Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: CT3Sb/JleJE0sL4VZjbfrjQWww3msV2WAt/Zv+E4zlQ=
Subject key identifier: 1D:DD:50:EA:22:6F:CE:EA:B5:39:EB:E6:10:F4:86:A2:33:19:0C:81
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019FA2CDAD8DC80255823D08722A6368B0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 19E3
Signing time: Mon 27 Jul 2026 09:00:15 +0000
Manifest this update: Mon 27 Jul 2026 09:00:15 +0000
Manifest next update: Tue 28 Jul 2026 09:00:15 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: YcP6TMfb7o+3Am3P27qC1//Cns5GrbL8GohT0s5eDPE=)
2: Y-KOAHOLABX3sY4gJm3A6nvrqgk.roa (hash: jTbxGKNlR+XX6Qac6sKrcuIPfzi6QGetIT0dTM9/L6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:ad:8d:c8:02:55:82:3d:08:72:2a:63:68:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jul 27 09:00:15 2026 GMT
Not After : Jul 28 09:00:15 2026 GMT
Subject: CN=1ddd50ea226fceeab539ebe610f486a233190c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:cb:be:a9:2c:24:a4:8f:b4:ed:5d:b7:70:
51:7a:2f:cc:b9:01:c3:cb:21:2b:73:3f:75:ec:8f:
bb:4c:f0:b7:3d:60:6a:2f:54:2b:2b:a3:af:1e:31:
74:32:ac:47:5b:f9:6a:43:10:97:9d:00:16:86:a6:
11:17:60:70:38:93:35:de:f4:db:b9:b9:7e:ff:78:
17:d7:ca:6d:6e:2b:f0:58:77:9d:63:84:3e:9d:75:
0f:ec:03:a4:68:76:29:be:f9:79:43:c7:25:fa:0e:
d7:fd:bc:e2:c7:7b:fa:62:b5:e7:15:a8:01:79:42:
8f:0f:33:ee:92:ae:8e:af:bd:97:6f:e6:ef:0a:d0:
cd:4a:da:1d:6f:ba:9b:88:4a:ee:d5:d6:5c:53:2f:
24:b0:10:8c:1f:90:22:bd:91:00:f3:cf:a4:51:29:
f8:c8:e9:23:1c:3a:9d:cc:4f:65:eb:5d:49:9d:87:
41:da:52:2a:61:cf:54:db:cb:fa:ab:05:03:49:7c:
9a:cd:db:e1:93:b7:d3:98:de:92:9b:ab:f1:45:bc:
09:5a:a1:86:2e:3f:38:08:71:23:0d:43:08:05:2a:
44:cd:3e:8b:7d:fb:32:39:1d:09:43:27:b0:9c:7f:
39:d0:4e:d1:e2:cf:4c:71:27:7f:2e:c7:4a:52:67:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:50:EA:22:6F:CE:EA:B5:39:EB:E6:10:F4:86:A2:33:19:0C:81
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:89:4a:62:dc:9c:24:a2:8c:50:d5:31:aa:c0:0a:8b:8d:73:
fc:32:84:1e:0d:de:e6:2a:15:a4:5d:45:14:88:d0:7a:4a:8b:
a3:7b:8f:08:56:9e:fb:65:c5:73:a7:f5:ac:e0:8b:da:9b:1b:
cd:94:e7:2e:45:c1:58:19:f7:46:e5:a1:29:52:9d:7a:33:33:
ca:77:b6:64:b0:38:08:53:20:82:e7:02:b0:8a:7e:fa:bf:be:
1c:aa:6b:d5:90:62:73:c9:a4:94:2e:10:9f:ff:ea:99:bb:43:
80:66:52:c4:b1:cf:39:19:19:5d:71:d5:3f:e7:19:51:00:b7:
57:ac:d4:d5:e8:a5:45:0b:55:9d:a4:13:2a:57:d1:5b:28:73:
9b:cd:6a:03:04:b5:9a:b9:9a:69:52:77:ef:bd:28:a2:4f:a7:
85:8e:bc:3c:eb:ab:2b:d5:92:72:53:29:f6:ae:8a:e3:38:13:
6b:69:a9:f3:88:81:b8:06:40:a3:04:bb:48:70:8e:40:3a:76:
10:32:48:68:fb:d7:77:a7:03:a0:bd:6a:26:8d:7d:17:ed:b2:
bb:34:fa:7c:04:3c:b9:26:9e:54:3c:3e:ea:dd:dc:7c:ff:d2:
60:65:7e:ab:9c:ad:c1:9c:13:01:a8:12:48:c2:e1:a9:76:d4:
8f:4a:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:52:08 2026 by rpki-client