Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: 0Xee1q2hHnXV9F3QSFs5MejSgwkWZI5QIzQOd6Asuc4=
Subject key identifier: 5D:78:00:0B:80:7C:6C:46:8F:B6:5F:36:8D:05:AB:E5:9B:66:C7:48
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 01A0DBA9BC909FE4D115568A70A3A05DF07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1A85
Signing time: Sat 26 Sep 2026 03:02:08 +0000
Manifest this update: Sat 26 Sep 2026 03:02:08 +0000
Manifest next update: Sun 27 Sep 2026 03:02:08 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: EwZBdEU/3hl8f70f74cwdo2yxb8JuxFCbBPyn3IPXcs=)
2: Y-KOAHOLABX3sY4gJm3A6nvrqgk.roa (hash: jTbxGKNlR+XX6Qac6sKrcuIPfzi6QGetIT0dTM9/L6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:bc:90:9f:e4:d1:15:56:8a:70:a3:a0:5d:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Sep 26 03:02:08 2026 GMT
Not After : Sep 27 03:02:08 2026 GMT
Subject: CN=5d78000b807c6c468fb65f368d05abe59b66c748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:40:d6:3a:1c:b4:73:e8:d6:ac:e9:9c:ea:
ed:a2:14:3f:60:90:3b:d0:e2:1e:f2:01:bb:a0:37:
0d:67:20:34:47:00:3e:ab:ab:93:f4:12:c9:a8:9b:
43:06:c9:77:e6:9a:6a:27:da:3b:f1:81:c7:df:af:
bd:d1:24:ab:05:27:ef:7a:8c:6f:1e:b6:76:32:01:
66:cf:cb:fe:c5:a6:12:71:90:27:51:46:a8:94:cc:
e1:99:cc:65:ea:b8:2b:bc:c7:0b:a5:b2:86:8a:f3:
37:55:cc:7a:de:cf:4e:6f:36:b8:ba:fb:8f:02:34:
dc:6b:b8:62:d0:6e:90:45:37:45:96:e1:15:40:e8:
9a:66:b0:07:04:24:b5:a4:14:8b:b0:dc:1d:03:44:
f4:c8:df:96:25:f8:6b:92:3a:44:fe:ce:43:c5:a7:
29:84:76:4e:54:f2:83:8e:b0:cd:06:69:eb:22:5c:
74:10:36:cc:60:5c:39:a4:6e:dd:58:13:e0:0c:cc:
79:9f:d6:30:e3:c0:38:30:6f:84:99:f3:91:f1:e5:
be:35:20:97:4d:2a:60:b0:77:6c:bf:8c:d6:2d:53:
45:61:7c:5e:fd:59:0b:88:62:f4:69:b9:e0:9f:87:
0a:f9:b8:c0:83:04:17:0b:37:f3:0b:1e:1f:ee:e3:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:00:0B:80:7C:6C:46:8F:B6:5F:36:8D:05:AB:E5:9B:66:C7:48
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:3f:51:67:af:9a:2d:38:c8:fe:fd:57:8d:bd:fa:90:11:
2e:47:51:01:9d:bb:b1:ad:9b:07:c2:79:c4:64:b8:d9:08:50:
74:00:9c:b8:5e:fe:2d:9d:b9:5f:f1:0f:72:00:94:30:56:cb:
85:58:0d:72:16:07:ef:d7:3c:11:5a:95:df:36:77:26:46:c6:
90:13:e5:3a:3f:f0:d2:2f:3a:4b:1c:ff:5d:56:0d:bc:5e:19:
5d:b8:a6:ac:ff:11:e9:b5:b1:77:de:fb:f8:8f:3c:91:85:d3:
79:07:9a:91:71:d0:ad:9a:a3:62:e7:8c:76:bf:80:cc:cd:8f:
a0:81:a8:a1:72:59:26:c0:c8:f3:4f:5f:68:9d:60:28:8e:63:
1a:39:23:cf:00:94:13:c7:e7:1b:a9:ce:ea:92:54:1f:00:88:
ee:f3:fa:eb:88:60:f9:07:82:f7:2e:f4:20:2f:00:b5:76:89:
e8:95:71:76:08:b8:54:c0:32:c2:67:41:0f:e8:0d:1d:b3:97:
26:a7:03:f9:c6:9b:75:79:6b:ce:ec:f6:63:bb:67:2d:39:fa:
6c:9e:76:a7:ca:c2:e7:fd:ea:ea:90:bf:1c:ba:ba:2f:87:41:
67:8b:19:a8:a1:00:80:aa:fe:a8:6b:bd:75:63:6f:4f:79:51:
02:a1:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:52:45 2026 by rpki-client