Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: Y9g1U+cUK07px8nMEQzcieaBIVlAARKXhZEcXLjbmTE=
Subject key identifier: 72:C1:08:B9:7B:53:06:2A:B1:A9:03:DF:0E:3B:2B:AD:A6:27:7C:54
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 01A000932AF33A3D1A9375A7A799227D8417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0C95
Signing time: Fri 14 Aug 2026 14:00:39 +0000
Manifest this update: Fri 14 Aug 2026 14:00:39 +0000
Manifest next update: Sat 15 Aug 2026 14:00:39 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: RZKf40o+68ny+PxOESSImlbcoMzeulVI5xd7W5BFv8U=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:2a:f3:3a:3d:1a:93:75:a7:a7:99:22:7d:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Aug 14 14:00:39 2026 GMT
Not After : Aug 15 14:00:39 2026 GMT
Subject: CN=72c108b97b53062ab1a903df0e3b2bada6277c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:95:bf:10:9a:03:d9:38:18:c7:05:a7:5a:
61:97:fe:df:e3:fd:02:bb:70:f5:ab:79:19:20:56:
b5:fc:dd:fa:7c:c2:94:42:dd:c2:20:f1:2a:0e:00:
1d:d1:48:f9:31:56:67:0f:e9:6b:87:8b:d6:72:74:
38:55:0b:66:e9:47:1f:22:e5:0a:3f:34:07:f7:aa:
2e:5d:da:fe:e3:19:53:b5:64:65:9c:d3:d7:35:30:
f6:2f:3b:9c:ce:73:71:57:f6:08:62:00:37:d4:f9:
b9:2e:90:15:06:97:4c:8e:5d:3b:95:6d:a9:0c:2e:
42:81:4d:ff:82:9e:7b:28:59:ff:b3:db:fa:78:c1:
56:0b:5c:7c:b6:8f:66:ae:a0:43:24:c9:bb:b7:cc:
c5:f7:67:3f:4d:be:90:e3:d4:30:29:08:06:83:20:
c0:1c:17:db:8e:8a:0a:4f:c2:f0:80:69:4c:08:52:
90:7f:1f:9e:4d:58:f4:2c:28:ec:15:ee:67:ca:5b:
d6:87:3c:04:62:4a:73:f1:96:34:7f:e7:4e:b6:35:
31:b4:42:7f:87:99:0c:7c:e3:a5:be:e5:14:39:de:
36:b8:94:2d:40:5c:f0:aa:31:6a:74:4b:32:77:2c:
d3:8c:ae:07:23:ee:50:b4:80:b1:bb:32:ec:31:41:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:08:B9:7B:53:06:2A:B1:A9:03:DF:0E:3B:2B:AD:A6:27:7C:54
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:60:e2:9e:ce:7c:0d:a9:72:e6:29:72:c1:39:c0:a7:d6:f8:
7e:1a:d1:2f:cb:e2:bb:92:c0:37:8c:d9:06:f3:2a:dc:b7:f5:
7e:6e:c7:4f:55:88:ca:4d:7b:dc:8e:b4:c2:e4:61:cd:ce:3e:
c4:5c:5b:71:b0:18:66:42:ef:6c:cd:6f:da:d1:5b:92:cf:21:
30:43:a1:56:1a:bd:c0:4b:ef:4e:ba:c9:ae:d3:12:c4:12:56:
73:55:72:87:57:81:97:2f:0c:f0:08:28:d0:4b:4f:32:c1:08:
3c:3f:46:04:e8:e0:85:a6:6c:85:3e:c7:d8:ce:8c:a1:1c:d9:
b8:57:b8:d5:5a:42:eb:1c:e0:59:0b:e3:f3:70:28:99:94:a6:
af:f0:b0:84:90:0c:02:8e:18:9d:11:ce:48:39:90:4c:14:ef:
94:21:dc:8c:a8:fa:b5:16:34:c4:72:b0:54:b6:b6:df:82:66:
78:d9:f2:26:69:de:88:fd:b5:cd:de:f0:76:bb:59:5b:0e:65:
f8:a9:17:dd:12:f5:96:f6:0e:6e:34:ca:55:00:17:ae:58:b9:
91:86:dc:4d:f7:b1:1d:d6:b4:a9:3e:5f:37:ff:92:77:51:d1:
53:ce:eb:ad:b4:a1:e9:5c:fd:32:c0:82:68:e8:54:c6:9a:65:
d5:b2:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:21 2026 by rpki-client