Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: +XYMV1pmw9DRoSaxDsj3X92DX3LjZQ+Jw/Oz1aYBsbY=
Subject key identifier: 31:EC:D3:E3:E6:38:31:AF:7D:E9:57:5C:60:C5:B8:44:D8:59:77:EA
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 01A0BFC3ADAC9FCA0EEDA0319537C4A59930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0CF8
Signing time: Sun 20 Sep 2026 17:01:07 +0000
Manifest this update: Sun 20 Sep 2026 17:01:07 +0000
Manifest next update: Mon 21 Sep 2026 17:01:07 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: fuAr1CsQ9u01Ih7q7qimQfH4fn3sARDck9WQ2RK95VA=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:ad:ac:9f:ca:0e:ed:a0:31:95:37:c4:a5:99:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Sep 20 17:01:07 2026 GMT
Not After : Sep 21 17:01:07 2026 GMT
Subject: CN=31ecd3e3e63831af7de9575c60c5b844d85977ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:3b:27:b7:48:50:f8:62:13:ca:e9:92:b4:
0f:47:53:2c:7b:b9:d1:98:e0:2c:22:bc:af:cc:46:
e9:67:86:bd:e1:5a:27:91:43:00:ad:01:8a:bd:3f:
f5:d4:b5:f7:3f:82:0d:b0:a8:33:55:98:3e:b7:d1:
6f:c3:83:d2:52:e4:9a:bb:a3:19:19:34:e7:df:03:
e7:78:e4:70:9b:00:6b:78:63:dc:46:b3:e4:b4:cd:
fc:4f:8c:5d:e7:94:4e:51:3d:1e:8a:fb:ec:39:99:
17:96:56:88:b5:35:a1:99:3b:3d:2a:16:a0:1e:b1:
71:51:f7:d8:2b:f0:85:4b:b0:37:82:02:26:3d:68:
a3:4c:04:58:0a:77:2c:d1:75:ae:27:bc:bb:52:b7:
bf:93:c1:f4:fc:aa:f7:fd:75:29:c7:f9:1a:0d:7d:
19:ff:49:77:13:7f:ae:b0:bc:67:26:ad:63:34:16:
b8:dc:1b:47:8b:59:5b:bc:31:fc:aa:89:ab:ab:27:
05:e6:53:77:e6:23:c5:37:2b:30:59:c3:f1:b2:1a:
6d:a1:03:cc:bd:f1:db:97:a3:c9:8c:c8:af:4e:5a:
09:fa:4a:b7:a7:6b:9e:34:82:82:b2:ef:41:a7:f2:
a7:71:43:1f:ce:e8:01:4f:1b:9d:64:b0:d4:58:b7:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:D3:E3:E6:38:31:AF:7D:E9:57:5C:60:C5:B8:44:D8:59:77:EA
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5a:86:e6:d3:35:d7:f5:de:56:35:95:63:eb:27:ab:47:d5:
15:e1:8a:be:45:98:a5:ee:61:58:26:f1:23:d1:66:3a:45:61:
f5:1b:2a:f5:5c:65:d2:45:d0:1d:d3:40:f0:82:c9:ff:f5:2b:
e5:3a:ca:86:f8:fa:dc:64:6c:ed:f7:91:00:76:83:b4:91:81:
e2:7c:59:5b:02:55:21:fc:52:f9:2b:d2:32:50:93:c6:35:ee:
b2:0d:69:38:3b:46:20:17:85:5e:7f:e7:26:4c:27:43:c5:4d:
46:d6:96:4c:e1:14:27:85:0c:06:ad:d4:42:6e:81:26:15:b1:
99:ff:37:46:2f:ae:6b:b8:ed:e8:4e:96:57:c3:b2:44:f1:c5:
15:48:1e:fd:bc:f4:7e:39:de:61:9b:2d:1a:ca:4c:1e:3a:13:
62:aa:b5:62:44:8f:a2:61:dd:cc:75:9f:5b:f8:36:eb:45:6d:
c8:c3:47:14:3f:e8:1b:2a:a1:78:25:ea:05:41:7c:6f:ba:91:
84:a4:14:e2:73:58:14:4f:4d:22:e3:a9:1e:1d:1b:6e:ee:c9:
01:1a:2b:5c:9a:ee:78:ef:6f:4f:76:b8:fc:66:f2:6b:3a:32:
6a:22:2c:bf:4c:9c:a6:5f:0c:f8:07:54:b7:df:6f:25:6b:46:
7d:8a:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:34:36 2026 by rpki-client