Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: vSBxuctKqpDxJsdCKTjdlPFK3f0/l0zo0gSfzr9XkC0=
Subject key identifier: 6E:4F:B3:8A:AC:F5:78:5E:92:9A:F1:A3:D9:3D:5B:F4:C5:9D:00:39
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019CAD906055B30F77B580611C95A2B2165F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1858
Signing time: Mon 02 Mar 2026 08:00:46 +0000
Manifest this update: Mon 02 Mar 2026 08:00:46 +0000
Manifest next update: Tue 03 Mar 2026 08:00:46 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: 7h0+8BXUvtxGfySQB3HfcFADdsSuMKo1ZAYiF8+/LfM=)
2: MJ0wcLYLagq2-IQh1IDBnVmPp4Y.roa (hash: nddzrdr88MahK2kDnudEExFRXp/cZ5hcgfEP7PPKmNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:60:55:b3:0f:77:b5:80:61:1c:95:a2:b2:16:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Mar 2 08:00:46 2026 GMT
Not After : Mar 3 08:00:46 2026 GMT
Subject: CN=6e4fb38aacf5785e929af1a3d93d5bf4c59d0039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:b8:ea:8f:6a:65:6e:d9:ee:9e:52:c7:ac:
a9:00:36:46:70:d8:b6:2d:c7:d2:72:6c:86:c7:b8:
3c:30:84:0f:f9:a0:f3:a0:d6:1f:7a:b4:85:6f:6b:
cd:b9:be:c1:f5:e7:5e:82:f1:1a:77:d3:ba:ad:20:
5c:86:c1:3e:4c:03:6c:82:b3:d0:1b:7e:f9:17:8f:
a1:75:fa:d6:73:e3:4d:78:6f:3a:16:5c:bb:e8:cb:
ed:bf:0d:92:c5:73:a8:b9:8d:d8:68:85:8b:8c:a7:
e6:0b:f8:31:e8:1e:aa:35:7f:52:3b:94:39:bb:7b:
e7:f7:c7:96:06:af:47:71:64:b1:e1:03:5d:96:ff:
d4:a1:3c:5b:15:fe:20:a4:37:de:97:8d:2e:7d:58:
b4:6f:91:99:d4:14:61:21:db:22:fe:77:5b:8c:93:
8a:dd:60:11:b8:4c:c5:fd:90:5e:b0:52:71:ff:2b:
fe:c5:fa:6c:f3:f3:60:01:2f:74:1a:cd:97:ba:a1:
51:62:e3:f4:4d:a9:97:16:64:1f:e5:fe:6f:1b:cb:
e6:28:a6:af:e5:7b:a0:2b:5c:0c:1f:69:74:a7:3b:
5b:2a:b9:bd:47:51:c4:17:a9:42:c5:d1:c2:aa:89:
28:eb:62:5a:20:a7:d8:ee:02:68:2d:43:94:63:ff:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:B3:8A:AC:F5:78:5E:92:9A:F1:A3:D9:3D:5B:F4:C5:9D:00:39
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:47:78:98:08:6c:e9:0b:75:ae:21:9c:e7:e1:75:f7:fa:2a:
21:6c:8a:38:5b:56:b4:6e:ba:59:eb:a8:20:f1:a8:8b:66:dc:
4a:47:00:df:68:81:70:62:24:b3:f3:8d:1c:46:cb:59:70:a1:
09:83:5e:fa:01:c9:12:00:87:42:64:61:90:24:a5:b5:e7:5e:
d2:75:c6:7a:20:b4:2d:46:ed:35:22:58:98:88:a2:2a:ee:6a:
1e:96:fc:ee:24:51:06:42:28:17:3b:dc:f4:fe:4e:25:7c:ea:
03:8c:b0:2b:90:37:0d:35:57:f2:ac:80:a3:8d:cc:d9:d2:b1:
a8:14:4a:4f:58:e7:a4:1e:d4:d5:89:34:a1:1c:5c:1f:dc:26:
96:7c:49:60:a8:cd:d0:7d:91:0a:4c:c7:8a:52:07:a8:e9:01:
bc:3e:54:4e:90:71:63:57:d4:20:7f:49:3b:19:3a:cc:93:a2:
1b:df:f8:bf:f1:9d:15:a0:ed:39:8b:96:97:df:9f:6f:bf:2d:
37:3d:8c:13:bc:9a:98:46:c8:1b:81:c0:dd:ae:c7:ca:cf:90:
1c:0d:4f:ee:1c:59:16:ed:85:b6:cb:d3:9e:7a:47:9b:04:99:
00:32:f8:8d:c4:85:0e:71:25:67:42:43:b3:24:0a:e5:2e:71:
c1:4c:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:05 2026 by rpki-client