Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: yMsxndV2xktD9ZK6Qh+QB+vVER28NE5hPYINci+buYY=
Subject key identifier: 33:1A:8C:50:07:BE:02:D1:EA:1A:4B:01:6C:72:A2:2D:AD:B1:BD:E5
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019DAF7C694A7B4B5E0D5A02462E997483BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 0348
Signing time: Tue 21 Apr 2026 10:00:59 +0000
Manifest this update: Tue 21 Apr 2026 10:00:59 +0000
Manifest next update: Wed 22 Apr 2026 10:00:59 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: 80i993opIRaWHbkgLivF/mXFslPXpO663GWx49UJj1E=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:7c:69:4a:7b:4b:5e:0d:5a:02:46:2e:99:74:83:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Apr 21 10:00:59 2026 GMT
Not After : Apr 22 10:00:59 2026 GMT
Subject: CN=331a8c5007be02d1ea1a4b016c72a22dadb1bde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:72:f1:97:82:e1:d1:02:12:ad:c3:e6:29:
61:62:59:36:d9:7c:10:5b:2e:20:aa:cd:ea:20:13:
db:08:b1:37:27:14:eb:6a:9b:ac:14:00:1c:88:2a:
c9:3d:0f:b9:20:b1:71:71:2b:f9:aa:3e:e4:dc:e0:
e6:04:31:5a:24:bc:61:34:ec:7d:ee:2a:2f:54:3c:
f4:58:44:8b:63:0c:23:7d:29:ba:7e:7e:88:88:32:
7a:2c:ee:eb:43:15:4b:70:51:d0:b1:0d:18:17:7e:
ec:44:7b:22:5d:85:21:99:98:44:fa:85:1a:da:8e:
7d:15:4a:67:30:d7:e1:2f:22:ff:01:5f:43:76:7c:
56:c9:e0:3b:96:cd:a4:17:3b:5e:b9:72:88:51:97:
94:7c:50:4f:68:58:32:12:0f:59:a2:23:46:72:29:
b6:14:71:13:be:94:19:da:a7:97:ce:5f:7d:18:b0:
2f:f0:09:d1:11:7f:0f:3b:0a:d0:93:12:4e:34:72:
2f:bc:fa:d6:80:6d:38:de:1c:5c:98:44:4a:f7:57:
66:db:49:a4:98:32:5b:1a:60:c8:13:c0:d4:bb:a0:
b8:a0:63:ba:e0:41:22:74:07:b8:5e:55:f6:d2:5a:
5b:5d:ac:9d:72:f8:d5:97:60:22:0c:d3:a6:c5:da:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:8C:50:07:BE:02:D1:EA:1A:4B:01:6C:72:A2:2D:AD:B1:BD:E5
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:39:47:8c:84:b8:7b:1f:e0:71:8e:08:39:cd:41:b2:6f:23:
88:98:ec:5f:fa:3c:e8:d3:c6:ee:43:51:71:de:67:dc:9b:02:
fd:ee:d3:f1:3c:c7:33:1e:80:f7:9f:1f:3a:3d:a4:31:8b:87:
16:11:39:d5:c5:8d:7e:4f:8a:a0:58:63:26:de:8e:90:f2:9c:
2c:af:dd:a4:de:d9:3a:ea:96:6c:10:f4:01:82:5d:48:12:4a:
22:31:a1:97:74:76:b1:b0:83:97:11:b2:7f:06:88:82:66:9a:
4b:18:a2:ce:84:cc:ec:6a:53:80:be:19:17:12:66:46:b7:9f:
3d:02:42:45:92:c9:81:d5:40:40:c8:2c:30:e1:12:52:e1:f0:
e0:95:b3:60:09:0a:2c:d0:20:f0:63:5a:a7:dd:bf:ba:37:0c:
3f:60:19:57:5d:86:43:e0:bb:1d:a3:49:01:ff:e7:c3:09:82:
33:cf:22:0c:b3:93:ce:22:5d:5e:53:66:04:45:6b:de:e7:01:
64:e5:e1:e1:91:e3:69:aa:ad:97:90:66:84:bb:5a:cb:1c:e8:
c7:77:f7:64:25:1f:d4:00:46:e7:1f:ad:2d:3f:82:23:eb:eb:
25:b3:21:7e:02:ce:59:16:bf:e1:bf:32:2a:19:34:ac:29:f6:
c0:02:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:10:57 2026 by rpki-client