Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: WCU6YxJNswBAv3UIcKFOvgzhtjzffWL/jp1slS0jkQ4=
Subject key identifier: 72:F6:87:2F:F6:CB:CD:90:C2:4E:83:40:7B:DF:17:DB:C8:B2:A9:A6
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 019DDD68534A52A123C2880D5507B7DAA554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 06B3
Signing time: Thu 30 Apr 2026 08:01:34 +0000
Manifest this update: Thu 30 Apr 2026 08:01:34 +0000
Manifest next update: Fri 01 May 2026 08:01:34 +0000
Files and hashes: 1: 6ABbzKC7xD3f15f1nL7ehPPdv8g.roa (hash: vm92m0MvDsKxhJur0/wyRBU4n09f3ypTfzNsc2DUitY=)
2: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: iBEX+1Jd1fFvhaKqIuZwol6MWD64JU17GpwqkXJdYSY=)
3: uWma75PdV6AVC83aCG-d5GXsBTA.roa (hash: l+sIuRGwU1mgUSZbtQoGfvEHgDWDmkYLosWZi/xYnJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:53:4a:52:a1:23:c2:88:0d:55:07:b7:da:a5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Apr 30 08:01:34 2026 GMT
Not After : May 1 08:01:34 2026 GMT
Subject: CN=72f6872ff6cbcd90c24e83407bdf17dbc8b2a9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:f8:95:92:b7:00:48:a3:93:67:8c:c5:17:
b1:bc:b0:d6:8f:ab:b7:7f:96:aa:e8:70:14:ce:d0:
4c:76:ce:95:67:39:0c:53:7b:6e:91:c9:e9:ad:a6:
28:0b:12:a1:0e:eb:e2:a4:68:b4:78:fe:6e:40:f2:
fa:5d:83:3b:16:09:c3:39:1e:31:db:cc:f3:33:79:
e0:d2:39:9f:a7:bd:3a:53:2f:ed:56:3f:cf:82:e6:
2e:68:be:46:5a:5e:f7:f1:ba:dc:31:ad:02:71:03:
42:1b:54:65:49:da:04:97:84:26:65:43:24:54:f6:
fb:34:d8:b5:ea:fb:36:01:3a:02:68:d0:0a:f3:0c:
83:9b:8e:2c:08:4c:21:51:79:a0:6c:e3:6a:51:7a:
9d:d5:96:f6:6e:40:ac:4a:8e:0b:f1:cd:e2:9b:3b:
09:41:fe:c6:4a:38:78:91:2d:f1:5a:5c:2c:f1:2b:
12:8b:16:19:35:ef:03:e2:48:f4:6d:6b:69:5d:d5:
a3:e6:dc:8a:77:fd:8a:62:32:0b:bf:c7:9f:ba:13:
27:ea:18:13:1d:ab:57:a9:fd:45:d1:5c:c8:0c:dc:
08:36:39:1b:57:c4:fc:e2:69:7f:ca:80:8e:9f:0b:
cf:2a:05:92:7d:0e:5d:ef:bd:31:a0:0f:6c:5c:15:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:87:2F:F6:CB:CD:90:C2:4E:83:40:7B:DF:17:DB:C8:B2:A9:A6
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c5:fc:28:09:2c:be:ae:d2:9b:2f:a4:b9:17:27:c0:9a:1a:
7c:10:97:47:99:2c:df:de:f7:04:56:8a:46:d4:08:e2:88:e1:
4a:d3:c6:77:33:a9:f9:fd:07:1c:9b:cf:98:b2:f5:25:4e:01:
4e:7d:b6:0b:aa:d5:f6:96:6a:6b:a6:62:14:6e:1a:89:ca:95:
5b:a3:ae:f7:98:28:d2:f2:b5:f4:34:b4:f5:e7:f0:56:e3:2a:
79:65:d7:cf:e0:81:4a:ba:38:78:0d:c3:ff:fc:c5:bb:91:23:
2c:7a:c4:86:f8:b3:e2:01:7b:6b:36:17:94:54:bc:e8:40:4b:
82:c8:2e:12:9f:91:59:82:a6:77:c3:3e:e5:8c:e8:52:70:78:
d2:40:35:4d:39:d8:7f:a8:04:9a:e7:54:45:cd:54:ed:0c:87:
a7:44:43:f0:07:84:54:63:01:b8:bf:f0:86:63:22:82:36:57:
55:85:45:41:eb:b6:a1:8c:95:7c:75:96:69:71:3d:cf:79:11:
c9:ad:5b:0f:c2:04:5a:55:35:38:d1:da:8a:e8:71:af:90:bb:
29:41:d7:98:e7:c0:44:99:b2:a8:1c:c8:c3:0e:8c:05:7c:05:
40:bd:80:f0:f2:e4:55:2b:8c:42:5f:1c:8a:e2:fc:64:c0:37:
76:53:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:00:49 2026 by rpki-client