Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: gASO+8fedkN+5LKa+qeLVskq/e2/sngdYywtXQ+xOz4=
Subject key identifier: A5:F3:20:56:D9:00:8F:A5:91:AB:CB:D0:8A:E3:28:22:A0:95:29:98
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019EBB0F779363C0BBF8F7F3867B3E92C330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 196B
Signing time: Fri 12 Jun 2026 09:00:13 +0000
Manifest this update: Fri 12 Jun 2026 09:00:13 +0000
Manifest next update: Sat 13 Jun 2026 09:00:13 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: X+1W1VdI5j4qBetNDtMSqP12A8QZPMSxgBr9GgUp+BE=)
2: Y-KOAHOLABX3sY4gJm3A6nvrqgk.roa (hash: jTbxGKNlR+XX6Qac6sKrcuIPfzi6QGetIT0dTM9/L6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0f:77:93:63:c0:bb:f8:f7:f3:86:7b:3e:92:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jun 12 09:00:13 2026 GMT
Not After : Jun 13 09:00:13 2026 GMT
Subject: CN=a5f32056d9008fa591abcbd08ae32822a0952998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:e5:47:bd:1d:bc:0c:32:47:c5:31:24:ac:
e7:a9:92:01:4e:7c:0e:f5:96:28:d0:37:57:1f:3f:
4f:c7:3e:e2:fe:9c:da:01:a5:f0:77:2b:9a:3e:e9:
71:7d:3f:ad:3e:92:2a:52:90:60:80:53:83:c3:90:
c3:bb:9b:7e:6f:25:25:10:80:e5:88:4c:d3:92:95:
ac:50:aa:95:ef:bf:e8:46:f5:21:5d:30:1d:f6:f4:
3a:d1:f2:21:ce:f8:74:18:05:c1:fc:fd:c4:89:44:
38:6c:78:63:f6:42:65:99:b0:e0:7e:ad:eb:a6:7e:
67:96:26:1d:6d:00:ea:4e:b4:f3:78:78:42:c6:8a:
84:6c:23:06:2b:24:3b:33:3d:a0:29:a4:f8:ea:4d:
1f:90:11:8a:86:e4:b0:7c:06:7f:70:4d:f9:01:48:
d1:87:5f:59:de:b8:4b:0e:3a:47:4d:0a:ed:3e:29:
df:b5:37:4e:da:72:cd:53:aa:f3:76:d9:8f:b6:3f:
ab:c3:35:30:df:16:27:ce:f8:ed:b3:af:10:a2:a7:
f7:37:16:51:dd:fc:70:e1:4e:75:8f:34:48:b2:72:
88:34:5a:94:fd:e3:b1:72:7e:97:b6:fb:af:e5:3b:
4f:cf:e7:2c:a8:40:15:00:ad:35:38:3b:34:33:33:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:20:56:D9:00:8F:A5:91:AB:CB:D0:8A:E3:28:22:A0:95:29:98
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:15:57:be:5e:bd:64:f7:5f:8b:05:58:e3:ba:8c:d8:77:43:
d2:b4:72:8f:91:6f:1e:26:d9:d7:1c:6a:d5:b7:1e:9a:df:ba:
3c:15:a0:10:42:c5:98:ad:d9:ea:3c:af:e0:dd:d6:5b:f1:bb:
aa:f6:5e:b7:14:f4:31:cb:dc:a8:8d:ba:9e:61:65:4d:35:18:
e4:c5:c8:f3:a1:fe:4c:eb:3f:b7:05:2f:f9:99:58:20:d7:ad:
b4:e7:9a:4f:86:7d:5e:80:89:76:1a:51:33:8f:e2:da:02:0e:
fd:01:db:54:d8:e9:41:9c:bf:3e:4d:85:17:fa:af:f4:a5:a2:
1a:89:63:ed:f4:ee:50:e9:2f:d9:eb:22:cd:c2:22:53:a8:cb:
80:ad:f2:90:33:c2:40:28:9e:71:c1:a5:bb:50:5a:f5:dd:80:
51:91:61:f5:f5:ef:53:a3:4d:9b:06:b6:ee:15:ce:a2:25:23:
22:af:14:c9:3d:04:02:2f:1a:ac:71:a7:4b:65:2d:8c:d1:48:
34:3f:de:1e:68:40:03:5a:cd:70:2c:2e:5f:40:4d:65:23:f9:
4f:7b:8a:63:26:f4:a9:a4:62:cd:20:57:4e:47:38:07:ca:6e:
6b:8e:27:7d:e6:71:6c:fa:d8:53:c3:b9:bb:3a:a4:ee:a0:86:
d1:62:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:28:22 2026 by rpki-client