Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: F73Ps8+y+/yHabieKZ40piMwODrca+Uc19UEI6BfsJw=
Subject key identifier: 08:FB:FB:09:BF:0C:68:EA:80:36:B3:F1:CC:14:7E:88:2A:3A:10:FE
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 01A13F394A2DF197DC2F76796FD1C326B63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 11:01:21 +0000
Manifest this update: Thu 15 Oct 2026 11:01:21 +0000
Manifest next update: Fri 16 Oct 2026 11:01:21 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: o23aC4S5IvL5quBBNUq98bKfim5EeiXVqTxpl1ddE2k=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:4a:2d:f1:97:dc:2f:76:79:6f:d1:c3:26:b6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Oct 15 11:01:21 2026 GMT
Not After : Oct 16 11:01:21 2026 GMT
Subject: CN=08fbfb09bf0c68ea8036b3f1cc147e882a3a10fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:6d:c7:aa:9e:b3:7f:fc:f9:3c:cf:ec:7d:
a7:f8:6f:ff:6e:50:00:38:36:1c:c4:d5:5c:81:d0:
dc:cb:ec:ad:d2:13:32:60:ca:47:8e:7e:db:01:52:
b1:69:8d:9a:af:39:c1:78:71:9a:a5:e5:2f:3e:78:
c7:28:4a:32:ac:66:a3:28:9f:7b:8a:96:d5:8a:12:
19:af:cd:da:30:e5:48:5d:34:71:5b:0d:d5:99:eb:
64:6c:ab:1e:93:25:59:b1:87:71:8b:09:5b:e7:c4:
c0:d3:bd:88:79:f0:48:61:5b:ed:22:f8:65:9c:8b:
d4:40:3e:40:7f:03:82:2e:e3:7b:ff:17:f9:c9:7c:
d0:1c:16:13:82:25:77:2e:74:22:cd:5a:38:7e:43:
d8:e9:50:40:c8:21:b3:75:1a:36:52:38:ab:d8:f5:
63:b6:55:a4:01:29:40:b1:6c:bf:65:f4:bb:6f:25:
65:5f:4b:20:17:ef:e1:5a:d3:25:f6:4c:e6:94:a3:
b9:11:44:b1:2d:a2:f4:74:93:39:6c:4e:d4:ec:34:
8b:92:38:db:45:24:56:b8:4b:85:bc:d8:fa:cc:19:
9e:45:49:f6:77:0b:84:44:fb:2c:8d:5c:cd:0e:94:
7a:7e:42:67:76:fa:0b:ad:e0:73:ed:44:06:a5:0c:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:FB:09:BF:0C:68:EA:80:36:B3:F1:CC:14:7E:88:2A:3A:10:FE
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3f:8f:d1:d6:25:66:b4:23:70:ac:f0:46:54:ac:4a:0a:eb:
94:5e:5f:31:95:8d:aa:2c:6d:7c:9d:7c:9f:3d:b2:7f:6a:97:
ad:b2:a5:e0:a9:d9:f6:e9:cc:10:b4:96:bb:41:6a:27:e0:dc:
c1:33:09:9c:63:0d:0c:ce:25:6a:54:d5:5a:f7:ff:70:b1:51:
59:32:53:87:0b:33:7c:74:1f:f5:c6:c7:de:79:84:84:b6:60:
7b:32:c8:1d:e5:ed:d4:28:83:f1:7d:08:17:18:bc:11:56:9c:
eb:d1:c3:bb:7e:a8:26:bb:3c:1e:f2:aa:be:28:25:73:42:0b:
52:c1:32:ab:cd:1a:db:21:08:40:a0:8f:e8:89:4c:0a:93:86:
3e:99:13:3d:af:d2:de:dd:fb:9c:a9:92:09:2e:47:68:fe:33:
98:1f:3d:b0:6e:16:45:50:f3:f5:db:50:8e:06:7c:48:3e:c1:
c6:5c:b5:29:2a:94:ec:9a:1a:0d:f2:ab:eb:16:1f:82:b5:ca:
23:bf:16:1a:6c:6a:e2:45:0b:3e:3e:3b:33:2a:6e:fe:27:70:
3d:89:ec:f5:56:56:d9:ab:26:17:b9:60:c7:ef:65:44:34:9b:
68:97:df:b9:df:86:e5:c5:67:e1:d4:81:06:7c:59:60:16:1d:
96:e0:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:19 2026 by rpki-client