Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
File: C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft (raw, json)
Hash identifier: kGa3IQz+oaA1WXmrlUld8Ds3fWmGuQbtVw63u7o7ESg=
Subject key identifier: 1A:DA:8D:E8:2B:55:AB:5E:09:BA:D7:B6:A8:E3:7E:83:97:E6:7C:09
Authority key identifier: 0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
Certificate issuer: /CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Certificate serial: 01A0D9835C51D84CFEED52C03C64152E69E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
Manifest number: 0394
Signing time: Fri 25 Sep 2026 17:00:59 +0000
Manifest this update: Fri 25 Sep 2026 17:00:59 +0000
Manifest next update: Sat 26 Sep 2026 17:00:59 +0000
Files and hashes: 1: C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl (hash: 3erPE2SEXQTzygsM/x+BGVQpcEnTKZbSPBm3LMxMq40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:5c:51:d8:4c:fe:ed:52:c0:3c:64:15:2e:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Validity
Not Before: Sep 25 17:00:59 2026 GMT
Not After : Sep 26 17:00:59 2026 GMT
Subject: CN=1ada8de82b55ab5e09bad7b6a8e37e8397e67c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:1a:fa:1a:51:de:45:5f:d0:1b:6e:11:94:
98:9d:6f:81:ec:d9:45:91:45:b1:e5:88:82:72:08:
27:45:92:ec:16:63:77:75:6e:9f:2c:d5:57:cb:ce:
5d:1c:db:35:a5:9c:57:02:e2:37:e3:1c:e2:da:6e:
80:83:75:39:6b:ce:b9:41:8c:6e:55:b2:86:20:82:
1a:79:b7:c3:9a:ae:37:84:e3:53:3b:31:ab:f3:c6:
5a:ce:aa:8a:30:c2:a5:b8:56:5b:d3:af:b2:0a:d9:
c9:99:f7:e2:18:1a:7c:fe:b8:85:2e:17:40:06:cd:
dc:c5:bb:49:fe:82:8f:96:1d:b1:75:2b:ad:17:97:
01:a1:94:77:0d:75:20:d7:11:c7:2e:c6:f8:a2:b0:
6d:38:10:07:0d:1f:45:dd:6d:3f:78:b4:7a:fe:c0:
04:2f:4e:73:13:4a:fc:01:7d:31:95:7f:dc:ba:83:
f1:df:92:47:82:c2:9a:cf:c2:29:85:ec:42:e8:4b:
bc:b1:36:ba:c6:ac:63:7c:aa:14:5e:32:44:f0:bc:
84:89:0d:6c:6a:f3:41:91:30:08:9f:f5:8a:96:d6:
d0:0c:76:3c:5f:e4:40:43:56:26:7c:26:4c:0c:0a:
a6:5f:d6:97:16:94:97:8f:93:24:57:4f:c5:12:cd:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:8D:E8:2B:55:AB:5E:09:BA:D7:B6:A8:E3:7E:83:97:E6:7C:09
X509v3 Authority Key Identifier:
keyid:0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:39:a2:ea:bd:3b:ce:b7:d5:ff:70:c1:f3:10:d3:86:b9:75:
c7:32:20:42:b4:b5:3d:4a:e9:42:44:55:45:2b:37:4b:d9:c8:
29:8f:03:34:4f:c4:3c:a7:65:55:2e:53:6a:5a:25:a5:98:39:
84:0e:40:e8:41:1f:58:36:55:d8:da:a9:1e:a8:df:00:bf:c7:
f1:fa:f9:42:e6:e6:fc:c6:ab:ca:d6:73:60:d0:10:52:cc:6f:
ad:87:e5:fe:b0:fc:be:2e:62:b9:c8:18:7c:3a:df:cd:12:01:
8a:f1:04:11:fe:34:59:92:e3:49:40:c4:1f:47:b5:17:b5:cf:
3b:f7:07:f2:e9:2d:d2:6e:c3:6d:cb:e8:d1:1e:69:82:3b:58:
48:2a:03:c9:d9:8a:35:81:3c:85:b3:aa:2e:08:43:8b:50:d0:
cb:e0:98:95:60:9d:8a:67:4e:de:2a:f0:64:cb:79:bf:35:b4:
ed:7f:20:dd:3e:82:30:0b:5f:ef:d8:b6:7c:66:14:20:20:a1:
64:5a:f1:f5:4b:d7:a6:ca:04:d7:5e:88:c2:40:b6:76:76:27:
0f:68:56:35:3c:7e:24:bd:a4:62:d2:22:b0:9e:db:0c:30:70:
15:1b:e4:be:bf:ff:e2:33:56:ea:5d:01:99:98:b3:de:f4:20:
bd:da:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:55:32 2026 by rpki-client