Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: A+2Jq1CqN4+JVZUu0RSqAAKnD2uqNi0MpQDKTSfWOIY=
Subject key identifier: 0C:F8:A4:14:E0:E7:4B:3E:2F:66:14:C7:8A:8F:1E:E8:EB:2B:D5:9B
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 01A00101B04135688862B14C877DFFF1C5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 0A77
Signing time: Fri 14 Aug 2026 16:01:22 +0000
Manifest this update: Fri 14 Aug 2026 16:01:22 +0000
Manifest next update: Sat 15 Aug 2026 16:01:22 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: LPRD1oRoj9qNVTC9w6sFbk+KopTH9kwT3vRM+BbNBTs=)
2: ZVMWIA2gRCKHPJyp2BWSpGeeJhw.roa (hash: rWWFhgQdz68f3CP7zyhwG/M5s65BBuAVvNtPkXYPboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:b0:41:35:68:88:62:b1:4c:87:7d:ff:f1:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Aug 14 16:01:22 2026 GMT
Not After : Aug 15 16:01:22 2026 GMT
Subject: CN=0cf8a414e0e74b3e2f6614c78a8f1ee8eb2bd59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:e4:da:bb:45:5a:b1:ee:0f:0c:99:41:a6:
f7:b8:e7:78:5d:21:22:12:51:38:90:f5:27:e3:b7:
ca:e5:8d:23:a4:38:95:f7:ea:af:d8:dc:f9:c8:64:
54:6f:e3:47:27:2a:bf:94:f2:03:0f:db:f2:aa:b6:
70:62:06:fc:80:3e:12:de:2f:c4:d3:c1:34:32:e6:
ce:15:dc:7f:2b:b1:85:df:5c:74:88:cb:a5:48:0e:
04:02:2a:91:7c:0e:e9:82:50:86:ba:d1:e5:76:29:
df:2d:33:68:fb:ab:48:d6:57:0c:8d:bf:ab:aa:0f:
d8:49:88:6a:42:89:c4:af:25:e0:3c:30:35:ed:60:
b1:66:af:58:1c:f3:7c:03:0b:ba:37:54:f2:92:02:
46:4d:0e:89:a3:fc:75:bb:d0:de:36:28:68:74:d2:
9f:85:2d:4b:92:42:c9:3e:69:5b:7d:14:f9:70:0c:
46:15:b6:7a:86:53:15:4c:7c:8a:fc:62:0c:f1:69:
ab:99:11:92:d3:cf:52:74:1d:b7:fe:ae:9a:00:07:
1d:14:f1:37:69:fc:e8:29:ae:6f:f2:28:5b:0d:52:
d8:38:8a:01:41:32:36:a6:bf:78:f3:c2:19:c5:65:
aa:64:15:6d:51:53:26:e9:3b:94:43:92:9b:42:d8:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:A4:14:E0:E7:4B:3E:2F:66:14:C7:8A:8F:1E:E8:EB:2B:D5:9B
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:47:74:67:24:24:a8:4b:90:c1:a8:28:83:5e:b8:57:b4:a5:
d7:be:57:8b:17:04:b5:a3:e7:97:76:f9:e4:87:1a:eb:15:b6:
0c:44:6f:6c:30:cf:54:9d:2a:71:74:3e:05:b7:1a:94:48:58:
ea:d9:8f:ed:51:53:fc:b5:b0:65:c7:6d:e7:66:d2:fc:d8:44:
78:58:99:4a:2b:06:2d:18:85:70:6a:fb:ea:6b:46:c5:22:9d:
49:a9:b7:15:f1:fd:4e:7d:25:41:cd:c5:e8:6f:dc:fc:17:79:
64:e5:b3:5b:fb:63:32:b1:94:7f:46:26:c8:0f:45:8a:cb:58:
c6:76:44:16:f5:81:bc:08:0f:ce:2b:64:73:42:2c:7f:bd:03:
6d:d7:7d:61:55:39:84:f8:dc:b0:37:5c:8d:1b:cb:3c:42:7b:
70:9c:dc:41:3c:05:a9:0c:47:95:1f:83:af:a4:69:ed:4d:4c:
34:0f:6f:aa:68:6a:7a:ab:ed:fe:0f:84:c0:ef:4e:da:21:39:
61:68:76:bd:fb:16:5f:a9:4b:d6:82:ce:0d:1b:a5:d2:de:9c:
9c:a5:20:ab:f7:5f:aa:21:70:9e:5b:3e:ed:2b:16:74:a4:c7:
fd:3a:2a:97:bf:c8:c8:a0:14:f6:23:51:2f:e8:eb:ba:58:2a:
7a:ed:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:50 2026 by rpki-client