Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: z3/HP52UNYDhBeEGbhPMI1gMu/uvVf18819ENQ9nIFE=
Subject key identifier: 7C:A6:85:C1:F1:C2:07:87:35:F6:C2:A1:8B:07:55:D0:70:10:8E:5C
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 01A1491830A6D7BB6D9895AF2858E47A8441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 1AA9
Signing time: Sat 17 Oct 2026 09:01:24 +0000
Manifest this update: Sat 17 Oct 2026 09:01:24 +0000
Manifest next update: Sun 18 Oct 2026 09:01:24 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: xvbOVY8MzbHw5zFA/qofmgcd/JKJKSOQXvh//Zyflyg=)
2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:18:30:a6:d7:bb:6d:98:95:af:28:58:e4:7a:84:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Oct 17 09:01:24 2026 GMT
Not After : Oct 18 09:01:24 2026 GMT
Subject: CN=7ca685c1f1c2078735f6c2a18b0755d070108e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:e2:ea:08:3d:64:fe:c7:f0:43:42:f1:75:
8f:13:ba:a1:65:93:72:25:2e:cb:60:a3:1e:a1:4f:
08:12:f9:d4:07:db:d5:3a:b7:53:eb:72:53:80:37:
90:f8:d9:e8:92:d4:0d:ea:58:9f:89:2a:c5:b4:06:
4b:91:20:8d:c9:e1:10:93:80:43:de:39:3d:b2:50:
8c:28:f3:54:14:f6:bf:76:2b:b5:84:ed:62:0f:59:
c8:3b:e4:3c:43:8c:9b:82:0c:ff:62:69:0f:7a:7f:
70:53:38:24:d8:1c:1f:c1:4f:30:74:e9:9f:f8:f8:
8e:6f:a0:e7:98:68:16:fb:6e:84:5e:4b:08:77:a3:
08:39:48:8a:29:ff:5e:78:2f:ab:bd:ed:00:a4:56:
4f:8e:2a:62:1c:b2:b0:21:d9:a1:76:8d:5e:3b:bb:
ce:9c:23:14:f0:e8:72:19:ab:dd:95:c9:0f:ce:70:
75:54:98:9a:aa:ec:49:3c:8f:bc:74:d2:40:0d:87:
f0:da:6c:07:86:48:74:01:a1:e3:86:23:85:a0:8d:
49:2c:24:87:3a:8d:d9:62:b1:ef:74:4d:0e:87:0b:
e2:d8:d3:2b:37:c7:40:0b:c9:26:e2:96:ef:2f:98:
00:24:00:ce:5f:b9:fd:a4:13:ce:e1:e8:71:52:81:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:85:C1:F1:C2:07:87:35:F6:C2:A1:8B:07:55:D0:70:10:8E:5C
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0e:b6:5e:bc:c3:97:9b:e6:84:c8:f1:3f:61:d7:55:f8:85:
0e:11:7d:5e:9a:e3:5d:58:a1:13:f2:f1:0f:cb:db:87:8d:44:
e7:54:9f:61:6c:72:98:0b:86:f7:ec:d9:f3:ec:c5:a2:f8:71:
35:b6:33:4e:a1:7e:57:25:70:86:c7:df:7e:2f:92:cd:30:6a:
22:87:f7:39:cd:db:bb:6e:bb:56:58:55:62:fd:ed:02:e7:1a:
0c:26:24:28:c2:ae:6f:d1:d2:a3:2e:49:1f:c2:d1:ab:3d:11:
5e:4b:46:4b:19:b9:79:a7:15:1c:92:5e:f2:6f:8a:66:90:9d:
75:80:4f:2c:20:9d:0f:3c:68:27:73:d8:bd:03:09:db:ea:36:
66:08:52:6d:26:55:2e:36:48:4b:01:e1:4f:1e:ec:92:c8:7b:
8d:f3:42:51:b3:f5:96:9f:50:fb:18:d8:1b:bc:38:09:5e:93:
2e:c0:e5:8f:de:c7:00:e1:c9:1e:50:40:ef:de:90:52:18:9d:
66:ac:ce:4e:11:b2:65:a1:d8:15:24:58:71:d2:28:70:ee:9d:
67:5e:68:25:79:52:97:91:ad:45:1a:66:e4:3c:0c:71:4c:c7:
ba:ed:6f:d3:19:3b:2d:d9:a8:81:f6:8e:56:e6:af:12:cc:44:
ec:3b:bc:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJGDCm17ttmJWvKFjkeoRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0
ZGYzMTkwHhcNMjYxMDE3MDkwMTI0WhcNMjYxMDE4MDkwMTI0WjAzMTEwLwYDVQQD
Eyg3Y2E2ODVjMWYxYzIwNzg3MzVmNmMyYTE4YjA3NTVkMDcwMTA4ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Li6gg9ZP7H8ENC8XWPE7qhZZNy
JS7LYKMeoU8IEvnUB9vVOrdT63JTgDeQ+NnoktQN6lifiSrFtAZLkSCNyeEQk4BD
3jk9slCMKPNUFPa/diu1hO1iD1nIO+Q8Q4ybggz/YmkPen9wUzgk2BwfwU8wdOmf
+PiOb6DnmGgW+26EXksId6MIOUiKKf9eeC+rve0ApFZPjipiHLKwIdmhdo1eO7vO
nCMU8OhyGavdlckPznB1VJiaquxJPI+8dNJADYfw2mwHhkh0AaHjhiOFoI1JLCSH
Oo3ZYrHvdE0Ohwvi2NMrN8dAC8km4pbvL5gAJADOX7n9pBPO4ehxUoEX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHymhcHxwgeHNfbCoYsHVdBwEI5cMB8GA1UdIwQY
MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt
ZDZiOTZlODhhNjExLzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx
LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATg62XrzD
l5vmhMjxP2HXVfiFDhF9XprjXVihE/LxD8vbh41E51SfYWxymAuG9+zZ8+zFovhx
NbYzTqF+VyVwhsfffi+SzTBqIof3Oc3bu267VlhVYv3tAucaDCYkKMKub9HSoy5J
H8LRqz0RXktGSxm5eacVHJJe8m+KZpCddYBPLCCdDzxoJ3PYvQMJ2+o2ZghSbSZV
LjZISwHhTx7sksh7jfNCUbP1lp9Q+xjYG7w4CV6TLsDlj97HAOHJHlBA796QUhid
ZqzOThGyZaHYFSRYcdIocO6dZ15oJXlSl5GtRRpm5DwMcUzHuu1v0xk7LdmogfaO
VuavEsxE7Du8sw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:52 2026 by rpki-client