Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: lxBiiZoRXBcDRgSkqcyTuJGOUaaFMesmIXCaxKiA3DM=
Subject key identifier: 19:91:23:F5:20:E4:E6:94:0B:36:91:8A:DD:A6:27:AA:BF:60:3A:6F
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 01A0C1E85FC49D6EF90570378793D8DFFB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 11FA
Signing time: Mon 21 Sep 2026 03:00:26 +0000
Manifest this update: Mon 21 Sep 2026 03:00:26 +0000
Manifest next update: Tue 22 Sep 2026 03:00:26 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: bzzpt220Seiy7Imzm2kcekZcPFm/Octiri/M58Frc/o=)
2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:5f:c4:9d:6e:f9:05:70:37:87:93:d8:df:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Sep 21 03:00:26 2026 GMT
Not After : Sep 22 03:00:26 2026 GMT
Subject: CN=199123f520e4e6940b36918adda627aabf603a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:10:bb:78:fc:c3:80:d9:12:0a:cb:59:ef:
cd:7f:cd:51:6a:9b:d7:b3:70:a3:66:86:61:88:1b:
47:bb:26:56:a8:29:e9:dc:22:cc:55:ac:45:67:ec:
21:91:2e:5c:f6:21:7a:15:4a:e5:99:85:97:31:89:
8c:e0:6a:b4:cf:2f:b4:61:58:90:be:fc:77:59:ec:
83:2f:ef:b0:ef:fe:9f:84:a6:c1:51:21:64:72:ab:
ba:e0:a3:87:af:ea:36:de:3c:e8:a4:bd:33:2e:71:
02:9a:4d:ee:38:f0:f4:d9:7c:6f:40:f6:e4:67:43:
05:4f:f2:fa:fa:bd:48:15:95:55:90:95:48:84:a0:
f6:90:91:7f:ac:ff:3e:bf:46:ea:b4:10:45:ae:42:
7b:0e:97:f2:b9:e9:f4:b7:e4:34:b7:ea:91:d5:ff:
44:fb:69:44:70:0f:2a:36:92:b2:03:38:df:f9:7a:
2c:55:0b:05:6f:fc:e8:27:ea:8f:99:05:bf:df:52:
97:d5:cf:aa:74:6d:19:4d:54:6b:61:b9:ad:56:9e:
a6:71:a6:c8:c4:ae:19:4f:7f:5b:ed:f0:66:9a:b7:
45:8a:f3:43:80:2d:0e:c4:cc:b9:c6:ab:f5:42:fc:
0d:4d:4b:b4:8e:cb:c5:ac:e3:a5:60:85:4d:28:17:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:23:F5:20:E4:E6:94:0B:36:91:8A:DD:A6:27:AA:BF:60:3A:6F
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:46:f0:ca:52:bc:0f:83:f2:b0:f9:45:26:ae:3c:41:a2:
d3:13:26:aa:5a:8c:14:3b:29:dd:78:8f:1e:20:c3:c8:9a:5a:
ee:a3:4f:74:3a:1c:38:74:11:5e:23:80:10:78:1a:18:eb:e9:
d4:d4:48:15:44:7d:62:44:57:3b:45:94:1d:ae:97:ca:a5:8a:
6d:a9:47:3a:1c:77:ad:3c:ae:2c:ca:0c:04:3e:f6:fe:23:f6:
ae:31:86:87:a3:b1:21:2f:21:92:e7:9b:0b:51:fc:30:87:f3:
2f:6a:ea:b9:6c:ab:27:76:63:1f:c7:62:39:85:b2:97:f6:04:
66:92:f8:4d:86:62:72:f2:c0:0f:b2:9f:aa:95:02:17:d1:43:
84:e4:c0:ef:b7:17:58:dd:af:f4:bf:b1:7c:6b:e4:a5:c2:1d:
c0:8b:51:45:8c:12:1a:60:65:39:d1:d6:e3:cd:de:a0:a5:db:
d3:3d:48:1a:3b:f9:05:4b:dd:48:a3:73:4e:f6:bf:3f:61:ab:
b3:9b:3a:3b:81:c8:1f:74:cb:17:34:18:ec:8b:55:12:7c:dd:
31:aa:d3:48:0d:f3:49:43:8f:b6:d6:fb:b4:4c:c2:6b:3c:05:
18:6c:61:29:21:8c:2c:f1:ad:15:25:f5:17:ae:77:b1:a3:4e:
db:06:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:54:03 2026 by rpki-client