Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: qvWFwfZcXV+3b0b8k3TgVeTcrXkcr7P45fI1d9qu4r8=
Subject key identifier: 0C:85:0D:28:EA:47:95:21:07:A0:FD:25:D4:1B:92:5C:BC:33:4C:8C
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019E31176E0D98B46DD984B320C5BDF96A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 14:01:19 +0000
Manifest this update: Sat 16 May 2026 14:01:19 +0000
Manifest next update: Sun 17 May 2026 14:01:19 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: iaQ6oQBvzdnlRDtDtnVoEKHJ3IEBbWISReDyyBxOydM=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:6e:0d:98:b4:6d:d9:84:b3:20:c5:bd:f9:6a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: May 16 14:01:19 2026 GMT
Not After : May 17 14:01:19 2026 GMT
Subject: CN=0c850d28ea47952107a0fd25d41b925cbc334c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:92:02:02:60:79:42:77:3a:76:06:64:8a:
e2:a8:cb:24:97:79:34:52:59:b5:53:e0:4c:ab:19:
87:b4:4e:74:b4:2f:6f:50:a0:c7:84:ae:ac:d0:4f:
09:82:2b:cf:e1:b1:61:df:47:11:69:b9:18:79:3e:
b3:f7:5c:da:a4:17:e0:a7:19:1c:eb:01:9f:95:04:
88:59:56:1a:a9:32:fe:15:ef:29:50:2f:e6:9b:22:
fe:2d:dd:2c:32:d6:bb:4b:19:ac:b3:c5:d7:3a:3c:
98:7a:f1:ac:64:18:ae:01:50:a5:64:31:ab:64:f5:
5d:06:13:f1:a9:a3:0d:9a:53:2d:de:bb:bc:f3:37:
30:2a:71:d9:97:b7:2e:f7:29:1b:8a:69:60:89:b2:
5b:99:24:8a:42:79:54:1a:e7:6c:a9:d7:4b:03:cf:
03:18:b0:82:69:a4:3e:fb:76:02:0b:14:e0:90:81:
79:29:f0:65:9c:91:76:86:e4:c6:ec:31:f3:c5:ff:
42:8d:03:5d:49:89:7d:71:90:bd:31:67:03:0b:d2:
6a:42:1d:fa:08:01:a0:7b:e0:f9:f4:e8:75:dd:b1:
1c:81:3a:bd:b6:e1:a5:bb:ca:69:88:9e:ad:eb:72:
0d:3d:34:da:47:80:a6:7c:d2:71:96:79:f4:f3:59:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:0D:28:EA:47:95:21:07:A0:FD:25:D4:1B:92:5C:BC:33:4C:8C
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e3:fd:3d:b2:c5:c5:e9:99:b3:5f:7d:a0:51:61:26:21:83:
f0:13:f0:7e:21:99:03:0e:ba:2a:ac:4d:bd:3a:c1:93:81:12:
c2:80:4b:1e:9c:4d:98:2d:1a:21:a1:a5:c6:0c:66:4a:35:f3:
ec:5e:b7:e8:99:7b:36:00:1c:37:38:ce:3a:6d:81:70:11:7f:
8a:f3:63:d8:12:78:b6:c3:06:cf:6f:13:df:be:05:3b:1d:f4:
74:66:92:db:27:19:b2:03:30:0c:1c:89:0b:17:ba:6e:01:27:
7c:d7:06:3b:67:8b:4d:95:4d:53:9c:63:d0:c9:c8:88:54:f7:
19:1f:50:d5:34:0c:41:c7:e1:eb:72:8a:55:ed:3a:fe:90:17:
81:33:e1:2c:28:a5:63:07:ef:5a:48:2a:57:bb:f9:2d:84:1c:
44:c6:04:aa:a1:d9:c4:d6:11:c1:73:3c:9b:4a:3a:dc:5a:31:
f6:3a:6d:ba:28:57:eb:69:ec:4d:6c:7e:fd:ec:a5:a7:e2:f9:
0f:03:40:f2:55:dc:dc:76:57:ab:ce:25:be:3e:c2:76:9e:83:
e3:cc:9d:1b:b5:8f:3a:8d:da:3a:fa:3c:83:1a:b0:c4:ad:86:
9b:35:7d:9d:46:16:c7:2b:21:29:d5:b0:7d:29:5c:15:cb:a3:
63:e0:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:41 2026 by rpki-client