Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: nVAblOh1HyGkv9zbpiV4cjboXtQ1CiSymP8And+U1Fc=
Subject key identifier: 99:62:BC:B4:12:DD:31:28:71:FD:38:60:49:22:D1:7D:B7:38:6C:EC
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019E2F296D1BFC411633420B45DBC0C3EA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0BA4
Signing time: Sat 16 May 2026 05:01:44 +0000
Manifest this update: Sat 16 May 2026 05:01:44 +0000
Manifest next update: Sun 17 May 2026 05:01:44 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: Uhcy0vXxzASPibSsbypl6dn4FaSquUMPW4mMCtZ0kUI=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:29:6d:1b:fc:41:16:33:42:0b:45:db:c0:c3:ea:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: May 16 05:01:44 2026 GMT
Not After : May 17 05:01:44 2026 GMT
Subject: CN=9962bcb412dd312871fd38604922d17db7386cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:0e:bf:b3:6e:74:d0:6b:9d:68:c6:ca:0f:
93:24:15:b2:c0:47:25:a4:d2:d5:5e:df:a9:7b:b2:
e8:51:3a:66:97:7b:8a:17:d5:e8:92:27:d2:76:ad:
05:59:77:70:a9:b6:37:5c:4e:de:09:ac:db:ec:46:
14:d2:fa:d5:1a:c1:25:4f:af:fd:b0:57:51:d0:13:
89:75:81:53:ed:98:73:e5:d9:10:68:f9:61:18:fa:
24:55:01:d5:53:a0:4a:52:44:40:f6:c9:30:c0:e8:
58:a3:24:34:f7:6f:ce:bf:51:e9:88:c1:67:d9:78:
dc:d2:de:cc:42:7e:ad:36:ab:e3:73:9b:ad:fa:b7:
39:da:ca:5f:d5:a9:6e:38:47:d6:78:05:07:3f:aa:
ca:1e:4c:87:c8:85:d3:2e:81:2d:3c:f8:70:ce:28:
ce:2c:64:a5:ed:a4:51:30:64:b1:45:d9:66:0a:b5:
73:29:3b:86:8c:06:4e:cd:01:fc:46:2a:2c:72:dd:
15:24:75:03:6f:30:d4:a6:6d:34:8e:24:d2:d2:a4:
91:d5:0b:89:81:e9:36:16:d2:52:f9:be:50:ea:bf:
d1:6b:fb:25:c3:b3:a8:d2:0c:75:ec:50:b0:14:be:
55:45:f4:64:9d:c7:4e:0e:ca:fb:58:12:11:72:b8:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:BC:B4:12:DD:31:28:71:FD:38:60:49:22:D1:7D:B7:38:6C:EC
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a7:f4:f5:ff:5f:81:e2:0a:f1:8f:3a:f1:11:ac:48:81:59:
8b:b8:3e:9b:b3:00:0c:11:fa:8c:21:5b:00:e0:d7:1a:5c:0b:
fe:e2:f9:3a:74:8b:c6:29:10:d6:71:27:c6:dd:31:0f:c8:f1:
17:e1:c4:6c:ec:6c:35:c0:a7:b0:39:06:76:ba:2d:3c:99:e8:
43:de:14:24:1b:38:b1:61:45:3a:bf:d0:e0:00:70:f2:a1:46:
18:92:67:46:04:79:d0:4f:88:e3:46:ae:a0:f3:2e:a7:80:05:
38:ce:1e:37:48:be:18:17:69:be:32:e6:ed:74:41:3c:40:d3:
6a:de:46:2c:15:87:4d:f8:47:32:2b:b8:08:67:eb:a1:2b:57:
9f:75:42:f7:e1:c4:de:3a:fd:32:23:14:a9:22:0f:9a:fa:f7:
e1:8e:af:61:6e:f3:a7:49:65:21:be:a2:a1:29:2c:b4:84:d2:
7a:21:3e:c7:6e:c1:f5:f7:2f:71:e3:c7:80:5d:c1:50:c0:09:
f0:ef:8d:e6:bd:26:07:1a:87:51:ba:5b:c4:61:05:63:9a:e0:
5a:01:ca:ec:42:21:d6:25:b7:e8:00:4d:19:90:7f:8b:8c:31:
71:8f:09:c3:a1:23:0d:61:f3:45:b0:7b:1d:b5:f0:b1:cd:df:
57:97:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:42 2026 by rpki-client