Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: gD3vy7yQGe65eUcx0vLj+uqkgVjb+joZwtrk1Gz6WKA=
Subject key identifier: 13:59:BE:5D:08:A7:21:D4:FC:5D:67:E0:9C:54:44:96:EE:09:2A:CE
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019CA8D80E17ACD0513201765EDA0DF10A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 02C0
Signing time: Sun 01 Mar 2026 10:00:57 +0000
Manifest this update: Sun 01 Mar 2026 10:00:57 +0000
Manifest next update: Mon 02 Mar 2026 10:00:57 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: waVtcKTgKFKPbQr3SGSxaox7x7i1qOK8XxumcZ1hLQk=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:0e:17:ac:d0:51:32:01:76:5e:da:0d:f1:0a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Mar 1 10:00:57 2026 GMT
Not After : Mar 2 10:00:57 2026 GMT
Subject: CN=1359be5d08a721d4fc5d67e09c544496ee092ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:61:f5:8b:be:f9:94:40:a0:9c:71:c3:9b:
8c:f0:7f:0f:32:38:74:8f:42:03:d0:fd:e2:97:01:
cd:5a:ed:9c:b5:a8:02:3c:8f:a6:fd:ca:bb:cf:de:
17:38:3b:77:29:7b:cc:aa:f5:0b:c1:62:47:6e:6b:
28:6c:99:5a:bc:98:f2:80:db:4d:8e:ab:57:fc:29:
ae:73:f6:ac:2f:6d:4e:ef:16:f5:bb:f9:bf:ce:4d:
de:29:cb:ac:62:5b:9c:1d:b6:4e:92:4d:c6:5b:22:
72:5a:8f:3f:8a:dd:b5:b1:57:95:9c:8f:ad:82:7c:
6e:fb:76:b8:61:48:5c:1c:2e:dd:7d:67:32:fc:14:
6b:a7:de:bf:b5:12:38:e3:40:8a:34:0b:e4:47:42:
a9:a8:77:ec:59:6c:de:22:97:de:c0:5b:ce:21:bb:
5e:ea:d0:a2:47:5b:f5:83:a9:2b:94:10:8b:72:93:
50:a4:dc:9c:7b:47:c0:4d:d4:c3:2e:3e:9b:b8:b7:
82:24:1a:61:7d:65:f6:28:50:6f:c2:79:eb:d3:66:
ab:5e:d7:24:ff:91:3c:ff:e1:66:7b:90:51:30:a9:
e9:6a:77:73:e0:a5:e8:ba:bf:32:6f:3c:12:4c:ef:
39:11:cb:bf:b4:af:4a:db:c6:bf:1d:39:92:9c:8b:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:BE:5D:08:A7:21:D4:FC:5D:67:E0:9C:54:44:96:EE:09:2A:CE
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:26:b7:63:f9:b7:92:e8:f2:67:20:ae:9e:f0:11:9a:0c:
78:d2:1f:e3:af:e5:2b:46:3c:d9:8b:70:4b:bf:8c:4b:a5:d9:
29:0d:c5:16:f9:38:eb:09:18:f3:de:0c:24:af:45:89:7d:b7:
19:2e:f2:ba:c3:dc:f8:3f:54:1e:77:70:c2:3b:01:52:30:65:
bb:35:58:90:82:e1:67:6e:08:0d:14:01:b1:55:ba:49:df:6d:
9a:7b:74:e7:40:40:d8:2f:a6:74:16:10:a2:e9:39:52:c7:c9:
10:5d:2f:4d:7b:c4:7c:33:93:9e:5c:0b:1f:15:e9:6d:0f:91:
ed:29:2a:4a:ee:80:aa:10:bb:52:42:2b:3d:aa:2c:e2:52:bd:
bc:96:79:d0:46:32:7a:f5:b4:7e:91:62:c7:7c:3e:db:c7:b9:
65:03:2e:ae:27:2a:5c:ec:7d:4b:58:13:6c:f4:98:e7:3c:c6:
20:59:a6:9d:95:db:c9:be:b2:0c:7e:6e:20:be:e6:60:3b:60:
3d:3b:d4:8c:50:4c:d3:58:0f:d5:9a:0d:cc:75:da:52:71:2c:
c1:41:d8:e5:69:50:3c:31:19:a3:67:67:9b:d3:66:46:51:16:
bd:b4:b5:2c:78:50:1b:cb:5e:92:f3:9c:78:e2:0d:d3:b6:47:
72:7c:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:47 2026 by rpki-client