
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: rJ+nbSl/t/yMoHIzae1kWRphvqKUJU+Jg/LUrARVoos=
Subject key identifier: 70:A0:0F:93:62:F5:1F:E7:6D:33:C8:EB:49:7B:A0:7A:7D:87:30:8E
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019E1D90CD053FC6D880E9F4792F250CDB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 0381
Signing time: Tue 12 May 2026 19:01:29 +0000
Manifest this update: Tue 12 May 2026 19:01:29 +0000
Manifest next update: Wed 13 May 2026 19:01:29 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: ki4HxrFSAlAeEdXzbklSMsp/xnnhy6HmGxrrwzOx/BE=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:cd:05:3f:c6:d8:80:e9:f4:79:2f:25:0c:db:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: May 12 19:01:29 2026 GMT
Not After : May 13 19:01:29 2026 GMT
Subject: CN=70a00f9362f51fe76d33c8eb497ba07a7d87308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:77:ee:bd:cf:3f:03:35:25:ee:b4:cd:f1:
df:0b:f7:86:70:f7:3f:ca:f7:c9:ae:c2:31:e0:7f:
32:6c:3b:67:f5:34:cd:4a:d8:6f:e8:0f:7e:1e:c6:
05:12:c9:33:ff:b7:ba:49:82:bc:c5:66:f5:3a:34:
f1:b4:df:21:16:fc:b3:66:e1:94:79:9a:b1:9b:70:
83:34:64:36:5d:75:ee:5a:6a:0b:59:9c:1c:47:cb:
56:93:65:ee:76:10:35:e8:a1:c0:35:19:11:4a:1c:
33:49:4a:42:e5:c3:93:f2:40:c4:0a:08:9f:e4:b0:
9e:18:5d:ef:e7:b6:70:51:ef:59:55:10:91:f1:f7:
8a:bd:5d:a2:f6:c6:5c:78:2f:47:cd:20:73:2b:40:
80:48:2a:0e:8b:c5:80:f0:7d:e1:68:de:b8:93:0a:
b4:38:7a:94:35:31:63:f6:dd:0e:2a:da:60:c9:76:
3e:16:3e:1d:92:1d:36:da:70:fb:b4:b3:63:a5:10:
03:3f:37:e1:1a:ba:ac:61:57:41:06:ac:68:2f:82:
e5:04:4f:f8:e3:02:cf:41:33:08:53:49:be:04:c8:
3c:45:21:12:a8:f9:cf:dd:a4:d7:d7:61:c7:0f:7b:
2c:3d:67:fa:39:cd:f8:89:f0:3a:83:16:62:55:47:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:0F:93:62:F5:1F:E7:6D:33:C8:EB:49:7B:A0:7A:7D:87:30:8E
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:27:a3:aa:07:c5:ab:eb:33:56:37:25:68:e0:2e:fc:51:3b:
05:a3:24:73:7c:7e:b8:c9:3c:05:6d:f2:3c:70:9c:a2:cb:89:
ef:c6:0f:1d:bc:f0:a3:4f:97:66:4a:39:a8:9f:3d:33:90:a2:
b4:5f:d4:6d:03:18:ca:45:70:51:39:ff:76:13:f7:30:5c:14:
31:3d:83:64:d5:26:58:34:d5:ca:c8:cf:a6:19:55:4d:3c:34:
4f:1e:fd:cf:80:5f:d9:3d:5c:eb:bc:22:21:c0:f3:e8:40:67:
b0:bb:eb:8d:2b:4d:71:50:31:fe:5f:f6:07:f9:13:e9:a8:4b:
a9:1c:b2:b4:5e:91:e2:8b:ed:aa:46:44:d1:f1:8c:2d:14:13:
3e:5c:ce:96:4e:1f:0f:66:05:21:dc:1c:93:79:2f:dd:76:f0:
ee:2c:69:91:89:e8:3c:a9:75:7c:cf:91:52:19:69:3b:69:58:
07:6e:1b:0d:f3:49:39:eb:01:1e:25:8c:af:0a:3e:28:99:24:
78:19:18:17:4c:c8:0c:bd:f6:7b:a7:a6:62:a6:39:28:4f:19:
4d:0b:ee:24:3e:39:fb:82:e7:39:f5:a6:33:27:82:76:2a:e5:
67:bc:9c:79:28:97:1d:8d:b3:d9:1c:4e:8e:1a:c5:d3:a0:b4:
cf:36:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:35 2026 by rpki-client