Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: c4sCJ/UOV82fYw8AsEEP7SG3+Vk+gfIsiB80b3/iD/0=
Subject key identifier: 73:EF:96:43:21:75:32:A8:94:74:0F:B0:0B:C4:45:16:25:88:EB:B7
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019CC7BE99F03151C9C57815FEC7DAE41FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 02D0
Signing time: Sat 07 Mar 2026 10:01:23 +0000
Manifest this update: Sat 07 Mar 2026 10:01:23 +0000
Manifest next update: Sun 08 Mar 2026 10:01:23 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: 0A0gyCWv68AItP5sds83TQMbPi+KnrK95w9nZ2aFakE=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:99:f0:31:51:c9:c5:78:15:fe:c7:da:e4:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Mar 7 10:01:23 2026 GMT
Not After : Mar 8 10:01:23 2026 GMT
Subject: CN=73ef9643217532a894740fb00bc445162588ebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:14:e4:f0:66:89:5b:a6:3b:9d:bc:b2:cd:
b6:e0:73:81:63:c5:2e:fa:cf:af:04:17:24:71:aa:
b7:10:6f:41:36:95:f1:0a:d9:f0:10:76:eb:d2:09:
68:81:4c:86:6b:a9:6c:1e:bc:27:5a:da:b1:f1:30:
66:f0:7b:84:f5:2c:13:a4:43:dc:a4:e5:62:c8:85:
1a:46:28:20:21:c1:dc:c4:74:fd:0f:91:a9:81:b1:
04:89:bc:c5:d5:f2:8f:f0:80:fd:4a:df:4a:c5:09:
10:25:51:7f:14:60:0d:f4:39:29:14:2a:44:f3:68:
10:3d:6f:81:6b:7c:ef:fd:f9:47:9c:7b:09:1a:1b:
79:4c:ad:77:d0:d6:dd:95:ad:87:79:3e:27:0e:82:
fe:97:e6:9f:a3:dd:fd:23:f5:79:6d:bd:e7:e2:ee:
0b:29:22:58:16:b0:c1:3c:1b:d3:86:ef:29:3e:83:
94:13:82:26:34:59:17:45:a7:d3:8c:cf:c2:aa:9f:
ed:81:8d:c4:dd:51:cc:66:3c:22:9e:aa:52:ed:d8:
f1:c6:95:ba:3e:0b:7b:90:2f:35:bc:34:27:03:f4:
aa:bc:05:ac:c1:60:c5:4f:77:96:a0:19:bd:b2:b4:
64:db:72:e7:c4:ba:67:9c:99:15:b1:e0:97:42:48:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:96:43:21:75:32:A8:94:74:0F:B0:0B:C4:45:16:25:88:EB:B7
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:75:90:0e:a0:06:03:9f:74:c8:e1:e3:6d:d2:bf:bb:e4:
35:ce:ff:26:44:a1:99:27:d0:95:cf:05:69:b5:7a:5c:41:e3:
87:76:d4:cd:3a:de:65:90:d6:b7:3d:35:7a:e2:01:63:b4:01:
c2:12:2d:d9:53:97:f8:9c:41:a5:43:8f:ca:6f:f2:0f:b8:b5:
2c:a6:f1:85:79:d0:be:4e:08:0b:5a:e9:13:8a:c0:58:b9:6c:
5a:62:0f:72:0a:98:6f:ed:b8:6b:e5:95:ef:f5:a5:22:a6:77:
62:6c:0a:cf:88:de:44:2f:3f:60:cb:04:87:25:8b:25:33:df:
41:75:7c:62:7f:d6:54:94:d1:83:cd:ea:54:f4:19:1e:95:4d:
ab:9e:26:82:49:d9:59:97:f1:1b:d5:24:a7:38:ea:09:c9:5e:
64:d2:c3:14:99:b3:23:37:d5:4e:9d:a8:04:cf:d9:bb:62:e9:
4f:c2:2e:f5:ae:4e:ac:8b:83:44:2e:78:26:35:5b:b1:81:30:
e5:1d:73:e2:3d:3d:78:74:71:42:4b:3c:f5:67:30:3e:79:9f:
87:08:16:0d:a2:26:aa:69:4d:e8:c2:ac:1b:e6:6d:76:11:bb:
b3:6d:23:28:69:23:42:8e:09:e1:04:e3:c8:6c:de:59:1b:0c:
63:b6:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:20:12 2026 by rpki-client