Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: kTpE+fmtKWXGmQIbug4f1t21YDMW0Rv7ax4ZOvxxEZY=
Subject key identifier: 6A:E2:FD:12:DE:54:5D:D8:93:86:96:8F:9B:81:B8:42:52:2C:4E:26
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019CAAFD8CFF82B10B375331B1B1D348B6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0ADB
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: D6J9hsiiDfOs0lSmpI9OIU6Q79j2ZhEXm5PC6qLDd/s=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8c:ff:82:b1:0b:37:53:31:b1:b1:d3:48:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=6ae2fd12de545dd89386968f9b81b842522c4e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:0d:84:3a:7d:53:af:31:05:7a:ea:2e:f2:
df:0f:10:c3:fa:4d:6c:9f:93:61:61:5e:c4:dc:77:
f6:d0:05:54:42:35:44:2e:c0:fc:76:5c:6d:bf:59:
8d:09:a8:dc:d7:d2:e0:5f:08:b2:bc:78:1e:b1:3c:
d7:95:23:4d:23:d8:33:88:8d:7f:f8:cc:e0:62:ec:
9e:7d:64:a1:f3:b1:25:49:ca:a3:b2:f3:4c:dc:45:
26:49:8f:13:33:fc:16:9b:21:a1:24:85:b1:01:35:
8f:06:e7:e4:68:aa:76:6e:e2:61:48:5c:9c:4c:0e:
09:d7:57:9f:c9:39:14:98:6d:97:01:4c:3a:33:3f:
a3:86:b6:31:2e:33:0d:69:5b:be:fd:5a:88:56:37:
ba:24:9b:97:da:0b:07:2d:55:37:ed:35:c9:4e:00:
9d:3b:d6:76:92:af:71:5c:ec:22:68:56:cc:11:46:
ad:17:34:c3:84:9b:5e:b4:10:30:de:38:bf:1c:a3:
94:d0:da:09:5f:46:53:b3:c6:1d:42:33:b2:2f:48:
6c:09:78:c2:3e:3b:b7:0b:a6:51:be:59:af:05:62:
9c:9e:6e:89:7f:bc:38:19:d0:9f:0e:32:57:fd:a9:
99:72:9c:7d:2e:0a:5b:7b:e0:1f:50:ff:7c:09:2c:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:FD:12:DE:54:5D:D8:93:86:96:8F:9B:81:B8:42:52:2C:4E:26
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bd:77:98:4b:75:da:14:5c:4b:d1:65:c6:f3:f1:7a:7c:ed:
d8:d8:6d:d2:4b:30:79:2d:9b:53:75:8e:73:56:11:29:63:81:
90:ab:c5:9d:06:bf:7e:47:ae:aa:ae:99:a9:20:53:81:51:d1:
8e:8a:5d:80:7e:33:ed:62:b8:9f:6e:8b:0d:f9:57:c5:13:98:
02:ff:ff:6c:36:1c:63:01:ef:60:65:41:84:81:19:f3:fa:47:
42:7e:73:a4:45:24:84:9f:c6:29:41:b5:32:5a:dc:5b:1e:64:
f9:7c:36:65:9d:8a:0c:d5:61:a3:85:d8:af:a4:f6:c7:da:44:
87:3e:f3:f9:44:df:28:c1:f2:85:77:22:b5:7a:0b:99:28:18:
8b:49:10:b5:2e:26:76:d2:40:e1:0f:fc:39:92:60:9a:e0:f1:
5e:36:c5:20:8d:7a:06:9d:c8:ec:c6:29:61:c9:2f:4c:c5:89:
3a:ef:5b:47:ca:98:32:96:8f:2e:ae:50:70:18:da:2d:9a:30:
33:5f:89:22:ed:b7:13:47:8a:9a:e2:a4:76:4c:b0:70:0f:87:
85:91:5b:dd:fe:be:90:26:ea:77:41:d0:c3:c5:e7:20:ee:f1:
1b:20:f7:8a:48:b0:f3:29:82:6d:cd:4c:a0:60:eb:91:06:3c:
fe:92:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:25 2026 by rpki-client