Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: CfOPW8ACZHyLZE0QBXCRh2vNj8o7D212Uxkhfzk++gM=
Subject key identifier: 31:6D:43:E5:86:C6:1B:00:8D:30:E7:06:2C:B0:BF:5B:7D:E2:B3:41
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 01A112CE422095A9D7979003215A86EDFA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0D23
Signing time: Tue 06 Oct 2026 20:01:09 +0000
Manifest this update: Tue 06 Oct 2026 20:01:09 +0000
Manifest next update: Wed 07 Oct 2026 20:01:09 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: +Uy0sl0Dk8a5NzAYWIgDR/nlz02GUE2mgo0JUipVKT0=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:ce:42:20:95:a9:d7:97:90:03:21:5a:86:ed:fa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Oct 6 20:01:09 2026 GMT
Not After : Oct 7 20:01:09 2026 GMT
Subject: CN=316d43e586c61b008d30e7062cb0bf5b7de2b341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:13:ab:b4:4e:5a:fc:07:1d:42:48:3a:08:
49:47:fa:64:e5:79:96:fe:a6:4c:d2:06:2e:6b:59:
7f:7b:6d:7e:7c:4a:55:62:4d:03:b7:b3:2a:dd:5a:
66:e1:71:00:54:aa:60:8b:a9:4c:b8:7f:2a:3b:c1:
cb:02:58:0c:c6:f0:ba:91:9d:7f:81:ad:79:a4:7d:
e9:18:73:34:3f:71:4b:04:5b:f8:2b:d7:53:8a:f9:
6c:79:a8:56:ae:78:72:2c:5c:aa:26:46:9d:b3:97:
ea:41:99:eb:24:73:96:d7:87:9f:28:3f:50:48:67:
65:00:95:5a:52:9a:00:de:93:07:b7:aa:56:b3:5c:
1b:a2:fe:bd:29:c8:ad:68:71:79:ac:b9:dd:f8:e0:
ae:a0:99:0a:0b:db:72:26:11:04:b2:af:0f:89:3e:
19:b9:47:79:6b:8b:1e:a0:14:58:ee:e0:34:b3:35:
2b:a4:2a:f5:1c:f6:29:bf:b4:64:26:d6:d7:db:db:
ea:44:10:7c:fa:3f:c4:04:ac:e4:18:25:b6:3d:7c:
3c:2a:e7:08:72:59:49:16:25:1a:33:9c:08:44:f9:
89:4f:1e:75:b3:6a:b6:a7:3b:5f:6d:b0:61:53:16:
50:f4:4f:52:76:52:32:ec:bd:f7:ec:eb:56:90:ed:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6D:43:E5:86:C6:1B:00:8D:30:E7:06:2C:B0:BF:5B:7D:E2:B3:41
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c1:1b:65:26:b8:f2:47:3a:7a:17:80:79:c5:18:a4:63:e5:
5c:56:c8:1b:3b:7f:d6:60:bf:02:02:2c:69:3e:31:d8:96:01:
a0:d9:80:63:a8:01:1c:3f:30:1a:9f:b1:20:74:8c:25:8b:20:
af:2f:21:e4:3e:ee:94:42:90:3f:11:50:64:25:6b:f3:fb:6b:
43:44:f3:b0:b3:25:4a:76:35:3c:d0:01:9e:8c:34:11:44:1a:
b1:94:dd:33:b0:71:47:4c:56:72:4b:1b:d7:05:97:66:e2:42:
d1:76:83:44:e8:9e:20:f5:ac:c2:8f:4a:42:4b:7b:f6:3c:be:
0a:e7:1b:00:cf:11:4a:26:2a:4f:51:61:48:6f:e5:ef:30:ac:
2d:c9:aa:31:fa:3a:5e:22:32:84:6f:93:9d:d6:05:90:18:1f:
47:ce:2c:f6:f2:2b:d0:29:40:21:cf:76:11:8c:a6:aa:87:82:
57:d9:79:e4:3e:c9:42:96:a3:35:89:9f:c2:9a:ee:a7:5f:49:
7f:d9:20:27:e5:9b:c8:3b:29:78:b1:cb:1e:5e:b2:50:46:de:
b9:43:11:3d:f6:45:40:d1:4f:57:79:a9:8f:9e:f5:15:48:d4:
0d:e8:0d:48:87:ce:18:a1:e7:05:2f:b1:24:bf:da:2b:7e:29:
54:7a:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:05:32 2026 by rpki-client