Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: Xdnbxb8WbnRqP33vkL+mxLxU8APDF7C4M7EUqyEmO+c=
Subject key identifier: 1F:2B:A4:0E:49:2D:AF:F9:53:E7:CD:8D:D0:0C:61:91:C7:5F:03:1E
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019D28843790E44B410480A2BBC279982EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0B1C
Signing time: Thu 26 Mar 2026 05:00:46 +0000
Manifest this update: Thu 26 Mar 2026 05:00:46 +0000
Manifest next update: Fri 27 Mar 2026 05:00:46 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: S5ztU1C0lTvi9mlPm1ysV0d5UXw+6sGdpy3CoL1Zlo4=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:37:90:e4:4b:41:04:80:a2:bb:c2:79:98:2e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Mar 26 05:00:46 2026 GMT
Not After : Mar 27 05:00:46 2026 GMT
Subject: CN=1f2ba40e492daff953e7cd8dd00c6191c75f031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:b3:b1:49:ec:4f:2f:1a:6a:e1:ba:68:af:
df:ff:33:3d:59:d8:a7:db:a7:84:7a:4c:d2:9b:04:
00:7f:60:af:b0:fd:8a:f1:da:0d:e6:46:18:22:b6:
0b:21:5d:93:8b:2a:91:70:ac:4f:66:6f:37:7f:40:
d0:51:fd:12:c0:b0:d7:35:57:03:83:65:57:00:03:
b5:99:02:d2:27:4e:d8:17:3a:0e:6c:30:de:59:06:
d2:4e:1f:0f:ee:3b:d6:c2:86:dc:ab:75:8e:1a:42:
5e:00:be:ec:e6:ec:4e:dd:ad:23:f2:a7:d4:7c:d4:
f4:ba:23:fa:19:6c:c5:f8:d6:b6:f1:88:fc:18:65:
07:2b:e1:e9:2f:9c:70:78:be:00:2b:a0:2d:1a:50:
cf:0c:56:e5:97:2d:01:2c:df:5c:96:91:6d:09:da:
0d:0c:42:91:8d:d1:fa:33:0e:39:ed:61:10:3f:10:
5d:d7:34:e5:e5:c6:c1:d9:da:38:2f:04:e8:9e:72:
b5:1f:5a:97:ab:89:7b:87:65:c1:a9:da:5d:f2:33:
c1:83:05:73:54:c6:bd:39:af:60:82:fc:d0:dd:1a:
bd:c4:4a:0d:84:ac:a3:38:b1:89:14:7d:ad:55:b0:
83:78:77:9f:cd:38:2b:b2:39:fa:bd:93:84:86:15:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:A4:0E:49:2D:AF:F9:53:E7:CD:8D:D0:0C:61:91:C7:5F:03:1E
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4c:19:39:6d:ce:d2:ad:6d:d7:f3:af:fb:e5:c5:11:28:70:
9f:5f:66:d1:b8:52:bb:cb:22:e0:76:88:0c:8d:05:00:09:48:
54:10:38:e1:7f:da:5b:23:9e:8b:22:b4:ae:c2:fc:17:ef:6d:
67:8f:9f:19:ba:0f:a6:98:7d:38:ce:38:22:fa:0d:8d:2e:fe:
4e:83:97:2a:0f:7f:d7:f9:5e:57:c2:47:31:ab:b0:a9:f7:54:
a3:6c:9b:39:f9:6e:c1:27:35:31:f9:38:b3:83:57:de:58:a9:
ca:31:2c:50:74:7a:82:d3:46:4d:f9:ea:8c:59:4b:2d:be:1e:
e5:4a:f7:55:f4:e0:39:5c:3f:f8:be:d8:40:e9:b1:3e:b6:71:
cd:85:83:b6:19:75:fb:70:75:e5:f5:83:2d:a5:18:38:b6:6d:
3d:93:f3:7a:68:a5:46:67:3b:11:01:78:dd:a0:44:48:e2:ca:
f0:b3:2f:bf:2e:9e:6f:f9:76:f1:5f:13:18:f0:fa:80:f2:67:
36:56:fa:f7:23:b6:be:d9:7c:d3:71:03:e2:62:a0:15:db:ba:
9b:71:fc:22:3b:3d:b3:6d:ee:69:30:32:bb:be:e5:a2:28:59:
e2:0f:9d:a8:bf:c5:93:9a:e1:9f:8e:ee:b6:d4:72:7a:48:fb:
d4:b2:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:25 2026 by rpki-client