Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: u3KyaaQDt869PsujllFW+b5i/RyA1k8YqsMCoVXmFfg=
Subject key identifier: AE:56:12:DA:28:1B:EA:BD:C0:D1:55:A3:55:F3:BA:68:A7:DD:74:AD
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 01A0C36982BA49F1A86EFA2EE260115FF0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 1219
Signing time: Mon 21 Sep 2026 10:01:06 +0000
Manifest this update: Mon 21 Sep 2026 10:01:06 +0000
Manifest next update: Tue 22 Sep 2026 10:01:06 +0000
Files and hashes: 1: 0ZZBNy_4ZfeDGv0GZ4Y6WyBitiY.roa (hash: xrSAqsjvVj4VTaGXTAjpYZq+szPFsolHKq89Y8sv2SY=)
2: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: j5l23ovr+4NOUmTkQQjCu+fYNIbNUcJT2965rHQBKpw=)
3: HlPf6jt7HgmbuEWgecuG4Sgaorc.roa (hash: j8/ocuESU17xtFvRR6K0O2U6/8pNxL5+xXsijYbdSGQ=)
4: JB8yx2b88cSBO2zP8HmMFflCSbQ.roa (hash: ptfoSvZpsHgOB3p1UFy4y5riUES2ZHub67bxSsiN4pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:82:ba:49:f1:a8:6e:fa:2e:e2:60:11:5f:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Sep 21 10:01:06 2026 GMT
Not After : Sep 22 10:01:06 2026 GMT
Subject: CN=ae5612da281beabdc0d155a355f3ba68a7dd74ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:11:83:11:32:af:88:99:d2:48:49:2e:5a:
0e:04:f0:f4:46:4d:82:be:52:08:5e:0f:78:d8:c8:
5d:0c:f4:32:ec:d0:51:51:22:44:77:e6:7b:73:ba:
37:9b:e7:cc:d7:94:17:f1:9a:71:66:5d:df:3b:6f:
0b:02:72:44:f6:57:1f:d0:9c:3c:54:6d:a2:a7:70:
b5:35:79:4c:c6:b4:37:a1:d1:3a:c0:0d:8e:34:a4:
d7:ef:68:72:2c:96:42:21:04:88:3b:5f:5a:1f:77:
cb:aa:3d:6f:46:9d:9c:df:07:ac:46:ff:3d:2c:90:
c1:22:d6:c3:bf:74:f6:5b:04:98:b3:91:17:9a:b5:
b3:3d:49:93:a0:21:6a:90:2e:a8:65:6e:9d:9c:d3:
49:d4:d8:5c:d5:c3:96:d6:30:ad:ed:8f:92:22:34:
fe:e0:28:b8:97:ba:f9:3a:5d:a6:6d:5a:98:be:85:
87:7f:ac:d2:13:4f:4f:73:ef:0c:c5:94:39:62:7e:
e0:4d:85:d7:82:c4:55:f3:4a:f8:9d:f5:c2:1d:21:
07:f0:a3:a8:ad:17:5b:58:73:6d:00:9b:e1:2d:39:
8e:44:0d:d8:8b:6d:fb:15:99:d4:53:b5:e9:5a:5c:
6f:67:ca:b1:e8:24:a0:db:56:f1:e3:22:a1:13:e3:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:12:DA:28:1B:EA:BD:C0:D1:55:A3:55:F3:BA:68:A7:DD:74:AD
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:67:b7:b3:45:6f:34:29:24:d1:ae:7e:1f:6e:5a:1a:9e:
a8:ee:89:38:e9:bd:e1:51:89:da:08:74:ec:a9:04:0b:8c:ed:
3b:8d:3c:fa:a9:a0:3c:f6:7c:2f:02:c0:b4:d5:36:b3:ce:6b:
8b:80:87:df:9c:b1:1c:f5:a7:ef:4d:05:f7:cd:88:0a:d4:fc:
24:19:38:5c:08:17:fc:cc:93:a0:40:cd:de:68:15:ea:a4:25:
ec:1f:10:9e:27:d8:a2:7a:2f:85:99:f4:ab:56:50:76:ac:d8:
a7:a2:c8:2e:ad:28:af:ab:f1:f0:36:9c:0e:af:f6:99:4e:d4:
13:97:54:ac:5b:f8:49:85:b6:94:1a:28:02:bc:2f:96:19:bf:
27:06:14:74:6c:e4:2c:39:da:ea:98:49:3e:b6:26:a9:57:6f:
bf:3d:c5:e7:20:3c:6e:dc:87:a6:ff:18:3a:a4:53:aa:d3:de:
21:8a:89:6e:8e:e8:c4:a2:47:67:0c:16:cf:1a:d9:54:42:2c:
fb:90:6a:4f:0d:75:0e:19:a5:bb:f8:fc:24:c3:cb:4c:f3:5b:
26:bc:3b:0e:c7:bf:7b:d1:46:b7:d5:84:c9:f6:65:c5:8a:42:
5e:d1:06:b2:5c:d2:16:99:32:95:76:86:c1:0f:8e:d0:d5:bb:
26:23:73:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:36:32 2026 by rpki-client