Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: gYc1TkM1DhifFtzd1qB/sk55sGHceYMBYGYBjgsyVwM=
Subject key identifier: 96:3E:0E:1E:B0:60:5B:AF:67:DA:04:2C:44:B2:21:8F:25:ED:0B:BC
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019F9090AA049F45D55AD06A3878B916DA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0C5B
Signing time: Thu 23 Jul 2026 20:00:27 +0000
Manifest this update: Thu 23 Jul 2026 20:00:27 +0000
Manifest next update: Fri 24 Jul 2026 20:00:27 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: PAwm1fZgxA3moAhSWqbOltfBp0ZKtyVBPdZ58yBsyk4=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:aa:04:9f:45:d5:5a:d0:6a:38:78:b9:16:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jul 23 20:00:27 2026 GMT
Not After : Jul 24 20:00:27 2026 GMT
Subject: CN=963e0e1eb0605baf67da042c44b2218f25ed0bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:b5:92:c4:3c:87:a7:25:02:d2:38:de:3e:
2d:6c:1e:9a:8c:55:1f:e8:8a:f4:bc:d0:eb:d0:ad:
78:21:96:20:c7:8c:01:f3:1c:97:06:1f:05:39:11:
7c:99:9b:72:f5:51:3a:48:80:ea:42:20:97:2e:3e:
ac:35:05:b3:e5:6f:88:17:86:8d:54:b6:71:0c:0b:
67:15:60:54:d2:51:7f:29:55:27:1d:27:83:cf:6b:
fe:ec:3f:8e:21:ff:04:10:52:21:93:58:9e:1d:17:
7c:f6:fc:07:d2:28:ef:e1:05:37:d9:e4:01:31:e8:
3a:21:3d:73:2e:bd:67:14:d3:24:c0:4e:52:05:75:
7b:9f:e2:5e:02:2d:12:59:82:b5:2d:f3:d3:4b:e1:
d3:3b:26:3b:7b:5a:ee:c9:48:f5:80:d0:e5:9f:f8:
ea:2a:d6:d2:7f:dc:3f:e9:dd:d0:d9:87:e1:ad:55:
ea:5d:74:21:10:02:55:63:8a:d9:f4:fc:81:8c:b1:
71:eb:bd:f1:22:6c:07:ab:f1:19:47:d3:60:01:45:
02:55:20:c2:7f:eb:7b:21:5b:13:05:b4:60:91:5f:
20:ba:22:b0:7d:c9:2f:82:90:18:f0:52:f5:5f:39:
ff:a8:d6:54:c3:04:f4:d6:20:fe:cb:b4:83:f7:13:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:0E:1E:B0:60:5B:AF:67:DA:04:2C:44:B2:21:8F:25:ED:0B:BC
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:10:6b:3f:a3:04:6b:f1:e2:29:a1:5c:af:87:f9:b4:b7:23:
ac:54:c0:e9:9d:75:71:4f:14:77:f6:24:ae:de:12:8a:b0:37:
d5:a6:17:20:5f:de:d6:c7:ee:ef:cc:b6:4b:34:46:2c:17:70:
17:6b:f4:bd:aa:df:ca:c1:ca:f9:66:bd:e7:d2:84:eb:c1:37:
e1:48:b1:40:c3:61:01:b8:91:2a:c4:97:39:81:3c:6a:76:f9:
4a:2b:a8:da:d3:c2:d2:83:fc:7d:61:2b:81:01:87:85:5f:a4:
5d:af:c2:b5:95:1c:bd:fc:c6:c9:49:01:4b:b8:6a:4c:b0:e4:
72:9b:9b:1b:0a:c5:93:67:a2:ab:df:36:de:45:f4:dc:34:77:
56:d3:1c:6f:66:74:8b:a0:e5:28:87:05:97:6e:00:96:cb:5f:
95:85:b9:fd:af:f7:4e:d5:88:9f:ae:a3:38:1a:2e:bd:77:c6:
df:c5:44:28:c0:ac:62:93:ea:c6:03:30:62:59:53:ef:7b:ca:
61:98:36:2d:b1:8d:ae:89:8f:a7:bd:44:b2:64:99:3f:04:6a:
ca:9e:4a:3e:6b:7a:af:d3:73:15:3f:48:32:b4:62:b0:eb:2e:
e3:67:f0:78:dc:c5:11:87:41:20:51:11:14:43:7f:00:c2:65:
03:db:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:10 2026 by rpki-client