Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier: 5zov7YOW0haUpLZ3UENdvnueQoJ7/3phZoQTZRmMTYE=
Subject key identifier: 8F:43:A9:14:4C:E7:8B:EC:A4:CB:F2:42:74:4C:F2:2E:D3:C4:DA:CB
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 01A0C5C540AB43A9C0525728CEDF70E42865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number: 0541
Signing time: Mon 21 Sep 2026 21:00:33 +0000
Manifest this update: Mon 21 Sep 2026 21:00:33 +0000
Manifest next update: Tue 22 Sep 2026 21:00:33 +0000
Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: 9LQK20b+gKHq6pf1h+J+z6/McYwSZ9nRWo6P0gZKmlA=)
2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:40:ab:43:a9:c0:52:57:28:ce:df:70:e4:28:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: Sep 21 21:00:33 2026 GMT
Not After : Sep 22 21:00:33 2026 GMT
Subject: CN=8f43a9144ce78beca4cbf242744cf22ed3c4dacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:29:33:e2:79:9e:0f:e7:a3:ab:a3:55:7e:
77:6d:2e:e1:a1:e8:4f:be:0b:d7:ed:55:40:d6:2f:
1a:78:3d:f1:2b:1a:84:90:70:23:e8:eb:32:4d:52:
f6:a8:b8:bd:3d:64:5b:dd:11:33:0e:98:a5:a2:d9:
4f:c0:4f:1d:bd:30:39:56:ec:c0:a6:3b:b3:89:e4:
52:f8:5f:35:33:97:43:ec:41:84:15:9b:1b:a7:37:
1f:f0:45:ef:12:f6:68:77:b5:10:fd:b4:74:a4:7f:
bd:13:9b:50:18:89:0c:22:e8:55:09:0c:d0:87:de:
69:dc:5c:b8:23:01:96:e6:8d:14:64:5e:25:4e:a8:
bb:b2:90:de:66:74:75:a7:fd:1b:a3:ff:25:1d:af:
da:28:2c:c1:7f:8a:f9:d4:70:88:97:d7:67:27:c5:
23:81:d6:f5:77:d7:26:d6:04:8f:e4:0a:14:18:df:
17:33:f6:69:4a:7a:5e:2e:8f:f7:7c:61:90:0f:61:
c0:8f:43:df:b4:e4:ab:64:03:82:71:be:6b:ee:5c:
8c:27:6a:44:4b:9e:58:22:3c:0e:26:05:58:9f:0b:
59:de:b2:70:86:82:11:a1:e2:d0:8b:70:b8:9d:21:
ed:29:28:e1:2a:8c:f2:c5:52:3b:82:6c:16:76:c7:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:A9:14:4C:E7:8B:EC:A4:CB:F2:42:74:4C:F2:2E:D3:C4:DA:CB
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:3d:d6:c9:dd:0d:2a:60:e7:d8:dc:12:20:e2:c1:ca:0b:
0d:92:a2:c9:ee:74:f5:d7:fa:76:5a:4a:e8:8b:e4:29:99:ea:
63:56:cd:eb:15:8a:31:cb:a9:7b:49:06:99:1e:7b:45:f9:9f:
f7:69:64:83:7d:89:63:aa:3b:c0:bb:66:10:38:f4:9b:55:c8:
3c:36:fe:fc:06:39:8d:2e:7c:06:44:f8:02:1f:4d:47:14:0d:
0d:05:55:5e:ed:6c:36:4b:ec:26:8b:b6:f4:82:dc:65:a0:43:
9e:fa:fd:04:aa:2d:53:cf:27:e7:35:e5:6a:82:d3:cd:05:aa:
a3:29:ff:d3:77:c4:51:5f:5e:6b:3d:dd:e4:36:88:02:b1:0d:
45:1b:f5:ae:6b:bf:aa:16:7f:93:d0:e2:2f:f4:de:65:ee:42:
c0:39:8a:35:67:a9:1a:3b:1a:8b:62:de:b7:e8:37:78:8a:cf:
a2:67:be:76:82:cf:48:e9:64:d9:d5:c1:52:a5:42:b7:71:e3:
7e:56:ac:59:0a:07:c1:49:8e:fb:ab:f9:2d:26:82:17:3e:1c:
03:a5:8e:ec:c5:0c:29:1d:7d:f7:9a:97:73:c5:a7:31:27:a9:
75:f7:3a:6b:a7:cc:eb:6a:58:bd:13:c8:c4:65:36:75:16:6e:
f9:4a:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:12:54 2026 by rpki-client