Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: +3yJFVyGvOf/0e9t/Hvh454eDeJCzBERnD9i240kdJY=
Subject key identifier: 01:6A:6D:1A:03:C4:A5:69:92:15:14:70:BC:78:61:EC:D1:F6:F0:0B
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01A0C3322853989D31227D1F222543FC38B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 11EC
Signing time: Mon 21 Sep 2026 09:00:39 +0000
Manifest this update: Mon 21 Sep 2026 09:00:39 +0000
Manifest next update: Tue 22 Sep 2026 09:00:39 +0000
Files and hashes: 1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: cCSZYiNwj46W9bPnUNVwMxfzeVMb7nBStCtrV409xwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:28:53:98:9d:31:22:7d:1f:22:25:43:fc:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Sep 21 09:00:39 2026 GMT
Not After : Sep 22 09:00:39 2026 GMT
Subject: CN=016a6d1a03c4a56992151470bc7861ecd1f6f00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:52:8b:60:6e:73:60:c0:d9:b7:79:01:56:
1e:ee:ed:05:98:d9:c6:f3:bd:24:74:07:a4:f9:f5:
d3:9a:9d:26:3c:c4:5b:e2:78:9e:ff:99:25:41:00:
1e:cf:16:9e:1d:a9:79:7b:c0:85:a5:9c:93:86:d4:
90:0f:fc:69:e9:66:f5:8f:07:b4:f7:61:0c:a6:1a:
a9:57:ff:8c:4a:12:b5:52:59:3d:99:3c:6f:49:32:
a6:53:f5:f6:fe:32:56:99:c5:41:06:c8:7a:f7:c6:
bc:db:54:7c:c0:35:0c:87:43:18:42:f7:85:42:51:
75:ec:f3:80:e3:bd:d0:90:48:b7:22:69:cf:b2:64:
4b:8a:df:73:26:4f:72:5f:f5:12:43:3e:6a:99:c4:
9f:f4:cb:3c:9d:09:74:de:cd:15:eb:35:dd:ff:da:
ba:a5:e3:be:29:40:61:b0:67:e9:10:06:d9:16:fe:
da:a8:08:02:10:6d:08:1f:18:3c:44:0c:af:83:2f:
23:de:c5:52:91:e7:34:40:f0:01:2c:24:bd:10:e3:
1a:d0:f4:68:9c:fa:06:34:fd:ee:6c:46:9a:e7:1b:
5f:27:df:ab:e7:0e:6b:43:12:7b:91:d5:aa:9d:70:
4e:c7:e1:74:a7:c3:e3:c5:38:8b:32:e5:54:b8:e4:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6A:6D:1A:03:C4:A5:69:92:15:14:70:BC:78:61:EC:D1:F6:F0:0B
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:59:8e:c2:3d:bb:fb:7e:e4:1c:17:e3:a2:94:51:ba:f2:9c:
f8:26:71:da:fa:13:7e:5b:c0:fc:b4:b8:dd:da:3b:28:34:e9:
ec:9b:e2:27:f1:ee:11:4b:84:3c:1e:44:06:b8:1b:4c:0b:e6:
7e:47:a6:97:6a:c3:1a:59:6e:b3:19:e1:a5:e5:a9:85:cd:da:
00:bc:99:39:10:fd:e4:ee:89:eb:e0:17:43:ca:d0:40:cc:a6:
88:85:c5:65:24:06:5d:71:ca:ee:92:a9:48:4a:0f:90:00:37:
70:e6:e7:bb:5a:10:ec:f6:a7:2e:31:9a:9e:e6:a6:cf:d2:e3:
0c:b1:a0:85:8a:b2:77:a7:df:43:a8:2e:bf:9b:c2:df:22:46:
cf:30:11:51:54:69:21:48:bd:b9:2c:b3:38:9b:a3:96:20:12:
81:83:c2:8d:28:bc:4f:ae:b7:cc:6d:f5:3f:6b:37:c5:6f:8e:
d9:e8:a9:14:23:50:99:aa:f7:66:e9:84:18:5e:32:79:39:e4:
23:a8:57:a5:5d:64:4e:43:7e:ab:4a:80:43:69:7c:21:8c:c7:
bd:e5:52:8b:8c:84:9d:92:7b:de:43:f3:6d:c3:47:af:16:5a:
f9:49:0b:51:d8:a8:83:be:9d:99:4f:15:b2:19:84:13:46:2a:
88:4b:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:27:05 2026 by rpki-client