Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: E2Y2tvHZujKbzOr3ld17UwrsvsNn2nwqP2idmzLRAp8=
Subject key identifier: CE:19:83:04:CE:2C:A9:9C:B7:EC:12:E9:24:13:B2:B3:82:C1:05:DF
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019D37F7272A0C13351972F2ABBAF5AC3091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0B24
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: A39h27acv4I9emca2sISBP0+4eyaE2QMnS9P9h7zhA0=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:27:2a:0c:13:35:19:72:f2:ab:ba:f5:ac:30:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=ce198304ce2ca99cb7ec12e92413b2b382c105df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:ba:0b:e5:99:2c:e3:e6:c4:1e:a8:99:44:
7c:44:d4:b9:92:7d:40:66:aa:67:95:e0:06:76:12:
c1:2c:5e:d0:dd:cd:2a:df:7d:29:43:d7:9d:6d:f0:
f8:ba:c0:f2:5d:1f:e7:4c:20:b3:a2:06:23:cf:12:
50:e6:e9:bf:ab:f4:35:2d:fd:ab:14:31:0c:44:d5:
2c:e9:ef:81:7b:25:24:c6:d0:6c:5e:b9:f4:15:f6:
69:76:9e:8e:07:bd:61:62:21:05:64:51:0e:1c:6b:
dc:87:6e:1a:a6:f5:25:16:10:d4:2e:f2:6c:e9:14:
49:dc:7f:92:17:77:30:ae:20:70:6f:b9:80:be:16:
5a:e6:ee:da:47:36:a8:59:53:4d:15:4c:70:8c:1d:
79:bb:dc:8f:d6:61:89:ef:1a:d0:d5:14:5b:c5:b3:
67:5f:ed:b6:b4:4e:b6:15:ed:23:48:06:84:a8:ed:
ea:7c:dd:e4:0f:be:13:e3:91:56:8d:a4:ea:5d:b5:
59:46:e2:8b:db:6e:da:95:0f:85:a3:21:8e:5d:66:
e6:4d:66:65:31:45:67:45:f6:60:db:7f:f7:cb:f6:
be:e2:cd:58:09:3f:64:54:60:d7:5d:42:d3:89:08:
1f:59:9d:a2:eb:58:e6:39:df:8e:53:3d:4d:d0:88:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:19:83:04:CE:2C:A9:9C:B7:EC:12:E9:24:13:B2:B3:82:C1:05:DF
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:42:c3:21:45:67:91:a4:d4:66:35:98:9d:3a:3b:0b:e9:db:
ce:3b:8a:c5:f2:cb:0a:fe:17:9a:c4:ea:77:31:74:37:4b:2e:
ec:1d:94:44:0a:2c:98:3c:ab:9e:27:f1:d7:5d:29:7e:42:6b:
8f:a9:0e:c2:fa:4c:c7:7e:a7:41:ee:46:5a:1c:35:ab:65:bd:
15:64:5a:20:aa:b3:ad:58:b7:53:d6:62:d5:83:0e:9b:a0:98:
47:1b:6a:ce:8e:e2:ab:ab:86:65:49:70:7b:63:63:8b:02:cd:
8c:32:e2:20:7b:79:19:20:a2:43:29:28:66:17:a3:2b:5b:50:
6e:38:d7:09:2c:1d:b1:8d:71:b9:d9:47:e1:a0:c9:73:b4:e9:
93:29:93:0a:47:48:94:1f:2f:0f:85:21:87:7c:d2:19:e9:14:
82:ad:07:9c:61:2b:a5:7f:d2:35:da:5d:79:09:2a:9b:e8:86:
67:2c:2d:f3:dc:60:2e:21:bb:ea:98:4c:81:b3:a8:f0:49:d1:
d3:7e:1b:fb:1d:a6:88:51:e3:3d:35:15:47:79:f8:f4:29:25:
71:ea:8f:d6:0a:58:87:c5:64:8e:76:b2:1b:76:fb:b3:09:c0:
a0:45:7f:13:10:1e:67:5d:9d:9c:b0:ba:c1:0f:d9:31:09:b3:
75:14:e8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:06 2026 by rpki-client