Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: mLKYcHqRXocjed/hdoJdnCkztm6fauhjSoTslK6B9LU=
Subject key identifier: 2E:99:AF:AE:EB:E9:50:26:FB:6D:9C:4C:0E:F7:54:54:BA:5D:D1:8E
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019FAABEFE0B0711127C592FB60199E98DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0E43
Signing time: Tue 28 Jul 2026 22:01:11 +0000
Manifest this update: Tue 28 Jul 2026 22:01:11 +0000
Manifest next update: Wed 29 Jul 2026 22:01:11 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: NEbr3iG8WQXW9WtnrSxfDc+YBUfOBukTZAnYZ2ot0Us=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
3: w5-KHcw5iW2dZ4Gu6lDIZSylhAw.roa (hash: Mh4CtHCCAyOEQHT+0GZL5DrmI0KACaziKJcUGyMXvcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:fe:0b:07:11:12:7c:59:2f:b6:01:99:e9:8d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Jul 28 22:01:11 2026 GMT
Not After : Jul 29 22:01:11 2026 GMT
Subject: CN=2e99afaeebe95026fb6d9c4c0ef75454ba5dd18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:41:e6:29:e0:3c:11:49:26:26:e8:b2:5d:
6b:4a:b0:14:86:08:0c:4c:85:57:37:0f:76:35:b0:
cc:f2:f2:b0:fd:3d:5a:37:ab:7c:87:9b:22:0a:77:
f7:f2:94:06:ef:32:dd:49:25:f2:fd:ae:c5:cc:4c:
d5:ab:ff:7a:43:36:0d:e5:59:82:4f:72:a0:02:0c:
36:1a:eb:a3:35:68:f8:49:d5:05:00:2d:9c:71:2d:
cf:22:4d:83:c6:42:29:68:41:81:8f:f8:39:78:1e:
e3:f7:28:37:5d:7b:bf:92:2a:f4:17:b5:d9:e1:b5:
56:44:51:20:7a:72:69:3e:12:e7:35:9c:fb:d8:d7:
22:92:e8:8e:e1:a2:85:bb:9a:77:1f:93:c6:86:64:
e0:bc:98:2c:f4:04:d7:f6:f4:0c:88:27:ff:48:28:
05:10:71:19:a4:e7:42:20:d8:ad:03:5f:98:ef:f1:
80:76:ec:4a:41:30:f8:ed:75:fa:10:e8:9e:c7:25:
58:72:01:8f:a7:0e:3a:cb:7a:66:ba:ea:35:19:99:
ff:18:59:71:5a:db:0a:d6:b4:7a:67:36:bd:2e:cc:
53:75:97:38:c9:ce:da:c4:51:ef:da:9f:19:9a:1a:
21:7c:5c:2e:20:6f:d9:d7:4d:04:06:02:9a:bd:a5:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:99:AF:AE:EB:E9:50:26:FB:6D:9C:4C:0E:F7:54:54:BA:5D:D1:8E
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:ad:5d:1e:ad:fa:32:71:b5:27:11:3f:1d:30:b8:cc:5d:
c2:7e:2a:4f:3c:f7:c4:e4:be:e7:f2:c8:7e:9f:89:6b:2f:69:
2d:67:33:d0:8a:e7:47:7a:86:7a:36:9d:27:8d:0c:6e:f5:61:
f4:d9:f2:10:e8:3e:ce:bc:86:f0:04:26:a1:b1:e4:8f:84:f2:
d1:db:61:b9:d2:da:76:bd:86:84:c8:b9:49:33:6c:95:08:c9:
90:9b:44:9c:34:d9:2e:46:af:f7:1e:a7:fb:d9:46:18:56:01:
34:b2:87:db:3f:d3:83:eb:4f:a6:e3:49:b1:3f:1a:43:24:67:
82:c9:59:79:c4:07:f3:af:8e:23:02:d1:b1:3b:04:9d:a3:48:
a0:06:2d:d2:75:9c:30:ef:55:b0:9c:46:3b:59:35:45:3e:c5:
56:21:39:e4:7a:1c:3a:e0:7a:a4:1c:56:ba:7e:82:38:76:dd:
45:e1:73:45:fa:78:f9:d6:9a:12:ce:99:a7:03:04:6a:4b:12:
4a:6b:c6:cb:dd:e0:e7:0d:ad:79:b8:2c:3f:bd:20:fd:5d:98:
6e:a2:cb:70:c6:59:43:2f:65:dc:19:05:49:5f:0b:46:49:7f:
93:78:ef:d5:69:68:b2:98:2c:3d:34:b1:cb:90:89:70:d1:7a:
89:a8:d3:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvv4LBxESfFkvtgGZ6Y3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy
MDZiYjEwHhcNMjYwNzI4MjIwMTExWhcNMjYwNzI5MjIwMTExWjAzMTEwLwYDVQQD
EygyZTk5YWZhZWViZTk1MDI2ZmI2ZDljNGMwZWY3NTQ1NGJhNWRkMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx51B5ingPBFJJibosl1rSrAUhggM
TIVXNw92NbDM8vKw/T1aN6t8h5siCnf38pQG7zLdSSXy/a7FzEzVq/96QzYN5VmC
T3KgAgw2GuujNWj4SdUFAC2ccS3PIk2DxkIpaEGBj/g5eB7j9yg3XXu/kir0F7XZ
4bVWRFEgenJpPhLnNZz72NcikuiO4aKFu5p3H5PGhmTgvJgs9ATX9vQMiCf/SCgF
EHEZpOdCINitA1+Y7/GAduxKQTD47XX6EOiexyVYcgGPpw46y3pmuuo1GZn/GFlx
WtsK1rR6Zza9LsxTdZc4yc7axFHv2p8ZmhohfFwuIG/Z100EBgKavaVTRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Zr67r6VAm+22cTA73VFS6XdGOMB8GA1UdIwQY
MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It
NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4
LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZytXR6t
+jJxtScRPx0wuMxdwn4qTzz3xOS+5/LIfp+Jay9pLWcz0IrnR3qGejadJ40MbvVh
9NnyEOg+zryG8AQmobHkj4Ty0dthudLadr2GhMi5STNslQjJkJtEnDTZLkav9x6n
+9lGGFYBNLKH2z/Tg+tPpuNJsT8aQyRngslZecQH86+OIwLRsTsEnaNIoAYt0nWc
MO9VsJxGO1k1RT7FViE55HocOuB6pBxWun6COHbdReFzRfp4+daaEs6ZpwMEaksS
SmvGy93g5w2tebgsP70g/V2YbqLLcMZZQy9l3BkFSV8LRkl/k3jv1WlospgsPTSx
y5CJcNF6iajToA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:10 2026 by rpki-client