Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: huBNTRm/c1WdkWcG9klim3cpZa9sr8rTRspUeJ3vuCs=
Subject key identifier: BB:96:18:CE:37:BB:50:05:01:08:EE:46:70:AE:F7:98:BC:24:FF:D9
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 01A173269EBAA38358916EB184507E0E6739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 053B
Signing time: Sun 25 Oct 2026 13:01:13 +0000
Manifest this update: Sun 25 Oct 2026 13:01:13 +0000
Manifest next update: Mon 26 Oct 2026 13:01:13 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: p3FH3BcDXtZATZTKwh0VRtZyfU7wqwTF/fjrjP5aftg=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:9e:ba:a3:83:58:91:6e:b1:84:50:7e:0e:67:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Oct 25 13:01:13 2026 GMT
Not After : Oct 26 13:01:13 2026 GMT
Subject: CN=bb9618ce37bb50050108ee4670aef798bc24ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:fa:f8:af:a7:2b:db:df:9b:45:b9:41:b3:
78:9b:82:c6:cf:ba:6b:82:5e:5e:f7:df:76:73:5d:
9e:88:62:b4:b9:04:29:06:d7:ed:4d:73:9b:38:1f:
92:c4:0e:c9:35:5a:aa:9d:3b:01:e4:2a:5d:54:0d:
c0:40:71:af:39:68:f5:31:cb:aa:c5:a9:aa:50:67:
4d:18:9e:13:a8:55:34:49:f7:66:06:ff:22:d5:6d:
5b:ac:e2:2d:ca:b8:28:41:41:5c:cb:2d:65:b1:ac:
ef:7e:3c:21:92:79:b8:63:33:ec:97:fd:3a:44:39:
02:e4:5b:fe:5d:67:8b:95:56:a1:d6:38:47:9e:7e:
69:3d:e0:08:46:f2:39:c9:5e:7b:a4:65:75:19:49:
54:76:f8:43:4f:6c:a0:9d:5e:b7:23:da:0d:ee:90:
26:71:4d:bb:01:ff:8c:54:2b:82:4f:af:93:cc:08:
b1:e7:a7:d2:eb:73:1a:a7:85:cb:6e:06:a1:18:aa:
92:66:b1:d7:a8:84:7f:df:29:d5:34:57:19:fd:14:
35:73:23:46:89:e2:ae:eb:4e:55:d8:51:1f:72:3c:
f1:ea:c4:96:7a:16:05:b4:02:e0:20:0c:33:9a:5f:
5a:7d:3f:2a:19:93:d1:f1:23:5d:e8:10:dd:2e:1a:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:18:CE:37:BB:50:05:01:08:EE:46:70:AE:F7:98:BC:24:FF:D9
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:71:18:32:70:a3:40:54:ab:77:c4:2f:89:0f:c1:0d:e6:
64:a2:9b:60:20:2f:d9:26:bd:d5:e2:8a:4a:ed:ba:da:43:ba:
c4:ef:fe:73:0a:6a:58:cb:8f:39:b0:0b:22:10:16:c6:fb:19:
13:bf:96:ab:bf:87:fb:de:44:d8:b1:36:89:e0:40:5a:f4:88:
ce:ac:d5:4a:05:a4:52:43:3e:47:e6:33:71:c7:82:a0:ae:ce:
b0:2e:9b:bc:a1:a2:bd:79:e8:2a:fa:d3:dc:33:b1:10:2f:8a:
ae:3e:c3:0a:a8:f9:64:c9:bb:4e:3d:b1:38:35:d9:7e:30:1d:
0c:9a:af:5a:41:08:2d:e3:15:53:ea:62:41:cf:97:03:be:ca:
8c:6e:6a:2e:27:75:d8:c5:8c:c4:e5:41:e6:61:9f:ba:db:96:
44:c7:90:53:ae:dd:88:91:ef:00:eb:b0:f8:bc:eb:86:ca:6c:
fc:4a:10:2b:f7:69:f2:8b:d9:f4:4e:ce:da:0a:c3:42:1b:62:
89:67:59:ba:a4:fd:11:26:df:7c:3a:1e:a7:a4:50:92:e7:09:
26:e0:17:61:c8:77:fb:7e:28:1e:ee:7f:1c:1f:27:25:bc:7c:
db:16:6e:e1:3b:b0:61:6b:21:9f:ba:46:c7:1b:67:30:4c:fd:
87:04:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:48:57 2026 by rpki-client