Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: YS7AfXE7s0Lkuc5m5vYc5nzZAYaWy9LrvDWePttRlBI=
Subject key identifier: 12:CD:CD:D9:6C:37:28:BA:1D:16:68:6B:26:79:6A:54:B8:83:9D:55
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 01A0BD9E16A86CF8C5C17AF8E4EA1C0E3636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 04DD
Signing time: Sun 20 Sep 2026 07:00:49 +0000
Manifest this update: Sun 20 Sep 2026 07:00:49 +0000
Manifest next update: Mon 21 Sep 2026 07:00:49 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: jSFA3nFMNyQW6a+0NS6BcXGRSjMfowzVAdRlWNQniz0=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:16:a8:6c:f8:c5:c1:7a:f8:e4:ea:1c:0e:36:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Sep 20 07:00:49 2026 GMT
Not After : Sep 21 07:00:49 2026 GMT
Subject: CN=12cdcdd96c3728ba1d16686b26796a54b8839d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:f0:44:96:6a:3a:e7:7a:04:5e:df:99:16:
4a:0c:f6:ee:45:3e:26:ad:39:35:11:22:61:57:fa:
1b:6f:59:55:da:81:a4:15:46:17:47:23:8f:a9:69:
71:47:27:b0:cd:a6:2b:37:d1:06:14:90:43:3f:4a:
5d:3c:b7:20:ec:48:a1:ce:34:7e:c1:3c:d0:bf:27:
8d:96:c3:9e:ed:75:d4:33:3e:6b:6a:d1:ea:06:b8:
9b:cb:5a:35:23:74:be:78:9a:dc:09:42:e1:d0:15:
7d:73:77:d6:71:b9:a9:bc:16:a8:98:06:fb:0a:ac:
f6:bb:a3:67:73:29:ad:6c:d6:58:b0:2a:c8:b7:2c:
b4:9a:5c:08:ad:ac:11:ef:a6:05:08:81:5e:99:c6:
3a:68:fd:96:38:9e:f5:d2:8d:7f:93:0b:3b:8d:95:
e1:bb:6c:b7:32:0c:05:39:cf:da:6e:53:1d:fc:c4:
f2:9c:b0:96:f4:e5:60:67:18:ef:85:01:94:76:ef:
28:a1:b7:8e:ec:43:f2:0d:f2:4a:01:66:0b:00:d9:
da:2e:8c:ff:77:d4:bc:cf:ff:00:49:c5:68:b0:32:
c4:35:19:30:ca:b0:64:51:55:8c:e9:96:c8:a8:3e:
0f:3a:16:97:14:5c:70:b3:44:d2:2d:99:e1:a8:26:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CD:CD:D9:6C:37:28:BA:1D:16:68:6B:26:79:6A:54:B8:83:9D:55
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:fb:ee:9b:3a:91:d5:48:45:bc:bb:11:e4:44:15:0a:c4:
f5:84:3e:c0:27:42:b1:56:34:bd:a9:81:34:bb:78:67:67:12:
4e:80:f6:f0:fe:03:60:de:fe:a2:13:6e:a0:f9:34:f9:0b:49:
56:ce:5d:84:f7:5c:c0:28:0e:6b:14:ea:21:85:da:ed:50:59:
31:42:2c:ce:f2:2e:3f:27:97:48:16:51:5d:09:86:d5:26:75:
ce:30:6a:52:da:e5:23:9f:7e:aa:ec:82:ac:ed:7f:ee:02:13:
9d:e5:07:af:10:80:0b:d8:46:94:48:ac:c4:b4:a3:a2:67:bc:
0c:8a:8f:9f:38:76:b0:d7:33:56:e1:9b:70:80:35:e7:9f:7d:
ff:89:57:a3:b4:0e:18:92:88:7d:90:49:5e:1e:35:eb:f8:8d:
f6:59:34:bb:61:90:48:b3:14:76:be:fd:a8:45:c8:d6:17:c7:
60:67:85:73:b6:a8:d1:02:2c:7f:64:a0:04:44:18:96:fb:f2:
25:fa:28:53:c3:48:84:30:24:e1:65:1e:86:e1:58:46:61:c2:
c9:e9:3f:23:15:51:5f:6a:e4:36:55:05:90:a4:3c:c5:20:5c:
5e:94:c9:36:c9:6f:e3:9e:0a:2f:d7:de:36:6e:19:39:3f:17:
39:2d:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:53:45 2026 by rpki-client