Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: ftJCZ3Q5GzxFOMRiMJR+BW+V3dNsMXM9fVtg9PT2OZQ=
Subject key identifier: 2C:8A:EC:52:F9:D3:B9:3D:25:D2:19:4F:BD:BA:3C:FB:9F:0B:82:F3
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 01A0C3D6BA1DCF28208381DB0A8C2007BEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0E8D
Signing time: Mon 21 Sep 2026 12:00:24 +0000
Manifest this update: Mon 21 Sep 2026 12:00:24 +0000
Manifest next update: Tue 22 Sep 2026 12:00:24 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: KCFXAPNvzPohVGWfWsjYUTWWizJKiWZJXFYEGCAhoBQ=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:ba:1d:cf:28:20:83:81:db:0a:8c:20:07:be:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Sep 21 12:00:24 2026 GMT
Not After : Sep 22 12:00:24 2026 GMT
Subject: CN=2c8aec52f9d3b93d25d2194fbdba3cfb9f0b82f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:19:42:19:bd:bd:a1:e8:2b:9d:c8:25:a4:
fb:e3:b6:c4:a7:48:d3:21:86:e4:14:6c:21:44:f5:
d2:e1:3f:73:3a:35:f7:58:28:e0:34:72:50:fd:7c:
34:30:74:1d:0d:48:e1:55:5e:e7:df:ca:8f:dc:9d:
76:92:4b:b0:d6:3c:c3:03:50:63:4b:9a:bf:90:86:
03:e5:b5:2b:36:15:1c:6b:ea:2c:6f:c7:07:de:e3:
2b:5a:81:d7:4a:67:51:7a:fb:cc:77:25:d0:5f:5c:
03:cd:ff:89:5c:e1:11:d6:f7:02:02:9b:d8:ab:e8:
0a:c5:1d:af:ca:03:c3:57:9b:62:ed:5e:1c:41:b3:
c9:2b:35:f3:c7:41:a2:e9:6f:10:1a:a9:25:34:bb:
e3:bb:5b:ef:b7:69:02:31:be:c2:37:ca:e8:d3:55:
27:4f:db:81:53:7a:0e:7e:34:c0:11:e1:ef:eb:04:
c3:3a:18:f1:65:fd:a2:44:83:bd:f2:80:f1:6d:12:
a3:7b:30:9c:04:73:29:04:a6:65:69:07:79:7f:24:
82:36:7f:2d:44:62:18:c6:df:a0:4f:ee:b2:b7:d7:
d6:5e:78:fe:5b:71:b1:b0:9a:3e:67:f4:c6:69:32:
21:0f:0b:26:c0:c3:3a:97:36:aa:f1:9d:f3:96:b7:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8A:EC:52:F9:D3:B9:3D:25:D2:19:4F:BD:BA:3C:FB:9F:0B:82:F3
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:db:ca:22:45:46:ce:dd:90:92:73:6d:39:36:78:b6:44:bd:
42:d0:e2:6d:f6:0d:34:77:23:26:1d:d7:13:a3:87:09:02:8d:
84:6e:c2:5d:1b:3f:0d:67:bc:e2:ba:59:87:5d:fe:46:30:ba:
21:b2:8d:ac:72:c2:8e:8c:53:56:a0:be:09:4e:10:a9:58:a8:
77:31:90:ac:12:7e:ab:38:7d:84:fc:1f:6f:ce:31:ac:3c:ff:
cf:5f:00:9d:ed:8f:d8:97:4a:22:e1:c6:bd:bd:f1:ed:a4:1d:
e6:09:99:a1:45:7c:5d:8d:36:e1:a4:1c:ea:3c:c5:a0:1d:83:
ee:f7:fc:b7:d0:34:2a:a4:33:bb:9d:b5:34:18:ac:8d:4e:7a:
ed:06:2f:af:bf:6d:82:10:e1:47:96:5d:b0:36:3c:89:20:a4:
d0:f7:cb:ab:51:36:af:16:76:10:f8:33:3b:ce:75:22:e1:dd:
90:de:2a:dd:ef:7a:01:24:68:5c:78:af:80:8c:73:8b:ab:cd:
cb:17:8a:fb:b1:f2:db:c5:f9:1b:52:72:16:ce:d8:b9:32:e2:
60:d1:1a:7a:53:f4:05:ae:75:0b:a3:14:8d:ac:a2:bf:02:8c:
6a:a4:02:1e:bc:b8:83:a7:7e:a6:68:5e:c1:55:44:f3:cc:46:
5d:ad:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:30:09 2026 by rpki-client