Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: JjLmoWCljddVuB6p1VIEkQMZks5VLq6bduiiz2G2HJ4=
Subject key identifier: B0:73:97:9E:4A:3F:04:23:1A:AF:CC:C6:FA:46:4E:03:8C:9D:57:D4
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 01A18F42A1AE2C9E802CE58C643726A62F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 1AE2
Signing time: Sat 31 Oct 2026 00:01:10 +0000
Manifest this update: Sat 31 Oct 2026 00:01:10 +0000
Manifest next update: Sun 01 Nov 2026 00:01:10 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: lXVxB0dEbUXDMOm3ZWlByeesGZbA4omj/yKvH7wlTgU=)
2: Y-KOAHOLABX3sY4gJm3A6nvrqgk.roa (hash: jTbxGKNlR+XX6Qac6sKrcuIPfzi6QGetIT0dTM9/L6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:a1:ae:2c:9e:80:2c:e5:8c:64:37:26:a6:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Oct 31 00:01:10 2026 GMT
Not After : Nov 1 00:01:10 2026 GMT
Subject: CN=b073979e4a3f04231aafccc6fa464e038c9d57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:9a:62:22:05:9e:13:30:77:02:5f:ec:99:
34:4d:d8:6a:9c:e5:17:88:af:c0:fe:08:18:03:3e:
45:2e:fd:ae:0e:ce:13:28:9d:52:0d:18:02:c8:0e:
34:0a:a7:eb:3a:74:97:5e:27:5a:e3:53:31:6d:31:
e3:03:ee:07:9a:ac:cf:72:4c:11:e5:b1:a9:d5:ff:
15:35:2c:73:c6:f4:b5:0f:1d:96:ff:44:e2:aa:b9:
16:51:f5:30:21:fd:db:5d:8e:04:76:46:f3:8e:c5:
b9:22:70:d0:62:56:fc:0a:35:fb:a5:ff:46:83:26:
4c:e5:47:79:22:21:93:a2:cd:94:06:d7:ef:88:89:
13:d9:ec:c6:c3:80:5c:6a:05:ac:30:06:f8:7c:a0:
df:9b:78:6c:14:d0:95:a7:da:8f:c9:ff:1b:78:51:
32:c9:11:b1:4e:7d:9c:b7:f2:98:7e:31:2a:2c:56:
59:d1:77:7e:fa:1a:9b:58:33:15:36:be:4b:e4:b2:
7c:e1:aa:2b:31:37:b3:7f:7a:73:62:e5:0c:c7:02:
a6:23:5c:3b:a6:af:7a:36:af:27:4c:57:e9:29:e7:
aa:ff:ff:11:70:29:cb:0e:36:c2:b2:2f:67:2b:b5:
d0:ad:16:06:22:84:d1:92:19:1a:df:f7:e7:27:5e:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:97:9E:4A:3F:04:23:1A:AF:CC:C6:FA:46:4E:03:8C:9D:57:D4
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:6a:cc:05:79:78:e9:11:5a:39:81:40:d8:1e:c5:17:e5:
cc:ea:95:1f:6a:e8:90:fb:83:e6:e9:1e:3a:f8:7c:18:54:f4:
3c:0f:f3:67:56:35:2b:7d:43:05:d7:9a:e3:03:d6:ce:0b:e7:
9f:17:2b:bb:93:9f:e0:c6:ff:a1:70:9b:fb:19:db:64:3f:e5:
ff:a9:68:7c:40:93:b9:68:7a:21:15:ea:72:ad:bd:d9:e0:ad:
6b:99:e4:d5:1f:1f:37:fb:37:81:d1:25:be:2a:35:a5:f9:dd:
e8:7a:b3:ee:b0:0a:2c:e1:5d:35:9b:2c:21:c3:1e:05:26:4b:
53:48:f5:b2:8e:f4:58:c4:cc:86:f3:b1:85:7d:af:f0:59:54:
fa:25:a4:60:46:d4:4d:67:76:7d:93:d8:53:2d:88:41:96:13:
39:f8:a8:21:ef:25:c6:ab:75:91:83:33:b1:0d:3a:87:3f:0c:
0f:7b:a4:5d:6c:37:ab:ec:81:c4:30:c0:44:13:31:ea:c5:d1:
b2:c9:4d:f0:e2:98:80:db:25:05:76:b8:c7:0d:a5:e4:d4:50:
9d:c7:e9:59:d1:f2:2a:ea:57:40:d0:e6:74:32:fd:ff:2f:f9:
41:04:ac:8d:21:bd:27:4a:fb:48:de:52:30:4f:47:53:07:0e:
12:62:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 07:45:03 2026 by rpki-client