
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: OXmobVlggZvjccB67RT9dwmluR+KwOLQmwEgZo+2Lxs=
Subject key identifier: 53:DF:7B:90:52:79:03:58:E7:D0:0C:A7:16:5F:46:3C:30:67:E9:24
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019FA93E0ECD744B8377D38C6760FD60EF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 115A
Signing time: Tue 28 Jul 2026 15:00:44 +0000
Manifest this update: Tue 28 Jul 2026 15:00:44 +0000
Manifest next update: Wed 29 Jul 2026 15:00:44 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: /ss5aL6bqjw+33jEkhdit+pmxbztmIJTjJKUjU073bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:0e:cd:74:4b:83:77:d3:8c:67:60:fd:60:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jul 28 15:00:44 2026 GMT
Not After : Jul 29 15:00:44 2026 GMT
Subject: CN=53df7b9052790358e7d00ca7165f463c3067e924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:fc:66:93:a6:21:bb:4f:f1:c9:ec:d4:84:
93:06:9c:ff:43:d0:77:0c:a1:7c:92:5f:b6:e2:50:
24:e0:93:d6:eb:cd:5b:16:93:76:ec:f9:42:1f:9c:
c1:00:b1:fa:34:b0:2a:67:25:94:53:c8:d3:10:54:
33:e1:da:6d:96:e7:79:ee:fe:b8:e3:78:b4:e8:94:
84:b2:b0:7b:91:de:43:97:29:4f:12:c4:6a:56:a3:
14:17:de:64:fb:84:1e:4d:fc:7e:48:e4:bf:df:0f:
ef:c7:45:08:6c:5b:20:8d:e7:7a:2f:45:e7:f4:0c:
1a:83:3e:8c:d2:d1:b4:5b:74:7a:5d:47:19:d1:94:
ce:fe:7c:88:21:98:6d:ba:e7:8a:d9:3a:6c:4b:c6:
ba:da:2f:6f:3d:60:0f:77:6b:24:12:d9:3f:fd:46:
23:2b:64:b0:5d:f5:36:f5:d3:7a:3f:ab:c4:20:4b:
6e:2a:90:34:d6:e5:01:d4:a6:d5:b4:6e:bc:40:66:
5b:a3:e7:26:67:27:cb:28:c0:53:8f:68:b6:7e:29:
32:c6:1f:4f:b3:4d:56:5b:a5:05:e5:5b:c2:0c:ee:
52:ea:49:6c:e1:0f:74:ac:fa:3b:ed:c5:b6:3a:75:
c7:16:c4:fa:24:bd:ee:55:49:e9:e2:37:82:cc:c8:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:7B:90:52:79:03:58:E7:D0:0C:A7:16:5F:46:3C:30:67:E9:24
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1e:33:40:0b:50:29:f1:a5:f4:03:78:54:b7:a5:b7:dd:9a:
b6:83:41:66:81:92:0c:c7:f3:0e:b9:db:5d:40:17:8e:27:94:
4a:d8:78:b9:76:f1:f8:ed:36:a0:da:b8:fc:1b:99:8a:e8:3a:
8d:2a:cc:11:49:b0:0f:61:ba:06:54:0f:a3:f9:30:71:92:6a:
6d:66:4e:59:bd:df:47:f7:e5:76:e6:06:61:bc:1e:e1:54:9f:
d1:0f:28:4a:98:09:e4:e0:88:37:52:bc:e4:4c:a9:86:45:16:
20:7a:84:0b:b4:27:e1:a6:db:f5:5b:01:68:e1:aa:2f:f1:3a:
e4:9d:45:2b:9d:03:cb:43:19:50:23:5a:18:2c:61:32:50:0e:
47:49:fa:5f:ef:0f:c2:7b:21:4f:23:ba:c1:c8:ee:f5:43:56:
1d:d1:95:00:5c:a2:01:4c:4e:7e:46:b9:e8:68:91:43:3e:51:
fc:9f:5c:af:ab:00:2d:20:e6:f7:63:1f:d3:36:c1:5f:55:b9:
04:74:3d:a3:d7:ec:66:bb:d4:53:be:9c:6a:e9:40:ae:40:10:
c4:8f:31:52:94:d8:02:a1:87:ae:8e:cd:41:66:4a:ff:6a:5e:
eb:ab:92:d1:0e:48:35:1f:af:58:db:a5:79:db:6f:9a:21:7d:
d9:6d:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:31 2026 by rpki-client