Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: x4O0eJhn9IbJ/RL1sPhLCqnvgLmysYZuAxt1ar6DG7g=
Subject key identifier: 81:15:26:67:AC:7E:26:0D:81:B4:97:F4:2F:13:E0:EC:62:6A:0B:3A
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 01A104A4AE640F752C72D103DC2CBE2378AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 0855
Signing time: Sun 04 Oct 2026 02:01:03 +0000
Manifest this update: Sun 04 Oct 2026 02:01:03 +0000
Manifest next update: Mon 05 Oct 2026 02:01:03 +0000
Files and hashes: 1: 6ABbzKC7xD3f15f1nL7ehPPdv8g.roa (hash: vm92m0MvDsKxhJur0/wyRBU4n09f3ypTfzNsc2DUitY=)
2: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: dz3xYCugauz7cHL+SqskTczb3PIjykpJ2oXGnVApR68=)
3: uWma75PdV6AVC83aCG-d5GXsBTA.roa (hash: l+sIuRGwU1mgUSZbtQoGfvEHgDWDmkYLosWZi/xYnJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:ae:64:0f:75:2c:72:d1:03:dc:2c:be:23:78:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Oct 4 02:01:03 2026 GMT
Not After : Oct 5 02:01:03 2026 GMT
Subject: CN=81152667ac7e260d81b497f42f13e0ec626a0b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:28:7c:09:75:b5:e9:be:d2:d7:ed:52:9f:
6d:37:18:35:8c:51:44:96:eb:24:93:c6:8c:1c:0b:
6e:1a:05:3b:da:ec:b6:e9:9f:71:ce:c8:f3:09:f4:
63:30:a8:79:a7:ee:57:3a:34:dd:bf:b6:5d:98:70:
9c:89:ae:1b:94:88:d8:f0:66:c6:24:be:87:bb:6d:
cf:21:d6:45:04:48:2d:1c:9f:6e:97:c3:01:e1:0b:
53:dc:db:f9:77:43:1a:9a:95:3c:51:da:c5:ad:ea:
79:ea:82:b6:7a:7a:cb:89:2d:33:e0:2d:15:ca:8b:
ab:40:5c:74:9e:28:7f:a9:22:f4:c0:64:3f:43:71:
39:46:f9:c8:94:d8:10:d7:25:13:a2:e0:2c:48:40:
4c:a1:78:5f:92:be:03:d5:8f:79:25:d0:c5:6e:28:
1a:bc:65:1a:7c:b1:eb:f3:fe:46:ab:1d:ce:b8:10:
28:60:1c:a1:4b:2d:1b:50:f4:d5:3b:70:aa:63:0f:
5c:ff:90:cc:84:a3:13:d9:e3:73:c8:17:0e:b1:f4:
82:6c:22:c6:bf:b2:8d:67:17:f8:c0:c4:96:5f:f1:
3b:37:c6:c1:65:2a:7a:d1:1c:3c:72:e6:3b:24:7e:
8a:80:02:eb:75:89:a4:f6:7b:aa:23:a5:a7:09:c6:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:15:26:67:AC:7E:26:0D:81:B4:97:F4:2F:13:E0:EC:62:6A:0B:3A
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:62:64:0f:92:4e:e3:45:b7:1c:25:99:51:2a:66:96:72:f8:
6e:83:82:a2:28:01:d9:74:8b:ad:17:9a:0c:9c:d0:58:49:ab:
dd:5f:c0:a8:e8:6b:f4:b8:36:69:ed:a9:1b:d3:c7:fd:29:53:
a5:2c:81:e5:1c:b9:c1:09:03:0d:16:10:f1:93:0a:0d:5a:a9:
22:f2:a4:e4:a3:0f:3a:52:16:65:09:71:21:70:01:0f:45:a9:
ae:7c:86:57:79:a0:2e:db:99:93:e0:c7:c7:ea:74:21:c6:85:
a2:8c:5a:0b:6e:c2:f6:fc:16:07:39:3b:4c:96:da:32:ad:5f:
38:fd:5f:0f:7e:6d:4f:8c:af:aa:53:f0:0a:f6:60:81:55:0d:
3a:78:63:6d:b9:41:71:30:0e:cc:ba:bd:0d:fa:3c:0e:e3:11:
2b:9c:0f:d8:25:a0:50:5d:43:12:16:76:bf:42:d9:1d:4d:b5:
0a:be:b3:76:49:71:1a:2a:c9:b5:22:71:38:6f:b3:9e:88:fe:
92:1b:9b:cf:6b:a2:37:1f:d6:6a:09:f9:3b:b1:1e:35:f5:27:
53:a7:ba:64:fb:82:2f:61:c4:ad:0c:11:47:0b:9d:a3:17:e8:
87:0b:c9:da:09:8b:0a:89:c2:40:ec:6f:a4:a1:d7:a3:1e:ff:
72:42:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:13:29 2026 by rpki-client