Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json)
Hash identifier: IljtQJfrFwpU39Gks2CMylok8pOfCcBH6xHioiz2Ils=
Subject key identifier: 3C:98:08:86:4F:CA:9D:5B:16:9C:0E:7F:6D:BE:FC:03:46:06:29:4D
Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Certificate serial: 01A0D31599889E043389DFBFC2CFC93C8A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
Manifest number: 0336
Signing time: Thu 24 Sep 2026 11:03:23 +0000
Manifest this update: Thu 24 Sep 2026 11:03:23 +0000
Manifest next update: Fri 25 Sep 2026 11:03:23 +0000
Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: QIRM6HvFyd1j1xSKodl6zNRTxO8eHaF6CG0+IgfiaPc=)
2: _5oe6VqZsqBT0LMhmKV2LIl_uf8.roa (hash: /SkExJhWDQiBSVIh+Uw/CkRQN60+0HSnourFk+/DB2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:99:88:9e:04:33:89:df:bf:c2:cf:c9:3c:8a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a
Validity
Not Before: Sep 24 11:03:23 2026 GMT
Not After : Sep 25 11:03:23 2026 GMT
Subject: CN=3c9808864fca9d5b169c0e7f6dbefc034606294d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:8e:18:d7:40:bc:1e:52:e9:68:45:58:16:
90:b3:0a:75:a8:b9:e1:79:18:32:8b:b3:77:16:e8:
28:42:74:28:ec:76:95:ae:f0:e7:49:e2:21:d3:a3:
1e:9b:62:3b:2d:3d:1d:d7:06:a8:de:97:df:e0:4f:
d2:98:02:19:1a:50:5c:30:7c:6f:3c:7a:fd:3f:27:
54:59:54:52:33:fe:24:6c:5e:ba:7e:27:22:cd:a0:
c5:7d:78:18:b4:31:07:06:91:49:60:51:31:c8:c3:
52:d4:94:ac:63:9f:b0:47:23:61:f8:41:79:99:10:
fc:09:eb:88:7d:fc:47:c2:bc:41:1e:8c:6c:c1:63:
8f:91:ec:52:4d:06:80:ae:d2:66:5b:ed:3e:82:e3:
4f:0c:5d:a1:08:90:98:08:a2:df:80:2e:45:ff:cc:
53:23:67:8c:f0:a8:eb:d1:6d:ba:93:26:1f:a9:34:
73:ae:32:bc:fb:bb:28:40:38:a3:5c:47:78:20:9f:
3b:f4:59:d9:e9:fd:1d:8b:de:66:5b:47:b1:2a:2e:
42:bc:f7:13:2e:2e:3a:9b:16:6d:9b:93:1e:95:17:
6f:26:ef:df:2c:98:50:93:eb:9b:44:0f:0d:79:c7:
48:c8:a4:57:ab:7b:67:ec:6e:0b:79:7c:24:58:4f:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:98:08:86:4F:CA:9D:5B:16:9C:0E:7F:6D:BE:FC:03:46:06:29:4D
X509v3 Authority Key Identifier:
keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cc:7f:2b:62:86:02:e6:6a:64:f6:1b:fe:92:02:4b:c8:df:
0a:54:af:99:0b:f9:15:39:f5:a0:a3:34:04:fd:fc:25:1d:79:
76:10:1c:25:96:f6:c6:40:e9:58:90:ca:29:e7:f8:b9:83:b9:
9c:31:1b:9b:94:85:00:62:2a:a7:87:39:19:7f:ef:ba:ad:96:
f3:ff:d9:48:7d:21:b2:28:51:6f:71:7c:32:9d:98:29:e9:21:
cf:77:24:67:c7:e5:40:c3:4f:8d:b2:ce:cf:83:8c:cf:d7:67:
d0:8b:fc:85:9e:21:8c:c1:91:2a:63:54:15:16:c5:0a:aa:84:
d6:b2:c8:a8:8f:e3:7e:e4:e6:c7:24:f6:09:cb:78:37:8d:23:
90:e0:09:e2:7b:25:2a:51:1f:80:c8:66:e8:3f:16:66:cf:3f:
69:99:2a:eb:c4:c6:b0:9c:bd:8a:89:54:a2:31:61:0e:b8:00:
8c:af:1c:16:43:7a:d7:3b:40:19:b4:c3:49:fa:64:fa:79:9a:
f6:d9:9d:24:49:4a:21:42:69:c2:15:18:e0:6e:6b:88:50:ed:
2f:44:50:69:ca:ce:93:dc:56:8f:6f:55:49:76:3e:c2:33:21:
8d:30:e1:b7:f5:94:19:46:52:9a:92:e0:1a:d9:e1:43:6a:fc:
a8:60:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:52:01 2026 by rpki-client