Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: wjlOrXYRXl9H6VeiW6jcpgA5Dq/oND89UoFrYtvfwIg=
Subject key identifier: C6:70:27:34:93:ED:FE:8F:2D:9D:E1:FC:AB:A7:BA:9B:CF:BF:59:EC
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 01A0D8A86130864032C838F9B17DD08C63AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 04EB
Signing time: Fri 25 Sep 2026 13:01:48 +0000
Manifest this update: Fri 25 Sep 2026 13:01:48 +0000
Manifest next update: Sat 26 Sep 2026 13:01:48 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: kEn0ydi0v8CY6a/b3dKaomV2OHgS/sTFL1CRC5088ME=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:61:30:86:40:32:c8:38:f9:b1:7d:d0:8c:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Sep 25 13:01:48 2026 GMT
Not After : Sep 26 13:01:48 2026 GMT
Subject: CN=c670273493edfe8f2d9de1fcaba7ba9bcfbf59ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:90:ee:9c:3b:94:fa:9a:fb:5c:cf:e3:aa:
80:28:73:90:c7:cc:5b:00:3e:f2:b1:d8:c2:8a:57:
1d:a5:ab:ae:58:47:9f:cf:c9:cf:21:91:ae:6a:fe:
b0:d9:96:d0:b4:e6:f6:3c:ff:25:1c:2a:80:c6:dd:
38:64:4b:68:f2:ff:e2:25:36:ea:f9:36:36:6c:f5:
42:3b:56:48:9a:19:f5:1c:92:e7:ad:34:e4:dc:14:
ad:2d:48:c9:df:93:bc:a1:3b:04:e5:14:82:dc:aa:
d4:61:b5:0a:88:28:91:42:ff:9e:d6:ae:ed:c7:69:
b9:61:01:ad:c2:47:32:8a:43:cb:7d:8a:16:96:d3:
05:d6:29:b5:84:14:05:5c:10:96:8e:20:b7:7a:e1:
f9:a7:76:64:f3:87:95:ba:36:fe:c8:e3:b0:b3:40:
f0:92:50:8f:1c:63:e1:fe:4a:27:ae:07:ff:86:e4:
35:fd:91:97:e4:9a:3b:ce:05:fc:25:db:a0:a8:b2:
3d:82:98:75:7f:7c:4d:35:0c:68:8d:e8:21:0c:8c:
77:56:80:a6:5c:c9:b4:86:e4:fc:1d:b9:99:1c:81:
cf:27:32:bf:03:a3:e4:e1:7c:85:20:f9:18:c8:ac:
64:4a:2d:85:21:21:b7:52:8f:8a:c5:42:aa:de:96:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:27:34:93:ED:FE:8F:2D:9D:E1:FC:AB:A7:BA:9B:CF:BF:59:EC
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:b0:65:63:90:4e:56:85:31:a3:46:c9:fc:d3:29:df:3b:
75:eb:57:b6:98:38:85:e1:89:9d:44:89:0b:ba:f9:db:a3:a1:
2d:ad:21:1b:90:0b:e6:d2:fe:d4:3e:3b:e4:61:cc:b7:07:6e:
d0:23:f5:92:2c:43:d1:78:53:0d:42:e9:51:14:38:bc:0e:81:
4e:40:30:99:c4:bb:bf:d3:59:1e:ab:a3:22:4d:00:5b:9e:b7:
82:f7:ab:62:44:27:d2:52:a8:cf:4f:45:91:d9:24:62:8a:c0:
83:cd:54:17:3f:ca:f2:b7:48:56:47:47:89:2d:c4:42:ee:96:
2d:c9:09:07:7e:41:1b:8a:ff:58:de:81:88:cd:6f:22:ed:c0:
fb:3c:a3:05:c4:f0:77:97:41:58:d8:ee:d2:d6:7f:26:6d:13:
56:bc:b3:f4:87:82:9b:73:05:6d:c6:ea:12:f7:e4:f4:b0:3e:
cb:3e:4d:f3:eb:8e:8a:f4:60:56:d2:49:e3:0c:08:50:e5:e7:
f2:2c:b6:45:87:b4:a0:71:dc:09:87:15:c4:2e:51:35:ca:43:
a9:64:59:45:46:55:8f:a1:6a:1b:13:69:42:e6:94:2d:8c:2a:
42:5d:8f:63:cf:dd:07:a9:b1:c2:33:fe:53:93:56:18:10:ee:
ba:43:fd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:12:42 2026 by rpki-client