Yjk5NTYwHhcNMjYwODE0MTMwMTAyWhcNMjYwODE1MTMwMTAyWjAzMTEwLwYDVQQD
Eyg3NjMxNmM4ZWZmOWMxODU4YjhkNzUzZjVlNDRmNTBkYmMwZTE3ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPiVk9r/8mKgJJ6+2N6ZfCCNUbVT
ET+ngdgEalDTMBLclEQk0wWBianbmRfdEnybLvPxvMGggxfnL2JVRtv4Czd6WqHK
vpTjYnVTjFDnJy43gRJNJXC7l3yEYlUdSkhdmIcSLr9Wkn0wnrq811ykuwHRuHxZ
7EsLHR138f5BPdwSK4/O6xe7JPBnEQ4V1Ec5sFliX+ero4E+mVTevUQ/PeaxhTKF
TKunRjvM8LLwd/FWzXaDjtswsk5yVdfUkIvbmUwclk2m3Od8y5Fppxf2ElD8NSJc
g1afXlkKl03vpvBHCEmp0r55RXKSHmgV/XLNqPk/O9zhbSOm4CGLFS5rgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYxbI7/nBhYuNdT9eRPUNvA4X8kMB8GA1UdIwQY
MBaAFAuzOHvm0g1KLOE8wJLof3d7i5lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgt
NDQwNGQ3ZWU3MTIyLzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgtNDQwNGQ3ZWU3MTIy
LzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlew1JWB
aujkfUXlgKoQ/T5pQWwFXt76H1nWG54lVfkwv3UMNH4/winUK367FsBtFjTG2MQu
CA0kw32i20Qn/nt0LfR87HkR1O+4Hs17wL9WPlRn3ibNNcDgrNBsEFPfw5I8Qxq9
85lc6SDkIUcOlqLgGTAWK8oRfbdpRQSj9iEnHzxPaqMg91qZIC20JdaOmItlQVBl
q4aJCyleQE8ssfdC1dRXjc3/LXS2tTByhOcR5aHV335x0ljJK9NnPKIxgkdxGT05
8GFqWPdymT8fXb8ZiQp5/fne0uhJZ2JFmvylDLDQzwZVEZbOWo/6PE8ANaivTU0G
LvRvrUKlzNfMTQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:56 2026 by rpki-client