Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: UmkHV+jjI2ItTNYB0tlmJeMuCgKl/tgOKF7LwWbbgfI=
Subject key identifier: 83:C5:CB:9B:A6:97:57:31:DE:69:19:9E:FA:19:25:8D:4F:3E:9E:28
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 01A001DD4B3A280DC11C21004DAC34A09454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 20:01:14 +0000
Manifest this update: Fri 14 Aug 2026 20:01:14 +0000
Manifest next update: Sat 15 Aug 2026 20:01:14 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: OhW5BDjvLFXrLLZfdVZJzik68ACOYKqvI4feUrEgmaI=)
2: LeQ3hObwwgpbJJGcKzLsHqEGLVo.roa (hash: v9/GkM02Xeyz1OUCXNYSBaAnPEbgD0Y89kH3sO1Lbco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:4b:3a:28:0d:c1:1c:21:00:4d:ac:34:a0:94:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Aug 14 20:01:14 2026 GMT
Not After : Aug 15 20:01:14 2026 GMT
Subject: CN=83c5cb9ba6975731de69199efa19258d4f3e9e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:c0:8b:a0:8c:9d:c2:c3:c6:8a:68:46:17:
f2:4a:77:d6:25:dc:f5:66:6a:c0:0d:4b:4a:6d:26:
5b:32:41:f0:a8:49:f9:35:f5:bd:a7:14:e9:44:63:
81:ad:95:a5:26:98:e5:3c:47:d9:57:01:ff:e3:c2:
22:8d:b9:73:97:6d:4f:eb:29:d1:96:fa:f1:94:39:
22:ae:87:81:03:e0:c9:7f:d0:95:09:b6:52:4c:35:
6d:8a:02:2a:e5:af:32:05:69:4f:9c:ac:6a:ec:d8:
55:f9:47:f0:14:e7:09:cd:17:f6:0f:6a:1b:b6:85:
03:00:b8:44:38:e3:85:be:6d:2e:c3:39:1d:72:74:
73:c0:83:1f:50:a1:52:95:fb:29:14:c7:62:76:5a:
79:dc:aa:8d:4b:74:47:63:37:54:21:37:8c:77:52:
fe:eb:c1:4a:c5:b6:70:37:16:f7:a9:12:d8:b1:88:
84:18:b2:0c:b1:a2:f8:3a:d5:e1:d7:f9:c4:d1:3d:
dc:ae:b6:40:cb:fd:93:66:bf:95:4a:22:7f:ff:02:
f2:02:5c:67:14:58:1b:61:06:2e:48:26:57:5e:f2:
d0:03:f1:2a:e2:43:66:8b:61:27:70:66:46:2c:29:
e0:78:c8:35:57:7b:31:f3:bc:2d:fc:f9:f0:f6:d4:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:CB:9B:A6:97:57:31:DE:69:19:9E:FA:19:25:8D:4F:3E:9E:28
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1a:68:56:9b:fe:65:52:ef:16:5d:c6:6e:e5:de:e8:e2:3e:
a7:2c:24:62:34:f6:e0:ad:3a:51:db:2a:53:55:f3:65:42:18:
d8:ee:7f:fb:d0:08:63:45:98:53:57:9a:e4:6b:f0:ea:3d:8c:
ab:9a:77:b9:3c:55:be:d1:9f:50:94:c7:f8:93:18:cc:cc:b4:
47:8a:6a:f8:3f:c2:c0:7f:67:72:22:56:7a:56:15:2c:6a:02:
fe:f4:e6:64:f1:38:f5:15:17:97:84:85:ba:f4:e6:05:fa:48:
42:13:75:ce:88:53:97:ad:0c:e1:72:58:40:66:89:04:6f:ea:
09:13:84:eb:b3:80:bb:87:f0:52:50:b2:d5:da:fe:ac:82:6f:
ae:c4:89:3d:2a:e2:89:8f:01:96:00:b5:a3:64:5c:5a:a4:d0:
aa:f2:24:37:3b:85:53:36:f6:c6:70:d2:2c:db:53:04:f7:57:
7d:30:dd:66:34:c8:96:4a:81:b5:de:51:4f:70:da:29:4e:ae:
4e:0a:f6:30:06:5d:31:74:32:53:b4:0a:1b:75:31:17:b9:70:
fb:b3:a7:e7:9e:b5:92:e1:c7:96:f5:7a:71:49:9e:17:1b:36:
48:c1:4b:cb:e2:9a:3c:2b:cb:20:53:fe:db:61:e2:57:ce:d9:
1c:96:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:54 2026 by rpki-client