Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: 8jFB2kmEcRxw7Rw+MC0d0A3eSQLYj5/1GdXVw3WVLUs=
Subject key identifier: DD:84:CD:3E:8F:46:01:15:20:78:CB:92:EB:36:F6:20:24:13:E9:AF
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019EBE11042A623362DE164C3FB54A8B9C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0BEE
Signing time: Fri 12 Jun 2026 23:00:46 +0000
Manifest this update: Fri 12 Jun 2026 23:00:46 +0000
Manifest next update: Sat 13 Jun 2026 23:00:46 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: 4grKepXpd8XDxznwOM36lcCU+MryEMDVDEtUQBE8DWs=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:04:2a:62:33:62:de:16:4c:3f:b5:4a:8b:9c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jun 12 23:00:46 2026 GMT
Not After : Jun 13 23:00:46 2026 GMT
Subject: CN=dd84cd3e8f4601152078cb92eb36f6202413e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:a2:54:bc:de:04:70:90:e5:0d:d7:ac:99:
c8:74:d6:e4:85:c7:d2:4a:e4:37:ed:99:07:e5:67:
5e:8d:8f:d0:ac:17:c6:8a:28:7e:9c:7d:5c:65:f6:
78:fa:de:1e:e7:0f:e3:88:7a:35:e4:be:65:f1:47:
85:00:5b:6a:17:bc:30:54:3e:05:42:93:ff:73:2a:
4f:19:bd:cf:36:1f:1e:45:1f:67:e4:ed:b0:2f:6a:
b4:9d:35:f6:ea:2f:11:da:ad:a9:37:30:4d:30:1e:
86:84:86:75:0f:f9:02:a3:5a:a4:90:3f:0e:87:53:
5c:e1:ac:da:c5:04:91:a5:f4:87:92:69:f8:70:cf:
9c:dc:29:93:38:8b:b3:37:92:68:b8:89:20:fb:2c:
92:1a:3b:ab:cb:7a:14:8e:a4:e4:a7:a6:b9:50:9b:
21:c3:b9:38:29:6c:8f:78:c6:75:b4:36:d8:26:92:
d3:6e:24:90:a5:53:dc:8d:97:f7:4f:6c:ef:65:1b:
c7:38:0d:71:d3:4b:01:8b:e6:53:19:f1:d3:26:83:
fa:e2:11:cd:70:1f:40:eb:bb:6f:2b:d5:00:7e:17:
3f:a0:72:1f:cc:eb:14:e7:e2:3a:dc:15:38:2d:a8:
99:38:aa:ec:ec:e6:5b:40:6c:1e:cc:5c:f8:d4:07:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:CD:3E:8F:46:01:15:20:78:CB:92:EB:36:F6:20:24:13:E9:AF
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:74:03:89:87:e4:02:e7:71:11:79:f5:4d:94:4c:28:07:38:
00:fc:ce:88:0b:8b:6f:96:cd:e2:fa:39:89:83:77:43:3b:a3:
6f:4d:6e:e8:43:c9:0b:b3:d5:5f:f8:4f:43:a1:d2:23:b6:93:
c8:ac:81:bb:65:c9:b8:91:e0:db:50:0b:52:90:0e:d9:c7:bf:
a3:05:25:43:55:14:c8:42:88:42:11:f4:2f:fa:3b:85:9e:e3:
c2:b5:34:a4:c9:dd:aa:c6:9a:d1:93:43:32:58:45:da:b5:85:
d1:19:be:ec:c3:92:de:7e:64:f6:81:05:98:4f:33:a9:f3:eb:
8c:a3:0f:83:06:ae:71:d5:6b:f6:ad:ca:1b:77:fa:e7:df:ad:
41:9c:84:c3:5e:09:3c:21:ca:d0:1a:23:82:fb:2f:00:7c:60:
d1:85:8c:15:45:4e:2a:4d:fb:53:34:9d:e7:62:86:29:48:13:
72:62:78:bd:b3:8e:aa:22:13:f5:aa:30:1a:3b:ea:8a:fd:7e:
39:3a:8d:c3:55:88:66:85:28:61:f7:e0:97:f0:4b:75:7d:ca:
01:ab:67:a7:23:be:c6:6c:85:49:ea:59:a1:70:42:78:c2:ea:
36:68:03:80:a3:a5:b6:13:32:72:64:76:6f:69:90:cc:67:ea:
b7:31:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:44 2026 by rpki-client