Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: mcSkB7clwqKmYSgGtaAip7VmNuCTeec6fJxauhBiBrA=
Subject key identifier: 16:B7:F8:61:42:69:40:5F:08:04:34:3D:34:9F:DD:2F:5C:5D:AD:07
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019DCFE3D359B15FF8251E7D1DCC57CC882E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 18F0
Signing time: Mon 27 Apr 2026 17:01:47 +0000
Manifest this update: Mon 27 Apr 2026 17:01:47 +0000
Manifest next update: Tue 28 Apr 2026 17:01:47 +0000
Files and hashes: 1: 81yZ155DMG5rdK0HhKcFu9QDPzo.roa (hash: S3648aF6KQD7VXRsWbdISgJGBto1UPZCtJzs6qrU8/U=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: 4hldLeA69VsTm2kuLnrtwsorDD3jmFOOza9xjF41Uvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:d3:59:b1:5f:f8:25:1e:7d:1d:cc:57:cc:88:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Apr 27 17:01:47 2026 GMT
Not After : Apr 28 17:01:47 2026 GMT
Subject: CN=16b7f8614269405f0804343d349fdd2f5c5dad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:48:56:b8:6f:ce:8e:6a:b1:0a:6b:d2:a9:
8e:ad:1b:60:9e:0a:58:51:54:af:0d:59:ea:e9:af:
2c:69:91:a1:15:39:08:4d:17:e6:42:11:16:3a:c4:
58:a9:72:26:af:b3:e0:a5:64:6b:11:ce:aa:b6:f8:
41:1a:81:83:9e:4f:a8:09:52:11:b7:63:12:88:8d:
de:0e:21:49:95:cf:db:7b:7c:12:a7:a2:27:6d:ad:
fe:5f:fc:9d:b3:29:dc:d5:3a:b0:ed:23:f5:d5:43:
bf:7c:d2:8a:0c:06:d3:66:2f:80:10:72:35:ee:f3:
43:84:f8:7b:ec:75:85:7f:7f:6a:cf:9f:a0:b2:dd:
62:3f:4b:66:4f:b4:60:8d:7b:0a:aa:6b:1e:63:fd:
5a:f0:54:15:90:5f:50:59:29:09:bd:57:a5:f8:ee:
c5:ff:4f:ad:45:b6:42:e6:b0:86:c7:3d:64:88:e7:
ae:83:f2:72:0d:29:f7:34:0a:99:65:7f:6c:91:96:
ca:59:70:1d:5f:98:46:98:d9:c7:19:00:e5:e8:5d:
07:4b:2b:43:a2:74:c1:de:f1:78:96:a6:e7:5f:0f:
04:d6:05:ce:ae:b6:0f:98:0f:9c:5e:26:e9:bc:5a:
7d:04:a6:b8:61:0a:bd:fe:0d:da:38:40:9c:bd:eb:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B7:F8:61:42:69:40:5F:08:04:34:3D:34:9F:DD:2F:5C:5D:AD:07
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3a:98:46:47:80:6f:bd:da:c4:c6:a9:32:08:c5:0e:06:91:
73:3d:41:c0:49:ad:9b:28:57:5f:95:f9:06:de:ee:9d:a8:ac:
08:4c:c3:cd:5f:54:73:5f:cc:c6:ed:51:5f:f8:83:07:a1:52:
7b:2e:c2:ef:a9:8e:cd:6a:1d:d7:33:fc:42:34:95:24:ea:34:
db:8d:c1:34:e4:31:d9:2f:1b:24:63:42:09:4c:b0:81:d5:89:
2a:9a:4a:cf:d9:8b:87:9b:9f:52:58:b6:4c:d4:95:ab:d1:43:
e9:e0:12:7c:2e:c0:0f:6a:3e:fb:c7:ce:19:6d:76:6d:dc:91:
62:a8:82:3e:21:2f:35:e6:09:db:f2:3b:e3:81:20:e7:82:3e:
ae:c3:37:1a:1c:ef:6d:7a:1b:07:6a:22:e0:36:1f:1f:e9:0c:
75:15:9e:0b:12:44:79:70:52:8a:42:c7:e2:a5:fe:12:4c:91:
8a:13:fd:e2:05:21:7d:b8:67:30:92:29:5b:e7:e9:fa:9f:2f:
c4:c8:4c:9d:cf:35:7f:06:e1:f1:ae:87:1d:81:26:bb:f2:e2:
f4:7d:f7:22:4a:da:d5:80:b9:1a:42:f8:a1:64:67:03:aa:cf:
c5:bb:08:c8:a2:e1:d7:45:8c:9f:14:1c:2d:56:4d:7d:78:52:
c9:c0:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:49 2026 by rpki-client