Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: OftM/TQZ2X8wISBYLU/2m9GN+E73cnUDKMzfcptvrLs=
Subject key identifier: 23:6C:C6:14:9A:84:90:80:C9:96:4F:0D:0C:CD:4F:A1:34:C7:3A:D1
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019FA9E32777911DCD3C94AB0E78A6E765C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0DFB
Signing time: Tue 28 Jul 2026 18:01:04 +0000
Manifest this update: Tue 28 Jul 2026 18:01:04 +0000
Manifest next update: Wed 29 Jul 2026 18:01:04 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 115mXLIIsbhRa5D19Z29xbRmnqIaBTG9ZN6BPK6t+rk=)
2: RjYqGxuBBpHaJJNpx3xlevA1LAY.roa (hash: 7e3VoUj5GkLGu77TctKzi1RnOWYh1L7Bit5XWmnSHrw=)
3: Z-H7xw7Sx9s-UHDbBtOhgyB7kSo.roa (hash: hD8ccW/eExEEu884n50rJo3yzNCGT14iO1hQALLbqVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:27:77:91:1d:cd:3c:94:ab:0e:78:a6:e7:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jul 28 18:01:04 2026 GMT
Not After : Jul 29 18:01:04 2026 GMT
Subject: CN=236cc6149a849080c9964f0d0ccd4fa134c73ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:92:01:b0:fa:f7:3e:0e:c6:d4:63:5f:a9:
0a:a1:44:37:d1:2e:f1:4d:d7:50:c6:10:c5:eb:a3:
02:e1:af:d8:39:69:2d:95:e6:51:60:21:be:93:51:
1f:c1:e2:62:ef:c6:b9:67:75:ee:b1:e8:77:ad:c3:
95:41:51:b2:32:f7:c0:59:83:97:01:d5:1d:ff:07:
f4:42:9b:b4:b7:c3:e2:ed:af:f4:99:44:d2:ba:5c:
ac:7d:03:c8:ab:a2:1c:80:3b:af:b7:a8:d4:13:59:
4f:57:ca:e8:d5:07:44:df:3b:dc:43:f4:d7:32:ba:
2f:a8:6b:75:97:3b:3a:c8:48:3a:e6:9c:f4:c9:24:
27:d9:e0:ad:66:0c:2e:a0:4c:e6:f8:f6:76:10:b1:
dd:f7:45:74:42:d6:f5:b5:7d:06:3b:0a:fb:16:17:
bc:ea:84:13:96:23:e0:d9:ce:83:58:7f:08:dd:9c:
7a:5e:a7:df:49:f9:dd:6c:62:6e:fe:9d:2a:37:28:
21:d5:99:da:68:55:10:d9:8d:1d:4d:c7:7c:2b:c5:
78:14:cb:dc:40:aa:61:9d:e9:1a:f5:4e:1d:32:ad:
0d:4e:73:b0:19:de:51:db:00:aa:37:b0:89:6a:60:
a9:6b:9f:4a:d2:9a:ef:fd:61:29:48:d1:b3:6b:10:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:C6:14:9A:84:90:80:C9:96:4F:0D:0C:CD:4F:A1:34:C7:3A:D1
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9c:b3:b0:1d:16:c7:83:6e:8d:6d:2c:fb:9a:70:13:7d:8e:
00:d9:63:38:bd:44:79:f2:e0:64:5d:0c:8b:d5:fc:a9:a2:a7:
89:4a:f7:7e:92:43:9b:64:77:55:22:21:b7:30:ab:5e:6a:78:
f8:fc:77:e7:a7:a1:59:ef:49:56:77:fb:46:a8:aa:ff:28:08:
ee:81:9a:6e:39:ca:04:59:29:13:bb:37:91:3d:07:f8:a0:be:
72:35:05:be:37:74:48:50:de:c5:7c:6b:a6:8b:89:d5:0d:3c:
75:15:0e:6f:59:76:93:5c:d7:d9:d3:14:35:ad:95:ca:de:61:
33:62:19:6d:be:56:d7:15:04:23:7d:86:a7:22:78:4f:fe:80:
22:13:78:3a:8c:7c:b7:0e:d1:f4:e7:a4:32:7b:7d:6f:7b:21:
48:17:01:07:d2:0b:04:3e:56:04:ae:03:56:35:cc:b2:ad:96:
f1:09:b5:d2:b4:01:70:99:5f:20:ea:c4:68:d9:79:48:3e:d8:
6e:96:41:6c:30:37:ad:31:fd:c1:83:61:3e:01:f4:56:43:5c:
17:25:cd:8b:62:05:9b:2a:4b:13:6b:b6:94:4c:fc:34:3a:b4:
b9:66:bb:30:19:1d:94:fc:b1:03:8e:c0:74:c9:6b:74:11:ae:
68:a4:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:11 2026 by rpki-client