Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: RQ466aja8hZo3B4lAian9vOMROUUCwqvBdcHgQWp7pk=
Subject key identifier: 2B:6B:2C:30:7A:7C:60:1D:57:9A:56:4D:56:30:5B:17:22:EE:A6:BC
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019D9C2CBA910819FEB9A953C822820B2568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 033E
Signing time: Fri 17 Apr 2026 16:01:09 +0000
Manifest this update: Fri 17 Apr 2026 16:01:09 +0000
Manifest next update: Sat 18 Apr 2026 16:01:09 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: D1QsjIM5KxZAAR3CrVhIj3BBBhN3ePeQ51B8674mcuc=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:ba:91:08:19:fe:b9:a9:53:c8:22:82:0b:25:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Apr 17 16:01:09 2026 GMT
Not After : Apr 18 16:01:09 2026 GMT
Subject: CN=2b6b2c307a7c601d579a564d56305b1722eea6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:e8:9f:b5:17:7c:99:1a:bb:ab:dd:12:63:
bb:c7:6a:8f:72:ab:e8:88:4b:04:ee:06:5d:68:18:
d7:20:c1:f4:79:ff:36:40:b8:b4:77:c5:59:34:c7:
bb:54:81:7b:07:be:26:51:96:ff:ee:4f:1b:1f:d3:
7e:a0:03:7d:63:3a:9a:6a:33:45:ac:69:cf:84:58:
9d:43:dc:cf:f0:c9:69:99:8f:95:63:3c:1b:3d:ea:
73:b6:1a:e0:6a:15:93:3a:e5:c4:fa:28:79:eb:12:
83:e2:3a:e9:29:d3:b2:f8:9b:a9:e8:bc:3a:76:b1:
56:69:52:7b:ad:c2:b5:27:17:3e:5c:c4:ca:04:ad:
ef:15:f6:f8:d7:90:e9:65:b4:cf:f7:05:46:f2:34:
81:7d:59:26:81:e8:f0:ac:b7:bf:ae:5c:08:af:7b:
fc:67:37:1d:dc:a6:a2:e3:f0:fa:94:e7:94:a0:ff:
e5:d0:2a:0f:f9:2a:6c:10:85:aa:2a:a3:f8:66:d6:
ab:35:be:a6:53:36:73:49:3c:9b:7c:32:ef:20:6b:
d7:62:0e:bf:43:2f:5a:3e:fb:ca:70:8f:75:fe:cc:
09:6d:a0:98:8b:19:da:62:46:f2:b2:9f:7f:54:92:
ef:20:53:bb:44:03:0f:76:f3:2c:cc:71:96:b5:ec:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:2C:30:7A:7C:60:1D:57:9A:56:4D:56:30:5B:17:22:EE:A6:BC
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6b:58:57:eb:2a:a6:92:8f:01:a3:68:f5:d1:53:f1:6e:6d:
11:08:0e:79:da:f3:a0:06:57:34:d1:b0:a7:03:79:e7:d1:eb:
ca:29:7c:08:13:54:c9:5e:30:47:2c:6e:a3:fa:ed:8b:c6:a0:
95:12:11:b5:a4:6b:d2:d8:36:e3:4b:61:e3:2e:b6:ac:b2:35:
73:05:55:8a:2b:3a:f4:38:09:c4:8a:da:6a:8e:c6:2b:1d:3f:
92:d7:dd:89:13:db:62:43:9b:65:3d:cf:2a:26:b8:c8:8a:07:
8a:a3:05:d6:ad:b2:ce:02:09:36:db:25:88:db:bc:51:d2:85:
76:33:cf:f8:3c:05:47:0e:fc:8f:4d:62:3e:a5:d6:15:35:ae:
1d:a7:fe:62:dc:a8:5c:ac:cb:6a:c5:f7:93:4e:52:0c:a7:07:
e5:90:a4:f4:7b:4d:9e:e1:85:dc:8e:51:6a:39:cd:cf:57:ab:
b3:76:39:8a:7d:52:74:4a:34:97:6c:a8:ac:1a:3f:ff:23:84:
eb:0d:e8:87:a9:e2:eb:d2:06:05:2d:e0:72:a1:49:19:8d:c8:
0b:1a:8c:e1:54:c3:e1:eb:f9:d5:0a:36:9b:e8:5a:41:7d:4b:
0d:1b:78:ee:23:52:77:f9:3c:33:90:85:cb:bd:d4:63:79:5b:
7a:78:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:36:01 2026 by rpki-client