Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: +/TzglDqFnXDRViXHrcQibccOzUc/CWSMv8er4fdoms=
Subject key identifier: 33:1D:EA:A9:29:5B:7E:27:39:4A:5C:91:32:29:BE:E1:73:AD:39:6C
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019FA9AC4A04346F468D2412DB4FC4CF9D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0C68
Signing time: Tue 28 Jul 2026 17:01:08 +0000
Manifest this update: Tue 28 Jul 2026 17:01:08 +0000
Manifest next update: Wed 29 Jul 2026 17:01:08 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: C0c4U0vb2oxSahxc3LhKaoTsk8+TrZdux5d8k6Kk9q4=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:4a:04:34:6f:46:8d:24:12:db:4f:c4:cf:9d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jul 28 17:01:08 2026 GMT
Not After : Jul 29 17:01:08 2026 GMT
Subject: CN=331deaa9295b7e27394a5c913229bee173ad396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:cc:4e:af:d6:c5:d5:d2:1c:9c:b6:9f:52:
15:e9:cf:0a:e5:a4:44:10:44:a0:67:a8:68:c0:d7:
79:b8:f1:dc:81:a4:43:aa:a3:8f:1f:58:92:4f:49:
39:f1:2a:5f:2c:1c:fd:33:37:dd:00:be:11:4a:3e:
c0:b1:52:dd:37:57:01:79:65:10:0a:21:5b:be:f5:
b8:db:93:88:0d:f7:c4:9b:f3:9c:c5:fd:9c:48:0a:
02:88:05:2b:55:19:e2:e2:be:ef:d2:27:91:9f:87:
c2:fd:23:44:bb:a4:53:56:f2:11:81:bc:64:4b:0f:
0a:95:20:c7:97:36:4d:5a:12:95:81:58:86:61:2d:
2a:3e:a2:95:5f:e7:f2:2d:6e:59:d0:bd:98:b8:e9:
86:81:b5:0e:38:dc:b7:09:3c:e4:fd:37:32:52:bd:
6a:c5:30:4f:8a:37:8c:76:cd:2d:7a:64:a2:31:3f:
71:b1:f1:22:30:76:51:9b:21:f6:20:45:69:75:b3:
ca:5e:b5:f8:a0:e8:dd:f4:a8:32:01:7f:54:90:f9:
cb:3e:51:6a:ff:9b:3a:ef:35:1e:7f:5b:18:2b:c3:
ae:20:58:fa:21:0e:8a:e2:ed:b5:a7:31:48:cb:45:
4e:00:5c:ef:37:f4:da:2f:95:58:d4:e6:77:9b:f9:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1D:EA:A9:29:5B:7E:27:39:4A:5C:91:32:29:BE:E1:73:AD:39:6C
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:52:b7:1e:d4:0f:af:a3:86:5f:93:3f:f0:d0:2b:6b:9b:b5:
20:62:b2:af:17:12:b9:ba:b8:e4:ba:f7:af:89:da:87:af:06:
74:f1:55:cf:0d:b2:14:25:ff:83:89:be:17:7d:b6:ee:c4:1f:
99:79:7a:0a:48:af:50:d3:06:74:cc:c1:22:bc:19:fb:c6:c0:
e1:2e:d8:0d:8e:dc:ae:e0:e5:7f:65:26:96:e0:86:2e:df:9e:
d2:b0:d7:d3:d4:80:9f:c8:83:5a:2b:d2:d2:ad:c4:25:56:20:
21:78:d3:fd:f9:3d:b3:b7:78:72:f9:f5:2e:ad:3e:05:c2:44:
e0:2b:c0:e9:c5:c2:38:d4:e0:86:eb:51:65:a3:21:1d:bf:44:
2e:a2:ae:bc:b2:73:13:4d:07:3f:6c:1c:43:bb:b1:94:e8:34:
78:dd:42:a4:51:76:b8:ee:d1:34:92:fb:c7:0d:b7:14:eb:6c:
f5:0f:e9:24:18:55:43:b0:c1:cc:f7:3c:8d:fd:95:2b:24:e0:
ff:67:97:86:59:2b:bd:29:b1:71:87:11:82:9f:11:df:dd:56:
6e:75:47:7e:47:d3:51:e8:3e:91:75:b0:ab:f6:e5:41:82:5d:
60:25:28:dd:68:66:62:76:44:9d:54:b4:6e:55:40:72:5a:61:
b2:7b:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:46 2026 by rpki-client