Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: WEcUh8wtHchEOzVsllnLXhaAT8edhdkuLvJM9A+CiZc=
Subject key identifier: 79:32:73:5C:71:3F:E7:42:30:28:2C:39:2B:F4:49:CE:6D:6B:41:68
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 01A111BB6642D7CCC094F7595F7FA5AE01D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1AA1
Signing time: Tue 06 Oct 2026 15:00:56 +0000
Manifest this update: Tue 06 Oct 2026 15:00:56 +0000
Manifest next update: Wed 07 Oct 2026 15:00:56 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: Ei/XRud1IbZ7plmvjtTKymjp3vG/FMDaPXDd1lRRKAg=)
2: Y-KOAHOLABX3sY4gJm3A6nvrqgk.roa (hash: jTbxGKNlR+XX6Qac6sKrcuIPfzi6QGetIT0dTM9/L6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bb:66:42:d7:cc:c0:94:f7:59:5f:7f:a5:ae:01:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Oct 6 15:00:56 2026 GMT
Not After : Oct 7 15:00:56 2026 GMT
Subject: CN=7932735c713fe74230282c392bf449ce6d6b4168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:98:7b:31:80:65:e5:19:e1:5d:9a:11:a2:
05:8e:63:e9:be:aa:65:c0:4b:d3:48:f4:d5:60:43:
60:66:83:6f:c8:58:01:20:c5:98:e1:99:8f:75:12:
72:ee:cf:75:14:c9:ce:4d:e1:8b:45:d5:7b:56:cf:
7d:97:ee:c0:54:b0:0b:f7:0f:6a:37:80:ca:19:bf:
b0:e7:8a:4d:c2:36:fc:ae:41:94:8f:48:80:eb:38:
be:3d:42:30:9f:32:21:70:6f:25:b9:fb:92:d1:c9:
36:55:25:b9:5a:2b:46:45:a5:58:ac:c6:4c:84:73:
bb:9f:e0:01:78:9a:f3:1a:91:3f:0f:db:c3:78:73:
5a:a2:63:8f:ef:7e:fe:84:c2:b1:ab:a9:d7:83:0b:
eb:09:f5:5e:fd:24:cd:0b:21:9b:2c:80:10:35:4e:
b9:49:23:4e:09:8d:6c:dd:33:b1:82:a6:10:9c:d4:
49:c4:80:bd:a3:af:17:bb:c5:8f:aa:05:1d:d4:64:
fe:79:ba:2a:70:f3:1c:89:e6:84:3b:a8:8c:d9:7c:
cf:e3:11:d5:de:b1:81:4b:75:b4:bd:16:d8:9d:9e:
0f:0d:c6:94:07:b3:a7:b2:2a:ba:ff:4d:05:fd:9e:
52:54:2e:cc:66:ac:03:f2:f3:8c:58:b0:91:80:9d:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:73:5C:71:3F:E7:42:30:28:2C:39:2B:F4:49:CE:6D:6B:41:68
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:f8:66:99:80:c7:89:d0:f2:55:51:1a:3a:30:ca:6d:ff:
35:c1:de:38:dd:97:3a:0c:e7:ac:54:03:9a:e7:03:78:23:fe:
2e:a0:68:c0:28:fb:58:2e:30:53:73:76:6e:83:5a:77:18:0b:
18:68:b7:b6:09:e9:a0:27:08:b6:db:de:fb:3f:14:b2:27:d5:
50:eb:cc:e9:ea:15:4c:05:89:82:9a:71:95:b7:ad:42:65:be:
d4:c4:17:d2:a3:99:63:98:9c:5e:b3:64:23:39:9e:aa:e0:ad:
2f:68:79:b0:71:14:db:63:20:6f:2e:01:c7:fd:96:dc:2d:52:
69:8d:40:98:fc:5a:13:cf:8c:eb:0c:33:24:64:4b:36:bb:55:
15:18:ef:ea:06:12:2d:2c:9b:48:1f:52:61:1d:98:e7:8e:c2:
19:50:13:0d:19:89:1e:97:fa:51:03:a5:81:87:d7:10:b3:5f:
35:8b:7e:28:a1:40:8e:39:0b:fa:a6:42:fe:cd:f3:6e:b2:c8:
14:6b:23:45:12:68:94:9e:05:05:ef:58:48:b3:8b:d8:b3:4f:
81:72:b1:43:c2:35:6e:69:8f:ad:6b:bf:fa:6c:9f:41:df:74:
b6:a2:8c:23:73:5e:f6:ad:9a:6d:e7:0a:b5:8a:43:30:46:cf:
23:9d:c3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERu2ZC18zAlPdZX3+lrgHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2
NmFiY2IwHhcNMjYxMDA2MTUwMDU2WhcNMjYxMDA3MTUwMDU2WjAzMTEwLwYDVQQD
Eyg3OTMyNzM1YzcxM2ZlNzQyMzAyODJjMzkyYmY0NDljZTZkNmI0MTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXiYezGAZeUZ4V2aEaIFjmPpvqpl
wEvTSPTVYENgZoNvyFgBIMWY4ZmPdRJy7s91FMnOTeGLRdV7Vs99l+7AVLAL9w9q
N4DKGb+w54pNwjb8rkGUj0iA6zi+PUIwnzIhcG8lufuS0ck2VSW5WitGRaVYrMZM
hHO7n+ABeJrzGpE/D9vDeHNaomOP737+hMKxq6nXgwvrCfVe/STNCyGbLIAQNU65
SSNOCY1s3TOxgqYQnNRJxIC9o68Xu8WPqgUd1GT+eboqcPMcieaEO6iM2XzP4xHV
3rGBS3W0vRbYnZ4PDcaUB7Onsiq6/00F/Z5SVC7MZqwD8vOMWLCRgJ0IRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkyc1xxP+dCMCgsOSv0Sc5ta0FoMB8GA1UdIwQY
MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt
OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj
LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6/4ZpmA
x4nQ8lVRGjowym3/NcHeON2XOgznrFQDmucDeCP+LqBowCj7WC4wU3N2boNadxgL
GGi3tgnpoCcIttve+z8UsifVUOvM6eoVTAWJgppxlbetQmW+1MQX0qOZY5icXrNk
IzmequCtL2h5sHEU22Mgby4Bx/2W3C1SaY1AmPxaE8+M6wwzJGRLNrtVFRjv6gYS
LSybSB9SYR2Y547CGVATDRmJHpf6UQOlgYfXELNfNYt+KKFAjjkL+qZC/s3zbrLI
FGsjRRJolJ4FBe9YSLOL2LNPgXKxQ8I1bmmPrWu/+myfQd90tqKMI3Ne9q2abecK
tYpDMEbPI53DrA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:48:44 2026 by rpki-client