Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: QzHCtQW4QwjaO2VSx9uf0aty55KtWiL63zI/e1MP+GQ=
Subject key identifier: C8:0F:DC:35:B5:7E:6B:3B:80:D3:CF:C7:15:A1:C8:4C:A1:F7:A5:2B
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 019FA9752D2A4DF60A57E04618A4AD78C97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 10A5
Signing time: Tue 28 Jul 2026 16:00:56 +0000
Manifest this update: Tue 28 Jul 2026 16:00:56 +0000
Manifest next update: Wed 29 Jul 2026 16:00:56 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: xICq0sJE1SixtapWYdYPJ0EDUeXAHnGHzJuyVDfaaCs=)
2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2d:2a:4d:f6:0a:57:e0:46:18:a4:ad:78:c9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Jul 28 16:00:56 2026 GMT
Not After : Jul 29 16:00:56 2026 GMT
Subject: CN=c80fdc35b57e6b3b80d3cfc715a1c84ca1f7a52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:f7:97:4b:0b:5d:b1:b7:8d:c7:dd:68:89:
f3:52:8f:61:18:43:d7:aa:6c:ea:d9:2a:21:99:f0:
46:33:8a:29:1e:e6:91:75:98:3d:b3:9a:03:1e:f8:
03:1c:0e:04:6e:05:f5:85:58:8f:78:3c:52:93:1f:
15:8e:36:4f:a7:cd:bf:38:75:cd:00:8f:42:dd:a8:
6b:4f:f9:3a:16:00:01:95:7a:b3:94:b4:36:22:35:
1d:93:8d:d4:21:dd:36:57:b4:a0:29:c7:04:7a:3b:
e6:c1:d1:61:d4:4a:ac:30:80:ea:3b:6a:b4:79:71:
a8:f4:fa:02:94:f2:81:9d:c1:7b:88:f5:9b:c4:5e:
a0:0d:3f:40:48:af:48:50:9f:66:93:5d:32:58:ae:
a6:5f:cb:63:98:a3:33:45:44:73:32:79:a5:f1:49:
27:76:ef:73:fc:3e:be:5d:98:15:11:cb:4a:e0:65:
5b:48:d8:75:ca:70:f1:e6:eb:6a:e7:15:57:a7:cd:
af:e6:c8:a4:34:94:74:45:59:ca:31:eb:b4:aa:a2:
ae:32:ef:07:67:ea:04:a5:c0:0a:87:57:c9:a9:2c:
e9:89:d5:51:ba:dd:f6:76:fa:2a:91:dd:26:42:2a:
f0:35:fc:d5:5a:1a:df:5a:95:19:f6:25:52:35:6a:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:DC:35:B5:7E:6B:3B:80:D3:CF:C7:15:A1:C8:4C:A1:F7:A5:2B
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8c:c8:05:95:55:aa:2f:8f:61:b9:ad:8b:61:9a:62:dc:6a:
eb:47:de:72:15:2c:72:70:4d:29:85:26:bc:16:99:83:84:db:
b2:57:85:87:14:d2:d8:6b:bc:01:ac:f0:dd:32:b9:9b:6e:08:
e5:ed:46:cd:da:71:35:e1:46:f2:5a:cc:42:ec:11:87:ec:65:
e7:3c:7f:82:b9:4d:f4:87:b9:ba:26:0b:bd:84:bb:39:d2:21:
b3:9c:81:1a:2a:73:09:9e:e3:47:8f:97:cb:8a:94:70:a0:a2:
e3:53:d7:81:8d:ec:96:d5:e0:6f:3e:19:e8:66:d0:14:72:f8:
78:a7:48:10:da:7e:ab:01:e3:8f:b2:e5:f6:9f:9a:8a:21:ad:
18:2a:b0:fd:18:dc:f5:c0:a5:5e:21:c4:3a:6f:a0:d6:b7:d7:
c3:c8:41:b3:a6:42:05:41:42:96:90:50:17:3d:c2:c4:2d:0c:
24:68:08:b6:86:56:41:0a:64:97:41:49:53:44:91:6c:5a:4a:
d5:13:2a:33:b2:dd:dd:88:f8:23:33:86:24:d6:7c:8e:ee:e8:
fa:61:49:46:ef:4f:23:7b:8d:9a:a7:cc:7b:19:94:3f:84:69:
f9:e0:95:69:6f:41:19:d6:07:42:aa:ae:de:91:fa:28:3e:f2:
43:35:30:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdS0qTfYKV+BGGKSteMl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTQ3MmU1MjA0N2I1Zjc3NTNlZjE1MjZkZGEzOGVkNDI4
YmZlNDcwHhcNMjYwNzI4MTYwMDU2WhcNMjYwNzI5MTYwMDU2WjAzMTEwLwYDVQQD
EyhjODBmZGMzNWI1N2U2YjNiODBkM2NmYzcxNWExYzg0Y2ExZjdhNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uf3l0sLXbG3jcfdaInzUo9hGEPX
qmzq2SohmfBGM4opHuaRdZg9s5oDHvgDHA4EbgX1hViPeDxSkx8VjjZPp82/OHXN
AI9C3ahrT/k6FgABlXqzlLQ2IjUdk43UId02V7SgKccEejvmwdFh1EqsMIDqO2q0
eXGo9PoClPKBncF7iPWbxF6gDT9ASK9IUJ9mk10yWK6mX8tjmKMzRURzMnml8Ukn
du9z/D6+XZgVEctK4GVbSNh1ynDx5utq5xVXp82v5sikNJR0RVnKMeu0qqKuMu8H
Z+oEpcAKh1fJqSzpidVRut32dvoqkd0mQirwNfzVWhrfWpUZ9iVSNWrwpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgP3DW1fms7gNPPxxWhyEyh96UrMB8GA1UdIwQY
MBaAFAkUcuUgR7X3dT7xUm3aOO1Ci/5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEt
YTY1YjlmNjA3ZTNlLzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEtYTY1YjlmNjA3ZTNl
LzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4zIBZVV
qi+PYbmti2GaYtxq60fechUscnBNKYUmvBaZg4TbsleFhxTS2Gu8Aazw3TK5m24I
5e1GzdpxNeFG8lrMQuwRh+xl5zx/grlN9Ie5uiYLvYS7OdIhs5yBGipzCZ7jR4+X
y4qUcKCi41PXgY3sltXgbz4Z6GbQFHL4eKdIENp+qwHjj7Ll9p+aiiGtGCqw/Rjc
9cClXiHEOm+g1rfXw8hBs6ZCBUFClpBQFz3CxC0MJGgItoZWQQpkl0FJU0SRbFpK
1RMqM7Ld3Yj4IzOGJNZ8ju7o+mFJRu9PI3uNmqfMexmUP4Rp+eCVaW9BGdYHQqqu
3pH6KD7yQzUwEw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:42:35 2026 by rpki-client