Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: tVK0/YOxtCgr9wiMdIeQidIB5vAcLiD/Tu2GVps2l9o=
Subject key identifier: 3E:57:2D:C7:AD:E8:FD:D2:3B:1F:E1:64:A1:BA:15:F2:B3:BA:A5:CD
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 01A06E716446C4C43A775E5FB7CFAEC3D17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 04B4
Signing time: Fri 04 Sep 2026 22:01:59 +0000
Manifest this update: Fri 04 Sep 2026 22:01:59 +0000
Manifest next update: Sat 05 Sep 2026 22:01:59 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: moUlppQR4i3SM0/bXmTQNpyi2F47IKADGaJEGnXx+WY=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:64:46:c4:c4:3a:77:5e:5f:b7:cf:ae:c3:d1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Sep 4 22:01:59 2026 GMT
Not After : Sep 5 22:01:59 2026 GMT
Subject: CN=3e572dc7ade8fdd23b1fe164a1ba15f2b3baa5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:67:c4:49:bd:a4:05:ef:5a:5b:41:02:f4:
e1:fe:ed:54:66:25:f9:bc:52:7e:a6:42:74:96:52:
23:5e:66:96:7f:c3:ee:6e:8c:a5:dc:6a:53:89:72:
2e:5b:43:17:59:d6:87:24:b0:6f:d9:c4:0e:f9:31:
4b:58:b6:51:5a:de:8f:31:b6:09:99:74:4a:34:2e:
55:20:8b:4a:e5:3f:1a:76:3a:80:61:03:8f:18:19:
14:cc:f1:fa:fd:f3:e0:68:65:5c:ad:24:89:3a:8c:
c2:24:03:e4:a7:4e:0c:68:bf:8d:bf:1e:2c:11:d4:
dd:18:f7:07:1e:a2:41:96:86:80:08:d8:d3:48:d1:
50:d7:52:c2:7d:20:7d:72:77:9e:f0:db:55:b3:08:
72:61:59:7c:8c:b3:bf:35:ee:49:f1:b1:85:d5:c5:
64:1c:1a:a7:b3:f4:2d:f0:e5:51:d6:a0:ac:d5:32:
2a:90:6a:45:35:63:75:00:9c:f6:10:9d:01:7f:09:
8f:48:ab:6a:71:9b:b1:a3:54:4e:82:c0:42:12:18:
13:13:5f:da:51:f8:dc:82:e4:d6:71:12:a2:c8:6c:
5d:ef:d4:60:8c:9d:17:60:79:54:f9:72:82:d6:8a:
ee:ea:64:a0:92:28:3f:0f:9c:d9:a6:33:61:da:3f:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:2D:C7:AD:E8:FD:D2:3B:1F:E1:64:A1:BA:15:F2:B3:BA:A5:CD
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:96:0f:f1:6e:06:d9:2b:de:7a:bd:49:15:6f:84:32:24:8a:
27:4f:3d:d9:9e:02:f9:8e:64:c1:bc:92:70:93:82:05:40:19:
72:c1:5a:cb:f9:57:bd:fb:4e:c6:c9:03:cf:98:1f:7a:97:51:
67:14:f3:30:7c:95:7d:b8:4f:eb:d1:e9:02:df:e7:1a:ae:23:
8b:46:55:10:b0:67:31:24:05:8f:eb:24:84:78:56:c9:b1:1a:
84:0a:25:bc:cf:3b:ca:31:e1:85:cb:bd:27:0d:18:a6:01:33:
59:99:a2:7d:0c:a2:d3:7b:ab:65:36:f8:62:5c:23:d7:36:67:
9b:0d:96:7f:9e:ab:1f:f5:65:8f:7f:ca:24:69:de:2e:63:6f:
38:6a:a5:7f:5f:b9:94:fb:8d:c8:24:86:17:5e:13:29:c9:84:
79:e9:43:a0:fe:ea:e5:a6:09:ee:64:ee:03:45:a8:e0:f2:19:
2c:e6:54:0b:1f:44:a5:c9:6b:5e:0a:2f:14:84:47:b8:0d:1d:
72:93:76:9c:11:2e:0f:4e:fd:80:3d:78:55:8d:e5:dd:83:09:
42:be:68:ca:80:39:4d:8a:c1:c5:83:cc:b5:52:26:a6:15:1b:
9f:07:60:c0:b8:57:ec:0a:00:49:9c:a7:4e:33:59:13:d3:b5:
48:4f:6e:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucWRGxMQ6d15ft8+uw9F7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTBlMzc2OTQ0ZDMwMjk0ZGVhNDFmMjFmYjdmMWUxY2Ez
NjhhOTMwHhcNMjYwOTA0MjIwMTU5WhcNMjYwOTA1MjIwMTU5WjAzMTEwLwYDVQQD
EygzZTU3MmRjN2FkZThmZGQyM2IxZmUxNjRhMWJhMTVmMmIzYmFhNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDhnxEm9pAXvWltBAvTh/u1UZiX5
vFJ+pkJ0llIjXmaWf8Puboyl3GpTiXIuW0MXWdaHJLBv2cQO+TFLWLZRWt6PMbYJ
mXRKNC5VIItK5T8adjqAYQOPGBkUzPH6/fPgaGVcrSSJOozCJAPkp04MaL+Nvx4s
EdTdGPcHHqJBloaACNjTSNFQ11LCfSB9cnee8NtVswhyYVl8jLO/Ne5J8bGF1cVk
HBqns/Qt8OVR1qCs1TIqkGpFNWN1AJz2EJ0BfwmPSKtqcZuxo1ROgsBCEhgTE1/a
UfjcguTWcRKiyGxd79RgjJ0XYHlU+XKC1oru6mSgkig/D5zZpjNh2j9VNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5XLcet6P3SOx/hZKG6FfKzuqXNMB8GA1UdIwQY
MBaAFAuQ43aUTTApTepB8h+38eHKNoqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAt
MjBhMzIxOGI5OGNkLzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAtMjBhMzIxOGI5OGNk
LzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJYP8W4G
2Sveer1JFW+EMiSKJ0892Z4C+Y5kwbyScJOCBUAZcsFay/lXvftOxskDz5gfepdR
ZxTzMHyVfbhP69HpAt/nGq4ji0ZVELBnMSQFj+skhHhWybEahAolvM87yjHhhcu9
Jw0YpgEzWZmifQyi03urZTb4Ylwj1zZnmw2Wf56rH/Vlj3/KJGneLmNvOGqlf1+5
lPuNyCSGF14TKcmEeelDoP7q5aYJ7mTuA0Wo4PIZLOZUCx9EpclrXgovFIRHuA0d
cpN2nBEuD079gD14VY3l3YMJQr5oyoA5TYrBxYPMtVImphUbnwdgwLhX7AoASZyn
TjNZE9O1SE9u5Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:34:49 2026 by rpki-client