Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
File: CmhbcVcgw2L0zL11CmEz0z6pzUg.mft (raw, json)
Hash identifier: WfXxSINdlGJD6F3M6tgOldbghhBKepBJA8YecFUHz0g=
Subject key identifier: 79:2E:D0:08:FE:ED:D3:10:35:03:46:B9:A6:DA:79:AC:93:87:08:D4
Authority key identifier: 0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
Certificate issuer: /CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Certificate serial: 019F97386D6A636169D0582833CA0EF7302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
Manifest number: 43
Signing time: Sat 25 Jul 2026 03:01:25 +0000
Manifest this update: Sat 25 Jul 2026 03:01:25 +0000
Manifest next update: Sun 26 Jul 2026 03:01:25 +0000
Files and hashes: 1: 0bWhQWuajdVxt380g1tHt_dfDzA.roa (hash: BNIIYhf4bu7N2Q9i17Tx4+jGFkmAZfsMMHPK83i6ScU=)
2: CmhbcVcgw2L0zL11CmEz0z6pzUg.crl (hash: wBdYLVf+MxRSTZGrw01YXi1dzEeZogXGUCOggjOTpz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:38:6d:6a:63:61:69:d0:58:28:33:ca:0e:f7:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Validity
Not Before: Jul 25 03:01:25 2026 GMT
Not After : Jul 26 03:01:25 2026 GMT
Subject: CN=792ed008feedd310350346b9a6da79ac938708d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:92:b7:03:e7:97:22:0a:12:10:6a:9b:47:d8:
59:86:e4:5b:15:75:e5:a3:9a:b5:62:74:4e:9c:8a:
7d:91:d8:19:24:d0:1b:ba:98:8c:78:f5:8e:42:80:
1c:ec:bc:c6:08:d7:f6:fc:e2:b7:ec:35:36:6f:ae:
94:44:70:3a:5a:07:df:52:98:ad:9d:a9:3f:d9:a3:
9b:51:02:0e:ed:79:51:b3:6b:4f:96:69:03:0d:66:
9e:a2:7f:a3:97:37:9a:cf:41:c3:e2:3b:e8:b2:28:
3d:a6:43:31:f3:e7:4a:29:19:54:b9:5e:23:23:e7:
4d:da:ef:78:c7:59:4e:4d:63:36:02:4a:34:49:1e:
7e:a3:78:55:af:a5:c7:6f:9c:68:bc:d8:c7:79:b8:
24:09:f9:aa:2d:7e:af:cd:20:8d:d4:21:76:a4:c7:
77:8e:c7:a7:62:1c:44:48:06:79:6a:9a:56:1f:d4:
50:47:cc:2e:87:82:ed:29:2d:02:7c:b5:84:c8:f9:
d4:67:45:db:78:a5:3d:0c:6d:8b:21:e4:1f:1d:e3:
79:db:ff:d7:f5:ee:f3:a0:00:38:5d:df:b3:1d:d0:
fd:b2:c4:6e:e7:ac:b8:06:fc:10:34:cf:8c:6f:7d:
64:c1:7d:0c:05:48:ab:40:6a:a6:ba:d6:9c:2a:6e:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:D0:08:FE:ED:D3:10:35:03:46:B9:A6:DA:79:AC:93:87:08:D4
X509v3 Authority Key Identifier:
keyid:0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:8d:84:9a:50:bf:f7:6c:51:41:27:51:7c:12:9f:b8:fe:
16:7b:b9:04:96:6d:ea:51:8d:42:21:b6:c7:7c:e9:26:66:f9:
a7:55:ce:26:70:c3:7c:bf:6c:11:55:bf:23:40:8f:11:7e:e7:
4b:3e:8e:7e:26:a4:fb:7c:62:dd:5f:9f:21:af:9f:c2:ef:08:
e6:69:ba:12:6a:45:84:41:04:e4:88:ee:c3:ef:88:65:14:d8:
04:18:cb:a2:40:84:72:84:d3:df:e2:84:1b:81:f8:b2:c4:a0:
19:0d:00:5e:c7:5e:dd:dc:36:aa:f5:ab:bd:46:da:0a:7b:74:
ee:91:f5:71:4d:d1:16:02:0b:29:d0:12:4d:88:a3:07:56:3e:
a2:67:8a:cd:84:2d:0c:f5:b6:dc:a4:25:bd:c2:6f:c7:55:23:
f9:66:98:2a:07:d7:cb:4b:e5:c0:90:99:73:eb:34:23:c2:1f:
2d:39:73:19:ce:a1:b0:21:3c:db:c2:6f:c5:72:b3:0c:79:2f:
38:b3:ee:97:82:52:f1:83:bc:dc:36:75:99:86:28:2d:b7:19:
ae:59:54:80:28:c2:a8:73:ec:7f:d8:93:85:0e:ae:de:af:a9:
a2:e2:d0:97:16:b8:58:56:4e:7b:c6:2f:01:10:3b:7d:2d:25:
dc:66:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:21:17 2026 by rpki-client