Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: iHC2RSsHmL+k0RCvASLhyMlF1VR84wutp4l+cl/lQY4=
Subject key identifier: 69:5A:9B:B6:A2:A1:BB:C5:65:D6:D1:DE:64:8E:5B:A7:E7:B8:C7:2E
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 01A0D8DEB8459E3E00EAD1205848CD0C4942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0D05
Signing time: Fri 25 Sep 2026 14:01:09 +0000
Manifest this update: Fri 25 Sep 2026 14:01:09 +0000
Manifest next update: Sat 26 Sep 2026 14:01:09 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: vuekjlVRcXexkLzyX8EZSGu/OhSQCrmjG4KtXoskLVk=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:b8:45:9e:3e:00:ea:d1:20:58:48:cd:0c:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Sep 25 14:01:09 2026 GMT
Not After : Sep 26 14:01:09 2026 GMT
Subject: CN=695a9bb6a2a1bbc565d6d1de648e5ba7e7b8c72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:7c:78:e0:56:36:a4:9d:22:a6:81:93:6d:
13:07:17:9d:f3:b6:56:e2:6d:ba:be:4c:3e:db:8b:
e2:0a:40:2c:05:3c:7d:f6:eb:6d:2e:6a:5f:97:b3:
37:5d:82:a9:63:80:d8:8e:76:0e:3d:61:e4:b3:29:
9c:d0:c5:06:f2:78:ba:d3:c1:e5:38:25:3d:11:81:
24:8c:0c:63:d5:51:92:d8:52:7c:d9:7a:22:01:a0:
08:2f:35:4d:64:34:b9:f4:4b:a7:8f:aa:51:7f:a1:
47:42:d6:2e:93:a3:cd:73:dc:ee:ff:37:2c:1c:50:
7f:ce:32:7b:98:d9:62:0d:95:ca:dd:a6:db:96:0d:
ca:65:d0:0f:1d:0a:db:5b:74:5a:93:e0:32:c5:df:
2c:28:aa:ac:4d:4d:c5:59:9f:b5:51:e4:bf:21:a8:
92:35:31:c8:ca:ff:f4:b6:80:11:83:ce:e0:57:54:
8b:e7:f8:d0:19:e0:82:ed:b3:d1:0c:9c:90:96:8b:
90:db:dd:5d:47:3d:dc:13:e6:a4:b6:23:77:5f:e3:
5c:28:1d:ba:87:61:dc:24:b3:b1:00:83:3e:f8:66:
94:f7:b8:b1:bc:76:86:57:17:28:59:fa:6c:95:8b:
a1:30:23:9f:82:26:ef:55:fd:2a:5a:d1:cb:77:4a:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5A:9B:B6:A2:A1:BB:C5:65:D6:D1:DE:64:8E:5B:A7:E7:B8:C7:2E
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c2:d0:dc:80:7c:2c:20:ae:4d:df:bf:e9:7d:2e:f0:b0:5f:
2c:ed:bf:1b:f6:d8:5a:c7:46:cd:c6:0b:e0:4d:87:98:1e:d4:
ca:9c:4e:ed:01:2e:85:ae:3a:0b:b6:57:ae:fb:db:3a:56:a7:
dc:c5:65:ce:54:e9:d9:58:53:ed:40:7a:f0:2f:da:ba:ea:66:
a4:5f:6f:31:13:85:56:c8:55:24:b4:78:82:af:07:ab:e7:fa:
f1:c4:07:81:18:52:50:3b:6c:e9:f9:66:7b:3e:11:44:65:0a:
bf:25:e4:26:f8:eb:f7:ac:d1:12:2d:78:39:da:37:b7:71:81:
43:6b:bf:6b:ca:c8:38:e9:9f:59:ae:ef:2e:13:f1:fb:65:df:
02:9a:b8:f1:80:56:f6:4b:e5:3e:90:bc:2c:5f:7e:47:eb:14:
55:7b:d5:48:23:80:b3:51:44:fb:99:64:b8:6a:8d:d3:2b:60:
03:2f:30:d1:b1:4f:c3:11:f2:d7:52:70:a6:65:77:8a:b0:21:
a1:b9:80:20:8d:44:5c:d0:d3:f5:f4:87:09:9c:63:47:d4:cd:
d3:12:13:73:0b:8f:46:ab:e6:53:9b:63:fb:c5:06:3d:79:e4:
0f:66:48:b5:e3:a1:17:18:d0:98:5f:3c:7d:0f:cf:5e:b6:1e:
c2:09:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:20:20 2026 by rpki-client