Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: rtUR+ozIm1qzGEmXuUb5H2Ze4rlmDIKbhQ6TSKhsw1w=
Subject key identifier: A2:8D:F3:9B:5C:92:78:C3:8D:9F:2A:C5:11:C3:7D:BC:C8:25:6D:C9
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 01A0D83B6511975A39D9840CC98FC5980395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0F45
Signing time: Fri 25 Sep 2026 11:02:46 +0000
Manifest this update: Fri 25 Sep 2026 11:02:46 +0000
Manifest next update: Sat 26 Sep 2026 11:02:46 +0000
Files and hashes: 1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: NSeD6jAsapjFVozZLMot1YZTs1+qpbG/P96TbEvO+iM=)
4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:65:11:97:5a:39:d9:84:0c:c9:8f:c5:98:03:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Sep 25 11:02:46 2026 GMT
Not After : Sep 26 11:02:46 2026 GMT
Subject: CN=a28df39b5c9278c38d9f2ac511c37dbcc8256dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:f7:19:21:b8:6b:76:dc:54:e2:b1:2f:ea:
59:9f:c8:db:37:cc:93:77:7b:25:91:91:d9:75:e2:
b2:a2:40:bc:bc:cf:8e:65:2a:a1:0d:cc:1f:45:af:
2f:a2:64:16:20:76:2f:4d:49:fa:c4:88:ee:88:42:
4d:b4:58:21:8a:26:40:9b:d0:90:90:3a:a1:07:cb:
f8:42:d5:33:92:d5:bd:14:81:4e:79:69:47:c3:9f:
d4:7e:db:33:3a:47:93:22:6d:66:c3:34:d8:b5:be:
15:af:35:9b:6d:39:91:3a:74:b9:04:10:3a:16:42:
11:af:64:b7:90:6d:60:e0:eb:90:ac:39:a4:6b:c2:
b7:f1:be:47:d0:a7:ac:82:8b:d1:3e:de:61:59:4b:
15:3f:61:bc:16:d8:4e:56:b0:24:5d:27:ed:2c:42:
e8:30:83:f6:e3:21:05:14:23:c3:7f:e3:64:98:40:
9c:82:1a:ab:04:07:b5:1e:4c:8e:9e:34:21:cd:b6:
52:a5:13:93:79:a7:1e:9f:b4:6f:d6:b9:56:6a:fd:
d4:19:7d:80:42:65:cb:db:92:6d:13:15:af:46:1b:
bb:29:a6:f0:87:11:b7:ef:ee:1e:e6:95:04:1d:42:
56:a2:21:a4:df:19:41:9d:6e:62:86:29:b9:c6:d7:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:F3:9B:5C:92:78:C3:8D:9F:2A:C5:11:C3:7D:BC:C8:25:6D:C9
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e5:7d:cc:b2:38:9b:c2:ea:17:26:4e:d5:70:31:a1:31:1a:
f5:de:89:95:d9:40:83:7c:69:c3:d6:b5:43:9b:3c:bb:db:1f:
18:48:83:aa:69:8c:16:18:32:af:62:df:40:4f:54:57:ea:69:
fb:25:a4:c7:4d:c9:5f:3d:bd:1f:6b:32:0e:ef:31:1c:cb:96:
8d:dc:29:d7:1a:da:39:c2:46:e6:55:e7:5c:53:83:b9:0a:2c:
1b:81:9d:54:81:24:f9:76:b5:2b:39:03:25:a3:38:53:a2:2a:
2e:9e:52:c0:d7:ba:32:d7:7d:db:85:dc:aa:ac:c6:02:c0:be:
ee:f1:e1:7f:73:94:1f:f3:c4:d4:04:a8:ca:bb:a4:d2:6a:eb:
4a:9f:5c:f1:13:40:6c:ec:c6:92:81:cf:d6:55:ac:5b:04:0f:
b2:7e:03:51:aa:e9:e2:e9:e0:f9:d8:ab:be:c8:35:c7:83:5c:
1b:63:9b:8a:04:34:dd:e9:1c:9d:3a:90:19:16:e3:95:b3:06:
15:78:ae:73:66:ed:c4:e3:a4:0f:7b:d7:dd:db:89:77:de:cc:
a4:14:ff:d6:bb:b9:58:a7:6f:c1:a2:47:da:94:19:19:93:ec:
6e:dc:c7:4b:c4:70:71:1e:ab:9b:7c:1a:36:81:63:4b:e9:78:
3f:a3:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:51:15 2026 by rpki-client