Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: s1hSvdZRtp9+7nzG5CXaO+YOCjLLKqGX+X4/iRraUIs=
Subject key identifier: A4:07:80:72:C9:46:E0:5B:A0:D5:07:E5:32:3A:AD:8C:0E:9C:CC:30
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019D2928ED811F9B8ADB12D437F4954A31F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1898
Signing time: Thu 26 Mar 2026 08:00:41 +0000
Manifest this update: Thu 26 Mar 2026 08:00:41 +0000
Manifest next update: Fri 27 Mar 2026 08:00:41 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: Q/pLIhki6Pd0Ktin2y9iTbS9TLqLzDvAKZ60ShQytz8=)
2: MJ0wcLYLagq2-IQh1IDBnVmPp4Y.roa (hash: nddzrdr88MahK2kDnudEExFRXp/cZ5hcgfEP7PPKmNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ed:81:1f:9b:8a:db:12:d4:37:f4:95:4a:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Mar 26 08:00:41 2026 GMT
Not After : Mar 27 08:00:41 2026 GMT
Subject: CN=a4078072c946e05ba0d507e5323aad8c0e9ccc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:37:21:a8:4f:1d:e9:ef:b0:63:b0:31:26:
b5:cd:ea:c2:8d:ab:4a:68:3a:6e:33:55:11:31:75:
45:aa:53:29:8a:f9:2f:57:6f:d8:cc:2d:0a:f1:c6:
32:10:80:1e:5b:ad:ce:a3:8f:8d:d7:67:54:3c:91:
2f:d5:1f:aa:f8:83:ad:b4:08:a9:7f:5e:80:10:41:
b3:18:ec:d6:83:f8:19:a4:6d:96:03:3b:92:57:67:
af:51:fc:e4:2c:2e:78:0f:f7:6b:a8:38:21:e3:df:
b9:00:cb:d4:3f:1c:92:00:46:7a:55:21:da:8f:7c:
4a:c2:17:78:83:56:e9:de:43:e8:be:e5:6a:5f:10:
a5:f9:06:06:e6:ae:68:b5:d3:da:ca:38:ea:31:8c:
a4:cb:e5:da:0e:2d:0a:fd:4d:e1:52:09:e7:c2:d1:
f3:b7:a3:33:ae:5e:59:8a:ad:79:52:6d:61:19:b3:
2b:76:01:ab:d3:a7:a2:a3:fb:3b:df:7e:b8:dd:bf:
9b:00:e9:3f:63:69:bd:ff:78:c5:bb:00:d8:df:b2:
4e:be:9e:89:e9:e3:21:4c:90:14:f5:10:4b:9d:14:
f5:07:93:79:4e:cd:b4:d4:47:29:d0:9c:1b:ac:c3:
a3:c1:bd:91:f0:ac:0e:8d:73:51:fc:03:5d:08:6b:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:80:72:C9:46:E0:5B:A0:D5:07:E5:32:3A:AD:8C:0E:9C:CC:30
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:11:5c:a9:fe:81:87:72:bd:3b:b3:6f:00:ba:76:9e:38:
18:d3:19:e1:1b:42:5f:11:c5:f7:72:2d:d5:0b:6b:00:6c:35:
ea:89:a6:66:78:aa:66:25:7e:67:1a:a9:fb:c5:d7:a4:52:13:
db:04:b7:65:8f:a2:62:7f:75:0d:41:f8:f8:34:bd:ea:90:b3:
46:96:f7:b1:7c:64:a0:21:99:41:30:4f:7c:dd:68:e8:1d:3e:
11:45:b4:d3:9e:ef:29:fa:2e:81:9a:82:aa:ef:96:25:9d:c9:
45:2e:68:68:9b:ed:3c:6b:41:1d:59:08:48:c4:2d:ae:60:a0:
fb:11:c2:2e:5d:95:21:6f:7d:a2:09:bd:4c:63:7c:a3:43:8e:
a8:20:bf:a9:3a:e8:6b:cf:1f:0e:fa:9f:e8:34:01:2b:10:6c:
32:f1:b7:db:09:b8:6e:6e:fd:77:b0:e0:a1:26:85:51:05:66:
0b:c1:50:ed:52:d3:ad:0e:65:1a:1f:73:c7:fb:53:7f:10:50:
aa:9d:0f:7e:c8:1a:c5:e6:61:ec:6a:20:63:cb:9e:6e:13:af:
4a:94:d1:56:9e:44:94:8c:c2:9e:b3:0f:3d:1e:8e:67:fd:d6:
09:97:d4:b5:c1:8c:65:fa:df:0f:e8:b3:d3:e1:7b:ae:55:e0:
f8:4f:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:08 2026 by rpki-client