Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: Kn/DDFM4jq4k2kOAwqh0AM2rNNjH2BcURa8uzBpouuc=
Subject key identifier: A6:D4:1D:72:C9:CC:F2:A6:7F:FE:27:FD:22:41:D0:F3:B1:E8:64:FA
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 01A1DF4C5D1E2A3520814532892CC8A7AEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 0573
Signing time: Sun 15 Nov 2026 13:01:26 +0000
Manifest this update: Sun 15 Nov 2026 13:01:26 +0000
Manifest next update: Mon 16 Nov 2026 13:01:26 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: 4dMGqll5L/iiU7Ulu6xAAg7b4C6TowpfpNaTKkNenPY=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:5d:1e:2a:35:20:81:45:32:89:2c:c8:a7:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Nov 15 13:01:26 2026 GMT
Not After : Nov 16 13:01:26 2026 GMT
Subject: CN=a6d41d72c9ccf2a67ffe27fd2241d0f3b1e864fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:b7:10:c4:76:75:d0:31:cc:d8:12:f1:77:
70:73:8b:e3:f3:ca:76:20:05:b4:05:3b:1d:54:62:
cd:e5:90:20:4c:4d:73:e0:c3:3d:d5:e4:7b:14:db:
82:2c:6c:78:ba:f4:1c:35:0a:2e:92:a0:bf:b1:50:
6f:eb:41:cc:d5:ad:d2:80:a7:bd:6a:f4:ec:46:c3:
f9:35:b2:32:d7:c9:be:61:a8:98:8c:d5:e7:9c:4a:
8e:27:f4:88:d5:f5:d7:fc:80:61:92:50:e9:77:1e:
de:bf:ea:e1:5a:15:37:2e:50:93:e2:52:a0:54:36:
f4:ae:90:fb:0a:6e:4e:cf:57:38:31:ac:5b:92:b8:
fe:13:57:37:b7:10:49:74:cd:3c:55:72:33:70:97:
31:16:23:cf:c9:32:ab:72:de:09:76:5e:8c:f8:c4:
39:94:25:18:43:95:0b:51:d4:d9:96:88:fe:3c:5b:
77:8a:19:6a:21:37:14:29:75:ed:29:d1:16:65:d5:
f6:2e:1f:3e:25:e5:5c:fb:b2:18:1f:5c:45:6b:d7:
56:e1:f2:f7:1a:86:9e:7b:11:9b:ae:7b:5f:bd:42:
3c:1f:0e:d3:48:d0:92:40:ac:d2:16:e1:74:15:d7:
14:6a:f0:21:67:0f:f9:84:96:48:2d:d0:cf:6a:79:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:1D:72:C9:CC:F2:A6:7F:FE:27:FD:22:41:D0:F3:B1:E8:64:FA
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:12:71:fa:78:22:29:79:0b:83:40:ac:95:4b:5d:0e:ac:70:
b8:1f:69:c6:23:b1:14:32:62:b8:d2:17:45:e4:9b:62:76:19:
32:e6:5d:22:81:fd:cc:cc:3c:f0:c1:2a:53:ae:2a:e3:0a:da:
00:5b:d2:43:48:0a:fb:bd:74:73:c5:52:04:33:92:35:d3:23:
87:35:6a:d2:bf:39:3e:7b:bf:a4:af:40:96:d0:09:75:4e:74:
85:1f:c9:ed:20:b6:4a:b3:a7:ce:40:85:1d:04:03:95:98:a4:
da:a7:5e:e0:b5:f8:91:4f:bb:fe:7b:85:40:fe:4c:18:76:2b:
ae:3b:f3:f6:c3:8e:72:3c:a7:2c:49:87:f4:ee:78:1f:33:7c:
78:ce:be:4d:bc:33:61:1b:b6:75:c8:5f:d9:23:94:fc:cb:32:
16:7c:a3:5f:95:ef:e2:24:c3:18:6f:f8:be:79:b5:eb:ae:0e:
17:99:39:42:1c:6f:5e:e7:00:76:26:b0:cc:a0:57:65:86:76:
85:f2:85:a2:8b:93:dd:f8:f1:23:2e:c7:25:e3:7e:fa:cf:72:
55:3e:2d:61:e9:a3:c8:55:20:b2:08:22:03:1b:9f:6c:27:6b:
fa:1d:3f:f3:6d:4b:19:32:2f:8b:58:93:67:d0:d7:ff:e5:d8:
cc:37:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:21:59 2026 by rpki-client