Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: QAr6PlyouGTC5Xeq9Unwmr466zDX4Lv5at4d4b36cyc=
Subject key identifier: 9C:F7:67:1B:3E:08:F3:85:C4:88:46:6B:A7:A8:9A:C2:5A:39:98:8D
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 019E1C0FDF83DD8750819BE8696B9E138D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 109B
Signing time: Tue 12 May 2026 12:01:02 +0000
Manifest this update: Tue 12 May 2026 12:01:02 +0000
Manifest next update: Wed 13 May 2026 12:01:02 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: Ijw+zkkeJnPcMVgRUrwi8sUrSBqbXNyYNmypNkEx3fI=)
2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:df:83:dd:87:50:81:9b:e8:69:6b:9e:13:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: May 12 12:01:02 2026 GMT
Not After : May 13 12:01:02 2026 GMT
Subject: CN=9cf7671b3e08f385c488466ba7a89ac25a39988d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:5f:2a:cb:b6:e1:90:2f:33:c7:a6:3e:1b:
c9:ee:36:ee:f9:f9:05:ea:ee:cb:1b:50:09:74:9e:
cb:42:a0:1a:7d:e6:14:c8:f7:7b:08:5f:e4:5f:fb:
dd:a1:81:fc:96:04:99:a3:a9:db:39:fd:9b:a0:e4:
b1:81:52:f6:1f:81:16:4c:85:eb:1a:ae:d5:cb:17:
53:5f:cd:54:b4:f0:b3:32:f1:c6:6f:02:bd:5b:b5:
35:80:ae:7b:09:de:90:82:96:8e:c4:a4:d5:18:a8:
30:bf:80:65:c1:20:95:9f:3f:b2:58:a4:bd:9e:19:
90:12:e0:b0:49:f1:43:f4:78:6f:b2:0a:32:60:2f:
3d:a5:e1:54:ed:a1:6d:8a:56:25:bc:8d:ea:8c:a9:
85:31:a2:be:17:09:b2:29:18:0d:46:a7:ac:1d:17:
ea:76:93:8d:2e:86:a6:8e:5d:be:f1:ef:1c:0f:9d:
2d:59:cd:ac:73:f8:48:a6:d2:18:fc:86:ab:d5:f8:
6a:5a:05:c4:19:12:ca:3c:4a:ff:b7:c4:31:3d:b0:
ca:39:71:d6:53:d0:44:b1:b6:eb:e7:bc:97:12:e2:
5d:6e:39:29:ae:67:49:c8:ea:0f:ad:14:77:a7:bc:
a7:63:9a:eb:fa:c5:b3:d8:eb:47:d9:04:f1:d7:b1:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:67:1B:3E:08:F3:85:C4:88:46:6B:A7:A8:9A:C2:5A:39:98:8D
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:68:c6:ce:e0:5e:ff:b1:a3:73:31:64:6f:f7:79:3c:1b:68:
b7:d6:c2:6c:96:0e:9f:da:70:81:5d:32:85:51:b7:53:73:77:
93:98:47:df:a7:4a:d9:32:e3:f9:95:97:6a:57:8d:d6:65:0d:
14:e4:31:b1:90:4f:6f:94:f2:fb:e3:a1:22:39:14:4e:7e:ff:
ae:f8:e6:da:7f:55:12:25:40:2f:16:f5:dd:1f:1f:9e:26:37:
84:68:52:f1:63:60:be:01:fc:20:b1:25:9b:48:8e:7a:c0:df:
d4:59:95:a8:93:d2:4e:5b:1e:2e:7d:0e:8b:25:89:9f:5b:4a:
5e:26:79:5b:b2:fb:f4:e2:70:c7:d3:00:7f:6a:e6:7f:20:22:
66:88:ab:14:49:71:2d:29:4c:72:9a:d2:e8:c5:d5:c4:a6:be:
fb:3a:fe:bb:e0:0a:e7:93:73:af:1f:0e:94:ad:e3:40:df:c4:
51:18:ae:35:02:2d:b5:35:89:bf:14:f7:ab:87:e9:68:7d:64:
57:4a:91:98:1f:64:37:4a:0f:59:6d:e3:a7:71:22:f0:86:f6:
48:89:3d:31:4a:ab:bb:1c:b7:3c:93:cd:43:db:e1:67:e1:12:
40:43:9c:6d:76:5f:d5:1d:0e:02:d0:88:6a:05:ab:91:49:fa:
ab:f6:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:57 2026 by rpki-client