Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: rRyiY6AFNYraPNF7ac5XK4jebrYya9IJ3keCEqbNvS8=
Subject key identifier: 3B:20:2A:EA:79:CF:F4:EA:1A:D3:E5:8F:E0:15:A1:68:6E:71:E9:9D
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 01A00093ABE56938073DC5AC2D87779465EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 14:01:12 +0000
Manifest this update: Fri 14 Aug 2026 14:01:12 +0000
Manifest next update: Sat 15 Aug 2026 14:01:12 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: kjCVwuB8GHZQl9AyBzNpkxjhFjytt0RpirapX8H3LRA=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:ab:e5:69:38:07:3d:c5:ac:2d:87:77:94:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Aug 14 14:01:12 2026 GMT
Not After : Aug 15 14:01:12 2026 GMT
Subject: CN=3b202aea79cff4ea1ad3e58fe015a1686e71e99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:7d:03:fa:20:c5:ce:90:42:40:fd:55:a3:
6d:a4:2c:f9:2c:49:7c:7f:c5:97:d7:7a:69:94:79:
ca:27:b0:ae:2f:ed:d5:83:87:10:dd:88:49:25:6b:
5a:8f:e4:69:98:cb:ff:bf:9f:ee:ad:e8:5a:db:54:
af:cf:1a:e5:b1:e6:85:2d:9d:d9:0f:8d:cb:37:4d:
72:66:c5:9b:51:9c:35:19:8a:6c:bb:b6:fd:b0:f1:
94:12:cf:e9:69:67:d8:5d:57:56:df:24:6a:f4:a2:
ea:10:00:ca:c9:ef:d8:96:9e:79:bc:66:6c:6e:fa:
65:cd:fb:00:bb:db:72:38:02:4f:a3:25:cb:87:2b:
c5:2a:73:e2:74:22:48:09:ac:5c:4f:54:d5:a8:58:
de:71:16:1b:64:8d:3f:8d:0a:a2:74:ad:1e:1a:03:
7e:0b:48:5b:82:5a:45:9d:d9:5b:82:16:5a:33:dc:
f8:f3:94:e2:5c:f6:2f:87:cc:51:96:2b:1d:af:57:
af:fe:cc:4a:ca:ac:3f:be:de:93:07:0e:9d:90:e2:
d6:83:bc:1c:70:b4:6c:01:6d:59:50:5e:af:90:b9:
80:3e:3a:0d:5e:46:7b:e1:8e:46:7c:20:5a:09:73:
b7:54:d7:55:2f:0d:55:c9:62:5b:3b:93:cb:86:c3:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:20:2A:EA:79:CF:F4:EA:1A:D3:E5:8F:E0:15:A1:68:6E:71:E9:9D
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:01:97:f4:b6:b2:2c:44:29:9d:4c:cd:9f:2f:b7:6f:7f:87:
13:89:9c:e4:30:1b:8f:e7:02:e9:fb:5d:4f:91:6f:aa:e2:bf:
51:eb:7a:14:38:af:41:91:19:fb:02:dc:02:47:4f:1b:1e:76:
89:4c:ce:ab:d6:65:a0:f6:2f:de:25:e2:a0:1c:a9:b9:86:74:
99:e8:d6:f3:6f:6c:b2:01:10:9f:43:44:23:c9:4e:2f:00:ba:
ca:54:af:45:b8:40:d0:cd:0d:10:e9:bd:2e:58:c7:d2:bf:3b:
8b:7c:5b:b9:c5:2e:84:11:22:52:1c:bb:0d:0e:93:c8:34:d1:
5c:e0:c4:5a:02:be:68:78:e4:ef:ab:61:f1:7f:88:f9:cc:c2:
a2:8b:f6:7d:76:01:75:91:6f:42:ae:ed:45:af:10:bd:6f:df:
d5:8d:96:5d:5d:50:9f:0a:58:dd:ee:99:eb:d3:76:c7:fe:fd:
46:61:a8:5d:d4:5a:5b:e7:26:de:b7:a2:db:74:c6:77:d0:8e:
3f:94:7e:a1:3a:81:f4:0f:ba:5f:4f:f5:cb:47:86:b8:da:3d:
b3:39:f4:fd:de:b6:43:f6:f0:04:1d:94:c4:92:c6:80:47:ef:
7c:f5:0d:5f:f8:a1:c2:bc:5d:e7:49:67:c8:ed:67:38:42:87:
dd:4b:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:27 2026 by rpki-client