Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: KmgBbaOFZkWEQvfa2o37gzzQF7igcX0kAycnI3LhoBY=
Subject key identifier: 55:28:B3:27:83:9F:23:04:B8:C7:B9:4E:EA:24:66:27:55:DC:AB:5D
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019E1F115BD59164FEF2918DDDA62EA6A780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1919
Signing time: Wed 13 May 2026 02:01:31 +0000
Manifest this update: Wed 13 May 2026 02:01:31 +0000
Manifest next update: Thu 14 May 2026 02:01:31 +0000
Files and hashes: 1: 81yZ155DMG5rdK0HhKcFu9QDPzo.roa (hash: S3648aF6KQD7VXRsWbdISgJGBto1UPZCtJzs6qrU8/U=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: qeyqvyJyfII8D90/iAhbhP/XsVvRBjpGKFpixY7T/Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:5b:d5:91:64:fe:f2:91:8d:dd:a6:2e:a6:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: May 13 02:01:31 2026 GMT
Not After : May 14 02:01:31 2026 GMT
Subject: CN=5528b327839f2304b8c7b94eea24662755dcab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:40:d0:49:19:7e:43:6b:23:23:9c:7d:da:
01:a6:95:8a:ca:8f:70:8b:08:63:6e:c5:4b:c2:3b:
4e:ae:36:3d:3e:8e:0d:b4:1c:09:a4:7a:24:48:bc:
1b:43:71:d9:f6:95:9e:5c:44:18:60:59:66:ba:30:
26:e0:33:4f:94:0e:b4:f4:17:1f:a9:75:cd:30:f4:
99:da:67:1e:20:d6:ad:ea:2c:f0:65:9d:5f:f3:9e:
29:cd:59:b3:90:18:79:19:25:37:60:e8:67:b4:22:
fe:49:1a:6e:77:df:7b:8d:bd:88:aa:f6:b6:f8:ea:
28:d8:44:6b:46:ff:67:a8:af:c3:8d:1b:d0:48:f3:
8c:b6:1b:41:69:e6:4d:21:70:dd:b5:c5:03:6e:2a:
ec:78:61:62:40:4c:e5:b5:9e:ba:59:a9:97:b2:a8:
db:e0:53:05:9d:7e:fb:a7:40:1a:97:3f:fb:91:0c:
4d:30:f6:48:b3:16:eb:b2:b8:46:bb:f1:18:60:35:
e6:90:3d:d6:1e:16:48:b8:5c:8a:82:0f:da:a1:61:
71:82:35:91:f4:6b:c0:ea:03:8b:84:4f:48:bd:96:
20:66:e4:fa:64:1c:3a:24:a5:70:a8:68:00:59:ce:
c4:62:48:c3:26:5f:64:07:10:13:8e:c5:d9:57:2c:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:B3:27:83:9F:23:04:B8:C7:B9:4E:EA:24:66:27:55:DC:AB:5D
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bf:b7:a4:a5:72:bf:f0:1b:32:41:8f:8b:aa:72:e4:d2:98:
16:82:a4:f9:bd:00:8d:a6:74:57:f8:94:72:84:d7:7b:8e:2e:
bc:bd:8d:f2:fa:b9:1e:cd:19:5e:48:db:8c:5a:7b:8a:49:f1:
8a:5b:3f:99:70:56:a9:ca:4a:5f:f5:a4:4b:e8:35:89:fe:7c:
1d:82:a0:a8:62:af:82:6e:75:22:94:02:30:9c:87:88:32:5c:
96:1f:3f:0a:0b:7e:b8:87:85:38:63:a3:32:66:73:19:e1:d7:
41:8c:a7:e3:7c:5c:d2:e3:f0:d2:53:e2:f8:1a:67:6d:d7:ac:
cd:47:b8:f7:e1:cd:1b:c5:ef:1a:fb:04:bb:eb:35:af:ad:14:
0b:29:93:5e:9f:9e:85:07:12:b5:07:e6:5a:a0:ce:2b:00:48:
f0:c8:45:63:db:a7:fa:2c:d3:ed:4c:a9:21:8a:74:dd:be:24:
8e:8e:99:f8:6c:a9:b4:e6:b0:0c:bd:ad:e7:da:48:19:d7:dc:
ce:58:74:4c:f6:67:4c:b1:5a:35:b4:bf:95:31:89:dd:8d:73:
f1:be:7b:b1:79:69:f7:51:d5:af:bf:73:17:63:51:38:42:14:
8d:14:70:88:bb:96:5a:b5:cc:5e:cf:a1:53:45:08:2e:e8:45:
ee:84:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:08 2026 by rpki-client