Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: prJJFTlUrXJLKghjA2nzRgXFpNPrgSEkPXufPQwYQjw=
Subject key identifier: 90:FC:B3:8F:B4:6A:79:F9:77:4E:FF:7B:FC:9A:15:C2:04:96:B7:B6
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 01A0DACCFEAF1CE8476083FC4F6F8AED6857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 23:01:02 +0000
Manifest this update: Fri 25 Sep 2026 23:01:02 +0000
Manifest next update: Sat 26 Sep 2026 23:01:02 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: uI3sBwUMKAeS8YKtI3FUXcvzVBn9e2hiD0D2sZMJHGU=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cc:fe:af:1c:e8:47:60:83:fc:4f:6f:8a:ed:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Sep 25 23:01:02 2026 GMT
Not After : Sep 26 23:01:02 2026 GMT
Subject: CN=90fcb38fb46a79f9774eff7bfc9a15c20496b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:7a:2f:fe:10:0b:34:cc:b3:26:e8:63:4f:
05:0c:cf:d2:61:61:cf:6c:2b:a3:8c:fe:99:a3:b6:
22:f6:31:e4:44:0c:69:73:cd:79:46:c7:0c:4d:48:
48:c8:78:3e:ee:fc:a8:25:8e:0e:8c:f7:51:58:48:
9f:59:8b:c0:69:c8:d9:0a:52:f6:9e:3e:b2:63:34:
15:7c:62:fe:5a:83:0c:84:d5:0e:01:6e:da:4f:e5:
f2:58:b9:36:4f:56:a3:a7:a1:c3:4b:02:03:f0:88:
c9:37:47:f9:17:3f:e8:44:33:24:ae:ac:6c:79:05:
57:d0:a3:16:45:c8:78:41:5e:25:6c:4e:58:74:c7:
55:c5:f9:cd:76:47:5c:9f:a6:3e:1f:94:8b:27:22:
bb:0d:44:55:d4:50:f8:a0:c7:4f:84:18:95:7b:c1:
96:77:a0:75:b3:54:63:7d:5f:39:bd:d6:af:cf:8e:
7f:59:54:50:5c:bd:25:4e:69:2c:24:ef:13:a2:e6:
ec:6f:47:e0:04:7f:ac:0f:48:d9:28:46:10:44:bc:
29:4a:aa:dc:38:a5:13:a1:c6:d9:85:d4:49:8c:cd:
4f:58:57:c5:7c:6a:d6:13:17:d8:0d:9b:ef:cf:4f:
9a:32:24:b7:e5:29:74:2d:fd:89:c2:eb:75:90:84:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FC:B3:8F:B4:6A:79:F9:77:4E:FF:7B:FC:9A:15:C2:04:96:B7:B6
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:67:c2:5d:5b:dc:9e:ed:4a:65:a6:34:f1:e2:e4:9e:85:aa:
ad:ec:7d:57:e3:33:00:76:95:7e:08:5b:ef:39:d9:b0:6d:37:
47:45:16:97:df:64:aa:2d:3a:2c:32:77:4f:95:9d:7f:48:ac:
cf:e7:56:06:b3:38:9a:dc:27:22:97:6a:ed:e6:96:88:4f:2b:
5c:ca:20:b5:56:57:d3:79:84:0e:5a:b2:88:0e:9e:f7:69:52:
1c:70:56:3e:5c:62:50:a6:25:e2:d9:2d:b6:55:12:be:13:c4:
20:8c:cc:be:2b:ce:4b:f9:c5:28:e4:a8:4e:ef:43:51:05:a0:
bb:7b:68:15:64:b1:d0:42:dc:c0:a9:59:27:9d:b9:13:d2:75:
34:df:d1:f6:7b:fb:6e:a1:59:12:c8:8d:30:45:8d:c7:ae:f7:
d5:f8:63:c4:ec:3b:73:43:7e:d6:51:9f:42:ae:75:82:5a:52:
48:24:0d:2f:20:b9:f0:f9:e3:6d:40:18:62:12:62:e2:32:48:
99:3b:e2:52:c5:ca:4a:d0:3f:9f:6c:eb:5f:f4:c0:e8:4e:e5:
76:d1:70:6c:20:ca:5d:51:83:f9:85:c5:14:50:2f:ad:5b:3c:
7e:0d:d7:2a:37:ae:6b:fe:f0:f7:31:65:a2:92:f9:d9:fe:76:
6c:7b:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:34:56 2026 by rpki-client