Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: 5WATJ0lzubM20DXBhJItAi7rVXtpPcnXkY9kSS0IT/c=
Subject key identifier: 27:E4:A1:CC:43:26:D7:4B:34:1E:16:51:C1:A9:F9:95:8D:6A:38:81
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019D9BBF050AC70D2C0E7A9FFDCEE8B7B878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 18D5
Signing time: Fri 17 Apr 2026 14:01:20 +0000
Manifest this update: Fri 17 Apr 2026 14:01:20 +0000
Manifest next update: Sat 18 Apr 2026 14:01:20 +0000
Files and hashes: 1: 81yZ155DMG5rdK0HhKcFu9QDPzo.roa (hash: S3648aF6KQD7VXRsWbdISgJGBto1UPZCtJzs6qrU8/U=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: RgIxITfXtjkYYn/B5PtOouwS/+IQ8nT4mh0h3NyF2k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:05:0a:c7:0d:2c:0e:7a:9f:fd:ce:e8:b7:b8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Apr 17 14:01:20 2026 GMT
Not After : Apr 18 14:01:20 2026 GMT
Subject: CN=27e4a1cc4326d74b341e1651c1a9f9958d6a3881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:80:ee:88:eb:1a:09:38:00:c4:d8:c6:f2:
d0:01:1e:62:d6:87:19:4c:0b:e2:01:88:4c:6a:d9:
9f:a7:2b:1a:12:8d:99:9f:5f:ad:ed:52:74:5c:ac:
b4:89:ba:2f:d0:e6:4c:f6:13:ab:f4:a6:e2:d8:91:
3a:11:e0:70:4c:77:b1:1a:22:21:25:f8:6d:7f:57:
aa:29:f9:e7:98:8e:d8:87:83:d2:f8:e5:48:57:10:
c8:70:7a:fe:5b:44:d9:d7:59:33:0b:0c:a0:56:9f:
2d:11:c7:22:b5:c0:c0:78:fe:7c:b2:84:35:aa:34:
b1:6e:e7:9e:4d:16:a4:1f:44:85:8f:21:b0:0c:dc:
d2:8f:e3:37:ad:55:2c:42:d1:64:61:38:25:ba:ec:
67:81:36:c1:43:33:9f:8e:db:64:0d:87:88:6d:d5:
19:98:e2:02:60:e5:5e:56:be:ea:72:a4:95:27:ba:
07:ed:18:38:77:09:0c:82:50:40:23:9a:9f:61:27:
1e:80:1d:21:a5:3a:c9:62:b5:89:77:65:36:5c:ec:
eb:e9:0d:29:db:9d:ce:28:1a:7d:6e:da:ce:5c:07:
26:36:ed:a9:7a:07:0e:3d:06:49:ad:85:28:f7:fb:
0d:64:e9:13:97:40:14:49:3e:34:14:6b:56:cb:b1:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:A1:CC:43:26:D7:4B:34:1E:16:51:C1:A9:F9:95:8D:6A:38:81
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:81:ea:8d:2e:e5:3d:26:ee:1b:44:e3:db:7f:6b:0e:e9:47:
f4:b3:ad:3c:3a:d7:fb:42:e2:f5:44:ba:84:75:d1:fd:5c:bc:
d1:69:98:b0:1f:8d:fb:71:13:7c:59:28:e9:38:60:85:33:5f:
d7:b8:eb:b2:e9:95:3f:1f:bf:bf:c8:3b:e3:bd:51:65:07:70:
09:f0:ff:d6:c2:62:35:0f:1d:fd:67:15:00:cd:7f:09:63:15:
30:80:a9:9c:a9:9b:6d:4e:2b:da:0f:22:67:5c:a5:17:8b:c4:
aa:35:57:d3:23:6d:f4:87:46:8b:da:ce:c4:5f:2d:34:43:eb:
9f:fe:f6:0a:db:7f:a3:f4:b4:96:0f:bc:1c:32:0e:57:be:b4:
27:06:b1:c6:11:27:76:50:f6:7d:0b:f0:cf:5f:35:d8:43:80:
ba:f9:e2:ea:f0:bc:b9:30:a4:17:60:d3:5d:71:a2:df:6b:39:
76:bb:81:64:08:85:53:6d:34:71:05:2f:91:17:f3:01:91:de:
2d:b7:ff:ba:07:7b:a7:c2:f5:44:5e:84:bd:e2:13:86:97:f6:
d3:5b:96:6f:d2:91:36:2f:f7:62:23:9f:03:07:81:54:d8:7e:
60:54:11:cf:d8:ab:7c:25:82:6c:17:42:4d:bf:f0:41:fc:65:
9a:97:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:20 2026 by rpki-client