Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: tLD+5mqbaT7bV2Ue05UKjmM39LZDRBQIMur6t7lROtg=
Subject key identifier: 53:F8:E9:9B:50:E4:C7:FB:D5:0F:4E:CF:53:40:78:A7:B4:1F:5C:28
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 019D382E7B1E5AE93A93BEADE41794D30F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: HtnwzvXYIBjpzQKS0vBj0cEdDuczDPIRTnCwPpPafEg=)
2: Sa-P59ilAaBoROu7JXxgieqHHuI.roa (hash: klYsPIaTsQM9yUBEbb86aHfmxgUEhKSfXO+ZQhF9TNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7b:1e:5a:e9:3a:93:be:ad:e4:17:94:d3:0f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=53f8e99b50e4c7fbd50f4ecf534078a7b41f5c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:7b:f9:eb:6a:95:9c:8c:39:0b:43:a2:84:
dc:e7:32:2a:48:aa:7b:af:2e:49:53:0c:a0:f4:1b:
34:0d:07:4e:d1:ad:cb:15:70:85:8d:6f:3e:c3:05:
3a:fd:e2:c4:36:df:47:03:6d:8b:e5:e8:55:94:07:
0d:33:0d:8e:16:a1:b5:5b:ec:71:97:b3:54:ba:ff:
35:15:2f:18:fd:6a:25:74:f8:4e:01:8d:dd:63:1d:
5a:5d:9c:40:b3:82:27:bb:1c:e0:09:64:de:58:7c:
5e:89:66:57:0a:10:6a:35:20:30:18:27:c6:54:b1:
ff:d3:7c:77:84:5d:aa:28:d3:10:0d:0f:af:e5:86:
8f:29:4b:5f:f0:5f:0d:e5:56:29:43:62:4f:2c:9f:
6d:6a:11:16:fa:89:da:cf:37:ab:d7:11:a6:87:43:
d5:79:4c:33:47:19:d6:8e:04:79:45:ce:5d:9c:9d:
36:13:d1:35:17:0f:60:3d:6a:2c:16:4d:6a:42:c0:
af:a7:08:5a:47:9f:4b:ab:64:0a:a2:b1:24:ea:b5:
ea:ce:be:85:a9:46:30:4b:de:e2:9d:83:1e:d4:51:
bf:37:21:82:cd:fb:23:20:ca:2c:50:99:45:1b:1a:
e7:be:16:26:ff:f5:bc:26:b7:62:01:3e:c8:bf:c1:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:E9:9B:50:E4:C7:FB:D5:0F:4E:CF:53:40:78:A7:B4:1F:5C:28
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b6:c3:87:fa:2f:84:c2:c0:2c:e2:09:97:3c:6d:57:42:1d:
c2:2a:4e:38:91:9e:47:f1:24:df:f4:c2:ba:28:67:07:1c:87:
33:91:81:e8:0f:91:03:df:04:5f:61:57:cb:c7:39:84:f1:95:
91:77:09:41:46:f9:c6:27:02:10:37:7c:40:7f:c6:98:c3:3b:
17:fd:1e:0d:8b:aa:41:a8:bc:52:75:36:bb:95:0b:2d:1a:d8:
bb:7e:83:7d:7e:07:43:82:66:52:95:e6:a0:80:16:a9:cc:c0:
ec:fc:4a:d6:8e:bc:7e:81:34:fd:be:7f:6b:2b:4b:e6:4a:c3:
70:c9:48:d5:4a:67:a4:16:86:ae:2d:a8:dd:ac:5c:b3:db:8d:
51:9d:5a:4a:ce:49:68:3f:03:fb:3d:69:9b:c1:89:83:21:d5:
51:ce:3c:bc:3f:ac:0a:4c:90:4d:48:8d:3e:c0:a7:3a:7a:c2:
4a:79:48:e7:af:99:a0:25:83:64:45:6a:a0:cc:77:51:e8:f6:
9b:4e:87:fa:82:90:a0:80:f7:b2:9c:f3:c5:53:f5:8e:e1:35:
15:2a:66:b4:93:02:78:b0:5b:7d:30:ec:4b:23:9c:3d:62:e9:
f7:15:2f:35:ff:bf:76:7d:20:fa:d4:cb:23:cd:ad:e8:3c:69:
3b:fb:24:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:32 2026 by rpki-client