Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: 9Rf0vUcUXaBv97NZYWcj81PyEzM919aH/yaB1a71iwI=
Subject key identifier: 30:8E:89:27:AD:E1:14:4D:29:8A:16:E0:DB:22:52:44:BB:06:F2:5A
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019D9AABE1D5670CB7617F63BC20871FC5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0CEA
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 7wfn1sBzvPcqWm6ogd6e7fxy99hmFvIB6RLwpvyc9SA=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e1:d5:67:0c:b7:61:7f:63:bc:20:87:1f:c5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=308e8927ade1144d298a16e0db225244bb06f25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:5c:ac:3f:94:24:39:3a:49:56:fe:27:46:
a4:24:b2:ab:aa:a5:8d:e4:5b:9d:c9:c7:31:60:62:
36:66:c9:ef:90:e8:f8:60:ad:b5:1d:16:6e:74:94:
93:c2:16:b4:2b:a5:1a:e7:7e:cc:91:93:dc:f0:8d:
2a:58:fb:4b:df:e2:ca:c1:33:a0:b9:39:2e:11:f5:
4e:b4:33:3e:7c:a0:86:c1:c0:5f:05:21:79:95:68:
08:3b:58:fc:c3:11:51:16:98:c2:9f:72:eb:2a:d8:
b3:43:21:c2:0c:fd:17:10:0f:f8:6f:e8:d5:af:fd:
d4:a4:fb:71:51:bb:62:cd:bb:3f:bd:b2:d7:d0:c8:
90:41:43:11:4f:f4:1e:aa:21:19:c5:a1:8a:0c:ea:
08:2b:ac:bd:6f:9f:d9:b3:c2:d7:46:5c:f2:f3:55:
fb:b5:9d:e9:fb:6c:e0:6a:c2:f1:ed:24:ee:e9:ef:
60:de:36:f3:40:19:e4:fd:10:3a:a9:e9:c8:35:e7:
9e:bc:02:83:3b:4f:52:44:5b:a5:78:72:58:4a:06:
9b:f8:7d:0e:13:45:20:ec:09:12:c5:4d:8c:51:e6:
25:d5:e7:f6:9b:fa:77:ac:f5:0a:4e:99:69:fa:fc:
65:cd:af:ba:f4:5c:de:44:db:af:48:25:9e:3e:b6:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:89:27:AD:E1:14:4D:29:8A:16:E0:DB:22:52:44:BB:06:F2:5A
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d2:1c:79:9a:e1:b6:7d:ed:b5:8d:e9:3f:a1:3e:3c:f4:2c:
68:67:be:56:2b:8d:3b:34:94:ac:98:77:6e:a6:2f:7f:05:12:
42:c8:63:7a:2f:88:36:6f:e5:a4:4a:91:36:40:a6:53:c8:b0:
57:7e:cb:55:e1:e6:1a:8b:6d:28:58:3c:e3:03:57:58:e4:d9:
dd:0e:38:95:20:af:cf:c2:ea:39:cd:f8:00:81:e8:ca:e0:14:
9a:05:52:3a:01:a3:37:1b:ba:54:fb:46:7d:87:26:c6:cf:7f:
0e:87:55:1c:17:55:59:3e:2f:ef:9b:05:38:a0:9b:30:91:a4:
d6:c7:81:58:22:70:b1:59:4f:68:5b:5e:cd:06:73:fc:e3:dd:
0d:20:27:91:2e:c9:1a:fb:72:dd:fd:fd:f8:bf:8e:27:10:1a:
27:ec:6d:3a:05:03:78:18:b7:b9:f1:a9:6d:6d:3b:24:88:7f:
ca:84:6e:10:16:bc:dd:0d:f3:7d:bf:88:f1:7e:10:a4:08:e0:
cf:00:27:d3:c7:a1:d5:e7:e7:59:c0:ae:b3:d6:b1:17:58:6b:
92:3b:f7:09:ec:20:69:81:53:6d:ee:92:96:60:c7:36:6b:8c:
fc:b5:cc:62:d5:23:6e:c3:36:bd:df:49:b2:1c:9f:e3:24:46:
b9:09:97:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq+HVZwy3YX9jvCCHH8WwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0
YjRkOTAwHhcNMjYwNDE3MDkwMDQ4WhcNMjYwNDE4MDkwMDQ4WjAzMTEwLwYDVQQD
EygzMDhlODkyN2FkZTExNDRkMjk4YTE2ZTBkYjIyNTI0NGJiMDZmMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsxcrD+UJDk6SVb+J0akJLKrqqWN
5FudyccxYGI2ZsnvkOj4YK21HRZudJSTwha0K6Ua537MkZPc8I0qWPtL3+LKwTOg
uTkuEfVOtDM+fKCGwcBfBSF5lWgIO1j8wxFRFpjCn3LrKtizQyHCDP0XEA/4b+jV
r/3UpPtxUbtizbs/vbLX0MiQQUMRT/QeqiEZxaGKDOoIK6y9b5/Zs8LXRlzy81X7
tZ3p+2zgasLx7STu6e9g3jbzQBnk/RA6qenINeeevAKDO09SRFuleHJYSgab+H0O
E0Ug7AkSxU2MUeYl1ef2m/p3rPUKTplp+vxlza+69FzeRNuvSCWePrbtvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCOiSet4RRNKYoW4NsiUkS7BvJaMB8GA1UdIwQY
MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt
ZDllYjhkNTczNjZjLzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj
LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9IceZrh
tn3ttY3pP6E+PPQsaGe+ViuNOzSUrJh3bqYvfwUSQshjei+INm/lpEqRNkCmU8iw
V37LVeHmGottKFg84wNXWOTZ3Q44lSCvz8LqOc34AIHoyuAUmgVSOgGjNxu6VPtG
fYcmxs9/DodVHBdVWT4v75sFOKCbMJGk1seBWCJwsVlPaFtezQZz/OPdDSAnkS7J
Gvty3f39+L+OJxAaJ+xtOgUDeBi3ufGpbW07JIh/yoRuEBa83Q3zfb+I8X4QpAjg
zwAn08eh1efnWcCus9axF1hrkjv3CewgaYFTbe6SlmDHNmuM/LXMYtUjbsM2vd9J
shyf4yRGuQmX7g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:16:03 2026 by rpki-client