Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: TsHBWpti7AkXqufQ1WJsrhCHghgC2UI0/rYrdpN+COs=
Subject key identifier: D6:D4:DA:A8:50:2B:E7:89:12:7B:ED:25:A5:94:4B:8B:1A:2A:1F:DD
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 01A1A74AD2982333845FB71A8584A0FFC4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 0556
Signing time: Wed 04 Nov 2026 16:01:00 +0000
Manifest this update: Wed 04 Nov 2026 16:01:00 +0000
Manifest next update: Thu 05 Nov 2026 16:01:00 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: NlIlnK1o+ltMkOo75A6GA8NXljRy6pdz3SV03GW4MXo=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:4a:d2:98:23:33:84:5f:b7:1a:85:84:a0:ff:c4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Nov 4 16:01:00 2026 GMT
Not After : Nov 5 16:01:00 2026 GMT
Subject: CN=d6d4daa8502be789127bed25a5944b8b1a2a1fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:84:a6:bf:f7:a1:be:db:57:43:8b:70:ef:
e1:a1:59:cd:f1:97:dc:0d:5f:21:6f:d2:48:e4:be:
74:63:6d:59:44:67:02:ae:53:8a:3b:81:87:12:51:
8a:5c:9b:59:0b:08:0b:3c:8d:98:68:83:04:e3:c8:
8a:ca:72:4d:b2:c6:0f:8c:8e:fa:28:b2:37:f9:6f:
50:e8:61:36:d5:f2:19:0f:08:63:1a:35:db:6a:23:
38:c3:5c:fa:01:bc:85:89:1d:5f:05:0b:c1:db:b0:
96:02:a1:d7:d9:2f:36:1c:c5:22:c6:93:1f:56:c9:
c9:aa:4b:19:58:b2:bf:36:b8:ef:11:5a:80:0c:32:
11:d1:d5:3d:8e:f3:a9:f5:37:a0:e5:33:a2:b2:7a:
27:68:00:f4:bc:c1:50:8a:c9:fd:38:86:3e:37:7d:
d4:b0:47:17:c7:30:67:e3:e7:6e:68:18:c6:02:79:
57:8b:a5:66:50:c8:7f:73:2a:a1:de:ae:d5:71:44:
90:3a:f0:d0:a3:73:69:ec:97:5b:50:82:7c:29:66:
a5:44:72:b5:7d:e9:ce:18:c0:f5:ef:51:7f:3f:a0:
0c:53:84:e7:c7:15:e8:f1:38:e4:42:83:a3:6a:c0:
ab:cc:ee:66:5a:83:27:c7:b8:0a:43:d9:1b:96:b7:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:DA:A8:50:2B:E7:89:12:7B:ED:25:A5:94:4B:8B:1A:2A:1F:DD
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:40:1f:cb:83:95:a4:28:f4:9e:a7:c1:30:42:49:04:bd:58:
12:00:7d:12:3a:34:8c:f2:d0:17:77:5a:78:26:b4:16:8b:7f:
7f:b0:8f:58:97:c3:dc:dc:63:0d:1a:81:41:f6:78:b1:90:ab:
6a:41:dc:aa:d7:38:f2:ca:34:11:90:92:69:75:83:9b:2c:3f:
87:00:56:b0:61:0d:f3:30:44:33:38:c9:cd:5f:06:04:50:8e:
33:82:9b:81:4b:14:93:4c:b7:cf:35:b3:38:0a:af:a7:b4:14:
91:b3:cc:68:cf:49:26:96:24:c4:11:a7:a7:13:cb:ca:63:63:
b4:89:bb:78:7a:03:14:1c:eb:a1:96:e5:4e:13:99:64:cb:17:
fc:2f:61:a8:c5:5b:eb:8e:34:07:02:eb:1a:cd:b8:32:8e:11:
1c:61:66:ba:a9:4d:e3:f8:f2:48:21:b4:52:cf:6c:e4:f1:6c:
37:1d:5c:61:fb:25:8b:00:fd:59:56:c6:62:9c:99:32:55:65:
fe:a6:80:eb:36:0f:cc:cc:73:b3:f0:b7:13:5e:a9:cb:a3:99:
dd:5f:a2:87:05:e5:11:24:33:ca:98:ab:c6:19:cb:73:bc:56:
e3:ee:c8:70:da:95:2f:14:7a:e4:9f:c1:e1:45:fe:91:c5:41:
62:6d:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:57:24 2026 by rpki-client