Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: YGZNEgzOMSWcgd05bqJ/0bNIS3xxSDOmN71Ia1y6pyc=
Subject key identifier: 27:F0:C1:B1:31:04:55:3F:64:01:39:3D:10:82:CE:FB:73:74:60:46
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 019DCED01EF8301E584055A22112735E8BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 1073
Signing time: Mon 27 Apr 2026 12:00:38 +0000
Manifest this update: Mon 27 Apr 2026 12:00:38 +0000
Manifest next update: Tue 28 Apr 2026 12:00:38 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: Kxzl4aGwVQtDxbE2dpOU9zbDxXajuf8Z8C8sx/wOiC0=)
2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:1e:f8:30:1e:58:40:55:a2:21:12:73:5e:8b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Apr 27 12:00:38 2026 GMT
Not After : Apr 28 12:00:38 2026 GMT
Subject: CN=27f0c1b13104553f6401393d1082cefb73746046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:43:a7:9e:ec:7e:b5:d4:4c:85:73:2a:29:
9f:f3:c3:e0:98:fa:2c:35:81:2b:33:54:d0:1e:9b:
b8:c2:fb:1e:4c:6d:bd:28:a2:15:b2:b6:54:ab:75:
b6:16:98:f9:a9:63:23:93:bf:4c:24:74:23:e6:b5:
66:60:40:cc:a5:d0:d6:59:7b:99:5d:f0:cf:80:63:
f3:c3:11:92:00:35:3e:61:cd:ea:2c:6d:b1:4c:e6:
8c:f8:c9:fb:a6:aa:9b:c1:35:42:d6:8c:26:b7:29:
dc:b1:a1:72:67:bd:ee:15:47:31:83:a2:5c:cf:2f:
ce:4e:de:7a:d5:ae:07:84:1c:7d:59:ec:c4:32:83:
ae:7a:5f:68:1f:fa:a7:fc:03:73:d4:15:5b:c0:ff:
c5:e5:8c:67:2a:4d:ba:aa:99:f7:35:6c:40:89:7a:
ca:9b:70:52:24:74:3b:c9:3c:8a:0a:5f:d9:74:b3:
3f:72:04:80:d1:3d:9e:b5:c5:bb:4e:b0:af:a2:bd:
71:64:93:8c:ae:2f:18:28:28:47:f2:85:f5:17:8c:
ee:b7:d1:42:08:79:ec:6a:0c:13:f9:0d:b3:32:5e:
71:6b:9b:30:f6:26:0d:ae:06:d7:59:e1:91:cc:ac:
2a:3a:84:ee:87:b1:41:c5:6e:a4:36:69:a3:1e:55:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:C1:B1:31:04:55:3F:64:01:39:3D:10:82:CE:FB:73:74:60:46
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:06:6d:9c:71:8c:44:59:2d:e4:40:29:c1:d7:c2:20:05:22:
43:e5:f5:f6:aa:75:c6:0a:e2:e0:b9:36:b7:8d:ec:5d:31:bd:
3b:3c:f9:cb:66:b5:ed:d6:cb:0f:c3:c1:7b:08:58:dd:a8:bc:
d4:0f:43:bf:dd:f4:06:25:ea:c2:ca:fb:97:41:1e:3b:88:40:
a9:59:80:42:3a:a3:9a:d4:10:18:d0:95:5b:f9:c5:13:49:8b:
27:6b:8c:37:8a:11:8c:a3:a1:b6:06:77:a9:0b:92:0b:ee:e5:
7d:b2:0a:2d:25:22:96:80:fc:1e:ca:59:7f:25:94:8b:d0:1e:
b7:53:f3:ba:49:d3:ab:04:8b:7f:70:77:e1:f6:42:bb:43:3a:
60:59:34:d2:0c:71:e4:d5:4e:fd:8b:7d:2f:e9:17:94:74:b7:
f1:d4:b8:d7:29:8f:e0:7b:f4:88:a9:18:f5:c4:e7:2b:db:bf:
4e:a6:61:43:64:83:af:0b:e5:02:fe:d5:5a:b5:33:e1:23:95:
89:27:04:d8:3f:74:1b:88:69:fc:b1:d5:1f:50:f6:a9:4c:e1:
03:6a:5e:53:4b:17:d9:b8:a8:2d:62:42:0e:e1:30:80:38:e5:
bf:4c:49:3f:60:6d:97:66:89:42:03:e3:75:3e:6a:53:d8:95:
42:a0:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:08:29 2026 by rpki-client