Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: UFBZZJ5M8kJ4qq/6yUmZNB96GtO00GQXtZl9kqoe6vg=
Subject key identifier: 7F:2E:8C:83:35:7F:BC:67:91:C0:97:BB:8E:FB:36:31:13:DE:1D:B1
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 019FAD5240B9C9AD4210F7092DA54CF95FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 04D3
Signing time: Wed 29 Jul 2026 10:01:16 +0000
Manifest this update: Wed 29 Jul 2026 10:01:16 +0000
Manifest next update: Thu 30 Jul 2026 10:01:16 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: mFKol8plh99iHiX4qgSICvVMPZBm2B+NmS/ouFNx5N4=)
2: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (hash: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:40:b9:c9:ad:42:10:f7:09:2d:a5:4c:f9:5f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Jul 29 10:01:16 2026 GMT
Not After : Jul 30 10:01:16 2026 GMT
Subject: CN=7f2e8c83357fbc6791c097bb8efb363113de1db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:56:4f:04:1a:05:9f:9f:b8:e6:bd:5a:e3:
45:53:f0:4d:53:34:e0:28:0a:80:da:ed:e8:b9:71:
96:e9:a0:48:20:34:7d:59:47:e6:6a:a8:27:4f:34:
8f:be:34:69:25:9e:3c:cb:75:07:7a:a8:3e:f7:3a:
52:ba:33:f1:6f:c2:d6:f7:ba:d7:be:12:15:b3:c1:
cb:21:01:7d:c8:b2:8f:7a:d2:00:5d:e2:92:92:5a:
ea:c6:7c:48:91:54:5f:46:e4:0c:2f:fc:56:d6:e1:
7e:a9:77:1d:54:e3:67:c2:f1:1b:57:fa:7a:c6:62:
17:f1:0c:df:57:1f:be:22:94:5a:77:ca:e1:4f:9c:
88:cb:51:16:0a:c8:aa:e2:36:ca:86:a7:4d:de:c4:
63:ae:b9:24:10:56:c8:5f:d2:e3:a4:cc:c4:24:16:
69:6c:3c:f1:f7:1b:86:18:a8:bd:28:0f:ec:10:91:
f3:0b:43:3c:d7:e4:b3:f5:e6:26:99:23:42:79:6e:
d6:9a:5d:55:6b:62:e7:65:3e:74:5e:80:33:dd:6c:
fe:25:98:07:d6:ef:be:95:0a:69:ce:56:f0:e2:58:
b8:f6:eb:94:28:21:ae:4e:4b:59:10:7d:ee:34:f8:
6f:40:e8:1a:80:26:72:c7:ce:f0:dc:7c:03:84:f2:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2E:8C:83:35:7F:BC:67:91:C0:97:BB:8E:FB:36:31:13:DE:1D:B1
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:4d:d7:2f:0e:af:bf:2a:7f:56:26:87:be:dc:eb:0b:fa:
39:83:83:b5:21:af:2d:8e:92:3e:4b:a4:19:75:32:66:4f:46:
21:bf:d7:bd:ac:0d:a7:21:eb:fe:77:5e:07:d2:f7:a8:a3:21:
4d:af:32:90:89:75:0e:60:15:f4:02:28:f1:d8:9d:23:47:14:
62:49:27:d4:6b:80:db:51:44:9e:33:40:40:40:65:23:ca:61:
db:92:4f:28:2d:ad:e7:48:77:45:f3:be:86:97:72:be:21:2d:
0d:f9:10:9c:92:3e:41:f2:d9:39:22:13:28:21:c8:4e:99:63:
c5:27:7d:4c:36:10:ba:d5:85:af:c9:14:99:d9:4a:94:4a:77:
a5:4d:75:ca:08:97:01:c3:82:5f:08:70:30:76:0a:67:ae:f1:
cf:30:05:65:86:72:9e:05:84:e4:01:39:cf:6d:45:2d:12:93:
ef:52:b4:0d:cc:16:02:cf:2c:c3:5f:a4:c6:93:7c:ba:51:9f:
fa:02:e4:a9:f3:66:26:8a:f8:64:10:db:60:0d:89:3d:41:82:
d0:c4:af:8e:1f:59:ac:5e:24:56:98:9c:5a:ba:19:91:29:8c:
40:f9:50:d4:40:bc:9b:40:0b:93:dc:98:30:96:97:a5:c3:0b:
a5:94:5b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUkC5ya1CEPcJLaVM+V/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzZjNDFhMjE3NjI1NGYyMzZkMjNkMzkxZmQ1NjA5MDYx
OTY3MGQwHhcNMjYwNzI5MTAwMTE2WhcNMjYwNzMwMTAwMTE2WjAzMTEwLwYDVQQD
Eyg3ZjJlOGM4MzM1N2ZiYzY3OTFjMDk3YmI4ZWZiMzYzMTEzZGUxZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKpWTwQaBZ+fuOa9WuNFU/BNUzTg
KAqA2u3ouXGW6aBIIDR9WUfmaqgnTzSPvjRpJZ48y3UHeqg+9zpSujPxb8LW97rX
vhIVs8HLIQF9yLKPetIAXeKSklrqxnxIkVRfRuQML/xW1uF+qXcdVONnwvEbV/p6
xmIX8QzfVx++IpRad8rhT5yIy1EWCsiq4jbKhqdN3sRjrrkkEFbIX9LjpMzEJBZp
bDzx9xuGGKi9KA/sEJHzC0M81+Sz9eYmmSNCeW7Wml1Va2LnZT50XoAz3Wz+JZgH
1u++lQppzlbw4li49uuUKCGuTktZEH3uNPhvQOgagCZyx87w3HwDhPJuowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8ujIM1f7xnkcCXu477NjET3h2xMB8GA1UdIwQY
MBaAFNJ2xBohdiVPI20j05H9VgkGGWcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAt
MGQ2YmNkMDE0OGJmLzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81M2MzZTItZDMzNS00YTgyLWE3OTAtMGQ2YmNkMDE0OGJm
LzEvMG5iRUdpRjJKVThqYlNQVGtmMVdDUVlaWncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJZN1y8O
r78qf1Ymh77c6wv6OYODtSGvLY6SPkukGXUyZk9GIb/XvawNpyHr/ndeB9L3qKMh
Ta8ykIl1DmAV9AIo8didI0cUYkkn1GuA21FEnjNAQEBlI8ph25JPKC2t50h3RfO+
hpdyviEtDfkQnJI+QfLZOSITKCHITpljxSd9TDYQutWFr8kUmdlKlEp3pU11ygiX
AcOCXwhwMHYKZ67xzzAFZYZyngWE5AE5z21FLRKT71K0DcwWAs8sw1+kxpN8ulGf
+gLkqfNmJor4ZBDbYA2JPUGC0MSvjh9ZrF4kVpicWroZkSmMQPlQ1EC8m0ALk9yY
MJaXpcMLpZRbag==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:25 2026 by rpki-client