Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: MnAs0OhMRPSaJyx/iu72qajMUkPgZ0MkMo37OX4fLH4=
Subject key identifier: ED:56:D4:D5:E4:B8:FA:49:35:96:E3:42:F8:61:0B:92:5F:DA:04:B1
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 019FA9753BE36E6F39E7AEE7BAC1B3B9AB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 1187
Signing time: Tue 28 Jul 2026 16:01:00 +0000
Manifest this update: Tue 28 Jul 2026 16:01:00 +0000
Manifest next update: Wed 29 Jul 2026 16:01:00 +0000
Files and hashes: 1: 0ZZBNy_4ZfeDGv0GZ4Y6WyBitiY.roa (hash: xrSAqsjvVj4VTaGXTAjpYZq+szPFsolHKq89Y8sv2SY=)
2: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: uUruC6XB6kG+CS48H4SDx4p5n15dwp6EuqlB6fjNop0=)
3: HlPf6jt7HgmbuEWgecuG4Sgaorc.roa (hash: j8/ocuESU17xtFvRR6K0O2U6/8pNxL5+xXsijYbdSGQ=)
4: JB8yx2b88cSBO2zP8HmMFflCSbQ.roa (hash: ptfoSvZpsHgOB3p1UFy4y5riUES2ZHub67bxSsiN4pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:3b:e3:6e:6f:39:e7:ae:e7:ba:c1:b3:b9:ab:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Jul 28 16:01:00 2026 GMT
Not After : Jul 29 16:01:00 2026 GMT
Subject: CN=ed56d4d5e4b8fa493596e342f8610b925fda04b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:f0:76:aa:e7:c8:33:e9:5e:4a:2a:ab:d0:
04:14:4f:09:c8:57:ab:28:db:d8:d1:b9:73:15:73:
26:00:6c:6e:ca:06:a0:25:73:9c:03:67:18:5a:ff:
b7:bc:fe:28:fb:de:32:dc:69:7d:be:d6:c8:92:6f:
ed:aa:04:25:c7:cc:6b:2c:40:7d:58:b1:0b:60:00:
05:8c:4c:f9:c5:c1:eb:c6:06:88:64:45:64:72:d9:
50:ac:a3:b9:38:9f:54:ed:9d:a8:bf:9a:75:f2:75:
f8:a0:3c:8e:0e:cd:a6:c9:07:fd:cb:13:d6:a4:28:
47:e7:1d:aa:e3:01:da:50:66:1f:16:87:1a:90:9a:
cf:19:91:1a:25:d4:f8:45:52:69:31:f2:34:c8:5f:
02:fc:13:91:0a:39:a4:06:6e:22:a5:7b:04:48:2d:
d3:38:b8:c8:bd:ef:e1:56:fb:c9:e9:2b:44:5c:a4:
1d:26:ca:16:97:5f:86:4e:1b:c4:0e:81:43:74:f4:
aa:68:04:ef:e2:71:97:80:fe:42:a2:f5:8e:c5:5d:
bd:67:f3:01:35:d6:ba:f8:37:4c:b9:58:03:df:c7:
6f:7f:09:16:8d:57:67:a5:29:2e:ef:b7:dd:1a:f0:
fe:ee:47:2c:77:e2:64:2c:ab:91:3b:cc:10:81:cf:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:D4:D5:E4:B8:FA:49:35:96:E3:42:F8:61:0B:92:5F:DA:04:B1
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d9:1d:a5:27:bd:4d:86:ac:88:71:d0:57:ad:a2:f7:bb:69:
ca:38:f7:1b:8a:75:6d:ba:b9:ce:d8:5e:4d:b5:8c:9e:8a:c9:
35:c6:3c:37:a4:a7:6f:c7:a1:4a:b4:9e:0e:3d:1b:cc:d3:d7:
10:6b:e4:e0:45:e3:26:ae:de:8f:25:d1:57:c8:6e:0a:26:36:
c1:d5:f0:1c:eb:56:fb:e2:69:ce:bf:a9:e7:af:bf:a8:25:64:
1f:af:50:78:d6:23:1b:6a:63:f3:b9:7c:54:79:f4:1a:c5:7a:
06:14:80:4a:31:7f:ba:89:81:d2:eb:fd:1c:19:6f:14:af:2c:
03:62:60:a4:f7:8d:f6:70:0b:a8:32:9b:ad:25:0d:7b:5c:c7:
d5:67:35:ec:6d:9c:7e:07:58:1a:21:2c:e7:47:ec:98:df:2c:
d2:0d:31:a8:cc:0e:86:a6:1b:38:f4:f4:a2:c6:11:fc:c6:69:
c8:31:7c:f9:97:01:5f:b2:1c:e1:c9:d0:2b:fe:4b:7e:fc:62:
63:2d:12:3b:ac:03:f6:f9:68:99:72:ac:ec:5b:2b:07:2d:36:
e3:4f:be:ee:08:59:02:0d:ac:9a:1d:60:ec:0d:4c:74:dd:10:
1c:ca:b4:77:5e:1a:b8:14:3d:67:38:21:17:43:14:5b:c3:4a:
a2:95:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:35 2026 by rpki-client