Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: GJbZ3JPjmyLNuzBVLpRIppD4bSxJC/W48FYT/gDrdzs=
Subject key identifier: 11:57:1A:51:46:4A:B8:43:10:90:3F:4D:62:A4:89:15:7D:31:8C:8E
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019EBFFF7CFE3E46C1E226D230AD4997DC24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0BEF
Signing time: Sat 13 Jun 2026 08:00:52 +0000
Manifest this update: Sat 13 Jun 2026 08:00:52 +0000
Manifest next update: Sun 14 Jun 2026 08:00:52 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: E2SkpUt0zvm5ybOODwIMk4afwIQkb4eLQzBcTe4t46s=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:7c:fe:3e:46:c1:e2:26:d2:30:ad:49:97:dc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jun 13 08:00:52 2026 GMT
Not After : Jun 14 08:00:52 2026 GMT
Subject: CN=11571a51464ab84310903f4d62a489157d318c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:cc:23:89:2e:c3:e9:34:27:6f:39:22:d9:
9b:aa:8a:95:4c:bb:2b:52:a9:5e:7f:51:c6:58:96:
d4:38:2d:08:9c:5b:3c:74:52:1a:e7:64:03:0a:f5:
a4:7a:81:b5:37:c2:cc:4f:80:8f:19:15:ba:05:6d:
06:92:6f:ee:58:f9:e0:07:6f:ad:5d:bf:99:47:13:
b7:cc:ad:a3:b7:c7:fc:0c:39:7d:88:20:fa:86:bc:
f5:83:bd:aa:f8:24:1b:7d:52:af:7b:39:cc:e8:ae:
bf:57:6f:15:bb:4b:55:e6:f7:2a:28:25:9f:62:f3:
75:88:90:a6:7b:ee:05:6d:e3:8c:91:93:46:02:ca:
af:84:55:bc:2e:7f:0d:9e:94:b5:ca:8d:12:12:7e:
bf:0f:1c:43:b6:ce:c2:bf:27:cf:04:34:98:d1:56:
da:88:23:dd:62:70:3e:45:04:b7:6b:70:3d:7c:36:
77:3e:44:2d:4d:08:f7:b7:25:68:dc:ea:32:c4:f7:
79:44:fd:b9:ea:1c:f2:02:24:69:a7:e7:17:d5:b0:
1f:23:ff:0a:54:83:64:f3:f5:61:e9:d4:ea:02:7d:
c5:3c:53:68:c3:b4:3b:03:b0:7b:04:c2:8d:77:0b:
65:89:64:44:c6:0b:ac:b9:fa:58:82:91:a6:7f:14:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:1A:51:46:4A:B8:43:10:90:3F:4D:62:A4:89:15:7D:31:8C:8E
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:27:b5:19:7b:ff:cd:b5:38:42:f6:08:8d:e4:d2:27:fd:3d:
6c:b8:2e:06:7a:1f:dc:94:02:51:22:c3:9c:de:f9:70:6e:13:
bd:b1:a9:05:3b:c8:25:4a:a0:8d:3b:3f:0b:8d:43:c5:b1:1e:
6b:96:6b:8e:20:87:18:c8:b0:30:2b:ae:aa:53:4f:46:7a:97:
62:14:a8:51:36:63:6f:8b:79:7a:7a:92:d7:54:f3:ee:91:9a:
de:6b:c6:3b:ee:c7:cd:fd:6d:04:88:1a:60:d2:32:7f:44:4b:
d4:e0:2d:5b:2f:61:b1:51:0e:7c:54:0c:29:e9:a9:08:ac:9e:
00:55:27:aa:74:86:67:52:5f:84:e7:a4:dc:21:58:a4:86:7f:
e2:28:27:f6:4e:1b:e6:13:58:89:b8:78:3d:eb:55:3d:94:bc:
e2:98:35:4e:b8:4b:85:99:14:6b:d8:22:6d:65:ef:c2:b5:6c:
d0:9b:1d:00:f0:41:d5:15:d8:c5:07:7f:b4:04:d7:9b:34:27:
7c:4d:31:da:d3:9a:d1:a0:d1:3b:fd:a7:80:6d:5f:8f:56:64:
ad:e4:53:95:b4:f2:cd:a0:4c:09:e5:ce:3d:68:9d:c2:c0:44:
35:4e:11:ef:f7:f7:61:19:76:fb:38:e8:55:36:0c:0a:a0:33:
4d:dc:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:19:26 2026 by rpki-client