Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: M0DS+/EoaW2w7994EF3+BrqzLAKOJElcW+vyeZK1amM=
Subject key identifier: 1C:B5:FD:70:56:B9:BA:12:1F:66:91:23:17:4A:61:1A:8C:F0:56:02
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019F9059FEF7C065FAABAE3219442131FC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 0441
Signing time: Thu 23 Jul 2026 19:00:44 +0000
Manifest this update: Thu 23 Jul 2026 19:00:44 +0000
Manifest next update: Fri 24 Jul 2026 19:00:44 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: uS/yYEarl/TV8awlCr+tyaxpM4o7sIUxfAB1YbZf4HU=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fe:f7:c0:65:fa:ab:ae:32:19:44:21:31:fc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Jul 23 19:00:44 2026 GMT
Not After : Jul 24 19:00:44 2026 GMT
Subject: CN=1cb5fd7056b9ba121f669123174a611a8cf05602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:6c:cd:c6:34:97:78:88:fe:3e:b7:9c:1d:
8b:ea:26:97:e4:e8:e9:d9:77:3b:3f:7e:a3:1c:d0:
49:5e:8b:e7:30:60:1d:46:13:53:0c:ef:b6:9b:44:
3b:73:b0:57:6a:ad:48:84:51:cf:af:9e:d2:01:b3:
d2:c2:e4:bc:5f:e9:50:c9:bf:ce:69:cb:6a:32:8e:
5a:1f:3d:ff:f8:a3:c1:33:17:68:b1:51:ba:cb:fd:
52:14:fc:51:d6:cd:75:c1:12:ad:37:a0:72:cb:1c:
fa:78:6b:81:da:38:83:bc:3f:43:ea:52:4b:c2:b6:
05:76:55:e0:96:d2:ab:66:b4:0e:1c:af:8f:c9:85:
d7:88:7b:9b:98:7f:8a:8e:71:8a:e8:80:08:5c:5d:
43:90:79:ba:9a:16:3c:4a:a6:1b:38:4b:0c:41:6e:
1c:18:4d:de:6f:c5:71:f8:8f:98:5c:1e:21:f1:20:
a5:11:48:72:17:3a:2e:6c:b0:72:94:be:74:57:f4:
77:0f:52:a3:d9:f5:59:7a:e1:11:2e:da:4d:cb:52:
48:81:8a:9e:52:57:50:21:a6:46:5c:ac:17:27:b3:
84:f5:36:04:c1:0f:33:74:29:48:9d:1b:37:34:9c:
2e:81:70:6e:71:f7:67:f2:ef:de:1c:de:5b:96:4b:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:FD:70:56:B9:BA:12:1F:66:91:23:17:4A:61:1A:8C:F0:56:02
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:30:fb:35:41:96:f5:cb:2c:33:b7:f2:2a:c2:4b:18:ce:ce:
43:60:75:49:02:cb:ce:27:48:35:3e:40:47:2c:3e:4f:a2:35:
a1:13:39:bb:29:1d:e4:d2:c0:6b:91:44:a5:7e:f5:61:bc:bc:
d7:5f:2c:13:35:51:b4:10:e6:6d:ba:eb:c4:25:e6:99:cd:78:
e0:6c:90:88:a1:b5:99:1a:59:0b:bc:ee:60:0f:d4:5a:f7:6b:
27:a9:dc:d8:4b:0a:da:43:f3:1f:72:21:93:96:b2:e6:d9:e2:
5a:68:5c:72:b9:13:5b:f6:e2:a5:49:4c:a2:d6:17:9e:c6:f4:
26:95:44:21:d1:44:4e:02:c3:ff:31:4a:0e:38:99:f5:21:c4:
7e:ef:98:66:06:35:5f:51:f6:4d:4f:c5:0e:c7:c9:a2:4d:ba:
3c:69:ed:3a:a6:9b:b9:ed:eb:96:60:30:96:18:a7:dd:99:d3:
0c:ce:ec:30:c0:be:fd:68:53:2d:63:5a:d5:33:2a:b6:16:22:
36:15:4d:41:98:a5:44:76:77:3e:a8:ed:2a:0c:e5:dc:ee:86:
eb:cc:fb:83:8e:55:2a:ac:9f:f0:df:75:55:7b:de:23:37:54:
db:ff:81:26:f3:b9:8f:90:b2:4c:61:83:bb:d4:80:a8:bf:a8:
5f:77:7f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWf73wGX6q64yGUQhMfxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTBlMzc2OTQ0ZDMwMjk0ZGVhNDFmMjFmYjdmMWUxY2Ez
NjhhOTMwHhcNMjYwNzIzMTkwMDQ0WhcNMjYwNzI0MTkwMDQ0WjAzMTEwLwYDVQQD
EygxY2I1ZmQ3MDU2YjliYTEyMWY2NjkxMjMxNzRhNjExYThjZjA1NjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0FszcY0l3iI/j63nB2L6iaX5Ojp
2Xc7P36jHNBJXovnMGAdRhNTDO+2m0Q7c7BXaq1IhFHPr57SAbPSwuS8X+lQyb/O
actqMo5aHz3/+KPBMxdosVG6y/1SFPxR1s11wRKtN6Byyxz6eGuB2jiDvD9D6lJL
wrYFdlXgltKrZrQOHK+PyYXXiHubmH+KjnGK6IAIXF1DkHm6mhY8SqYbOEsMQW4c
GE3eb8Vx+I+YXB4h8SClEUhyFzoubLBylL50V/R3D1Kj2fVZeuERLtpNy1JIgYqe
UldQIaZGXKwXJ7OE9TYEwQ8zdClInRs3NJwugXBucfdn8u/eHN5blks9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy1/XBWuboSH2aRIxdKYRqM8FYCMB8GA1UdIwQY
MBaAFAuQ43aUTTApTepB8h+38eHKNoqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAt
MjBhMzIxOGI5OGNkLzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAtMjBhMzIxOGI5OGNk
LzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzD7NUGW
9cssM7fyKsJLGM7OQ2B1SQLLzidINT5ARyw+T6I1oRM5uykd5NLAa5FEpX71Yby8
118sEzVRtBDmbbrrxCXmmc144GyQiKG1mRpZC7zuYA/UWvdrJ6nc2EsK2kPzH3Ih
k5ay5tniWmhccrkTW/bipUlMotYXnsb0JpVEIdFETgLD/zFKDjiZ9SHEfu+YZgY1
X1H2TU/FDsfJok26PGntOqabue3rlmAwlhin3ZnTDM7sMMC+/WhTLWNa1TMqthYi
NhVNQZilRHZ3PqjtKgzl3O6G68z7g45VKqyf8N91VXveIzdU2/+BJvO5j5CyTGGD
u9SAqL+oX3d/TQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:32 2026 by rpki-client