Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: TpdfvS0Nr2v7PzPk0Sc7T5KLKVFbksgAoHj2UNisQrk=
Subject key identifier: 5D:6C:09:D1:CA:53:1B:AE:F9:68:AD:38:F2:6B:0D:96:A5:3D:D5:CC
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 01A0D94CBF46CDBF8E881D7D3B91B1AE2AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 16:01:20 +0000
Manifest this update: Fri 25 Sep 2026 16:01:20 +0000
Manifest next update: Sat 26 Sep 2026 16:01:20 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: kKct6mWPSAhe//h+q/dvsMr+6J8S4AdrlSex/856R1A=)
2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:bf:46:cd:bf:8e:88:1d:7d:3b:91:b1:ae:2a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Sep 25 16:01:20 2026 GMT
Not After : Sep 26 16:01:20 2026 GMT
Subject: CN=5d6c09d1ca531baef968ad38f26b0d96a53dd5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:30:3b:89:7f:4c:12:d9:ec:a4:28:c3:e6:
d9:64:f8:bd:63:f2:f7:53:5f:7a:8b:c2:51:89:ca:
3a:01:3e:62:27:b1:93:16:07:13:b7:22:1f:2a:43:
2e:15:13:df:bc:84:8f:57:8a:a7:fd:ab:4d:88:f1:
5d:72:e1:8f:62:27:9a:3f:a9:c2:b2:b4:85:32:1d:
95:24:a6:8d:13:e7:04:69:ac:ad:24:f8:72:08:16:
1b:5b:9c:73:2b:ad:e1:7c:51:3c:27:ec:75:7d:32:
f6:cb:66:b7:02:39:f8:cd:24:d6:ba:43:10:61:85:
b9:d7:ac:1b:9f:7a:42:bf:76:ae:6a:80:c5:b2:17:
30:b3:a0:14:71:02:d0:3a:fe:dd:6a:8e:5b:c1:40:
96:f3:a3:0c:11:62:d6:cb:78:43:7f:4f:67:1b:8c:
bd:88:d8:1e:e7:95:a8:83:db:21:bb:ca:7e:61:f1:
dc:71:c5:f7:d6:b6:23:0d:ee:85:44:22:bf:cb:b6:
4e:b4:e0:59:d4:c2:a4:85:24:ed:14:03:64:12:36:
d4:9a:9d:26:bd:61:49:c5:4c:69:d7:24:f8:e6:a9:
cc:02:fa:f4:17:1d:00:c7:98:34:5b:15:6b:de:28:
d2:3f:67:4e:b2:d8:d8:7e:01:a3:b6:d2:07:7e:f8:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6C:09:D1:CA:53:1B:AE:F9:68:AD:38:F2:6B:0D:96:A5:3D:D5:CC
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:9c:0e:fe:6e:2e:00:3a:d3:cb:07:f1:40:dc:6a:4c:0f:
67:bd:9a:43:8c:f1:ca:ad:ee:a9:62:18:84:3f:62:b9:d0:e0:
f6:e4:c7:8b:4e:bf:8f:f2:4e:1b:35:ae:db:48:0e:6d:8e:d8:
4d:7e:88:b9:0b:df:bb:73:7b:d3:13:d4:e9:f2:db:33:d7:6f:
36:9a:0e:29:8f:ab:7e:a6:ff:a0:2d:10:37:75:2e:24:77:ce:
51:5a:15:d2:ec:82:fe:f2:52:7f:b5:ef:ef:f9:ca:f6:c6:3a:
40:bc:0b:e2:a6:dd:08:02:d8:0f:e4:c6:88:2c:a3:ab:e9:08:
71:42:31:0d:99:87:4f:0e:b5:77:2d:35:0a:b0:66:8d:d3:10:
f5:84:38:5e:53:7e:d8:1e:cd:7d:74:35:af:e9:a4:bd:97:ec:
c9:76:64:b8:27:13:d1:78:0f:57:ad:a5:66:98:49:f7:a7:c2:
ab:0d:f2:e1:74:5c:c4:87:65:1f:0d:6a:90:de:3a:ef:88:60:
25:01:b4:01:92:4c:90:ee:77:47:dc:7b:88:66:6d:13:ba:4d:
58:e1:85:26:fc:9b:24:2b:77:3f:38:3e:86:ae:69:27:fe:12:
b6:11:62:5c:28:ae:a6:2b:11:1b:19:fd:19:a5:dc:5e:06:c7:
e3:7f:6d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:12:14 2026 by rpki-client