Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: +7jaJwQcrOCp6l90s4h6B2rVGV8f+TLOrUryb0WZ9yw=
Subject key identifier: 51:02:82:C2:82:9F:28:4D:93:5B:75:8E:B1:AD:4D:42:5D:09:5D:D3
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 01A0E6634F6037622194FCB9FED975BF4271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 05:01:02 +0000
Manifest this update: Mon 28 Sep 2026 05:01:02 +0000
Manifest next update: Tue 29 Sep 2026 05:01:02 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: t40+USEoDXgCeBgQtHJzs/9L03/dx+rCBKhokyN6FJY=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:4f:60:37:62:21:94:fc:b9:fe:d9:75:bf:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Sep 28 05:01:02 2026 GMT
Not After : Sep 29 05:01:02 2026 GMT
Subject: CN=510282c2829f284d935b758eb1ad4d425d095dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:2a:41:19:b4:19:33:90:8a:72:57:b0:bc:
bd:18:b8:33:ca:d0:d4:d9:ff:fb:9c:b9:13:cc:fd:
91:95:67:3c:b9:9b:37:19:13:9f:25:d9:fe:fd:eb:
11:0f:a6:90:5c:2d:78:02:d7:1d:e9:ed:d3:e5:24:
80:f0:a9:d8:28:d6:36:81:cf:91:36:1d:a5:b7:18:
22:19:f4:94:be:83:56:c1:45:34:4b:8c:01:1a:02:
60:c2:09:12:3e:d0:5d:0f:aa:83:3b:9b:78:38:c4:
7f:e2:66:b6:68:fd:61:e2:6a:2a:70:0c:25:f6:1d:
96:57:42:8d:78:41:8c:ec:19:fd:2b:b7:ee:23:6f:
60:a8:b6:3b:a2:a1:f3:c1:e9:d7:af:fc:ed:19:8d:
19:c2:b8:47:2e:3c:7d:cc:e0:85:b8:dd:02:8d:b0:
83:87:48:33:92:08:5d:45:7d:d0:9c:f7:ca:63:45:
cb:1e:83:4c:8d:e6:08:73:68:be:e8:92:e5:8f:97:
7b:d8:01:8e:1f:a0:91:8d:b0:d0:ea:c2:8e:bd:36:
66:6f:fd:50:7c:4c:3b:d1:db:31:61:bb:b9:14:2a:
dd:ac:b9:d7:60:0b:60:13:64:4e:2d:3f:cf:bb:67:
2e:5d:9b:ac:c4:e4:b7:20:89:1c:34:17:57:3a:2a:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:82:C2:82:9F:28:4D:93:5B:75:8E:B1:AD:4D:42:5D:09:5D:D3
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:2c:40:73:cb:25:29:bf:93:05:60:7c:c7:eb:de:44:7c:
8f:a6:55:bf:2f:49:70:22:71:b7:50:59:ad:d1:e8:75:c0:98:
0c:60:80:9a:6b:73:df:fb:94:2b:13:c8:3e:c9:c7:ee:32:d3:
74:cf:9b:eb:f4:5c:c2:4c:c9:1c:87:84:05:98:35:c5:5b:22:
c8:d8:fb:43:e7:b6:7b:dc:f6:bc:d3:db:96:62:7e:0e:b2:6a:
89:d9:3b:08:e0:7d:0b:11:38:96:20:f7:e1:20:62:40:b4:40:
28:ca:c0:52:79:c1:44:c6:67:96:b3:b6:42:6a:81:3a:50:00:
bc:77:8c:a9:79:3d:79:aa:08:47:52:b0:2f:67:d2:7c:63:ae:
6b:be:12:09:0d:18:8f:64:ac:33:7e:af:5c:29:ab:d0:73:64:
1a:8d:b8:3f:0a:6f:5e:e0:9d:23:11:aa:7e:77:d5:79:9c:e0:
77:2f:9b:cd:bf:b9:34:07:f7:3f:32:a4:ea:76:96:9b:4a:b7:
03:93:0a:ae:9e:e3:28:01:bf:03:2c:a4:2f:5e:7c:c1:40:8c:
7d:db:61:47:18:82:9c:4e:dd:01:07:f0:20:ad:84:f9:e7:f9:
3b:aa:76:6f:4d:82:27:b5:21:28:1b:39:e9:95:2d:74:f0:31:
df:48:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:54:19 2026 by rpki-client