Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: YKr3QLopy6FJTQV4DpSc2rjSsfnc03SIGv9fAXGal0U=
Subject key identifier: 1A:0F:6E:68:93:B8:18:17:34:FD:4C:08:A6:FF:F0:45:55:4C:4D:C9
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 01A17B4DAAE75121B1096A3744C5BCE42532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 125A
Signing time: Tue 27 Oct 2026 03:00:49 +0000
Manifest this update: Tue 27 Oct 2026 03:00:49 +0000
Manifest next update: Wed 28 Oct 2026 03:00:49 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: Fjz/d+F+8YrgMJC6SfTCozUHjPy24i/vqWiRMEgb2Jc=)
2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:aa:e7:51:21:b1:09:6a:37:44:c5:bc:e4:25:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Oct 27 03:00:49 2026 GMT
Not After : Oct 28 03:00:49 2026 GMT
Subject: CN=1a0f6e6893b8181734fd4c08a6fff045554c4dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:23:46:0d:0f:24:1f:89:f5:72:84:aa:fa:
fe:b2:82:27:cb:b2:dd:d2:30:48:ad:4f:66:d6:24:
ab:00:96:d7:e7:8e:c5:54:19:8e:99:23:7f:68:89:
5e:5a:30:60:a7:87:94:8a:9f:b0:a3:1d:e1:a5:07:
2f:94:40:f2:d0:d5:b0:27:7b:c9:17:79:05:6b:2b:
35:75:39:fa:3e:14:64:7f:5b:62:69:fd:57:56:ed:
7c:52:95:8c:f4:aa:a6:a0:1f:b4:c6:93:b0:21:46:
01:f4:80:1b:43:b2:7a:39:47:bb:4e:d4:cf:6e:e3:
09:33:43:31:01:73:f6:b0:71:a6:69:62:fc:12:d4:
c5:ed:d5:00:56:68:da:2d:7c:88:8a:9f:62:dc:42:
9b:a8:58:9b:8b:13:3d:9f:5f:c6:8b:b2:59:0d:d4:
7a:7c:d9:e1:77:2c:7d:64:3f:fe:ce:1e:a9:8a:2a:
c1:11:e6:72:72:5f:49:15:5e:8c:97:4b:8a:09:64:
87:04:ad:b9:14:cb:85:ca:ef:b6:83:e5:ec:74:35:
e6:2c:14:1e:fa:90:0b:55:0b:83:75:ec:d6:2d:8c:
4f:0b:c7:02:b9:5b:89:02:9d:e3:b2:8c:60:b8:81:
ec:56:f0:73:52:76:c0:9f:9f:f0:0b:1a:86:fc:38:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:6E:68:93:B8:18:17:34:FD:4C:08:A6:FF:F0:45:55:4C:4D:C9
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dc:7d:b2:a6:98:e7:55:cd:34:46:39:5a:5b:12:7c:13:62:
07:a8:a8:5c:fc:cf:d5:97:2e:98:c9:32:37:e1:56:b3:f1:2c:
94:09:c3:95:3b:5d:09:eb:12:ad:96:46:55:c5:88:e2:52:b2:
61:c4:4e:59:29:b7:0d:99:46:eb:fa:26:b0:9f:73:b3:4a:1a:
56:b9:7b:97:d9:6a:b3:a4:57:55:9a:54:b2:64:96:f6:43:cd:
03:98:ec:f0:09:32:4d:5d:9f:11:23:47:64:ff:92:6e:db:61:
ec:2b:9c:67:f9:7a:71:12:09:14:d3:08:fc:41:25:f2:64:3f:
5a:c9:84:7d:41:64:1b:2a:b0:7d:57:0c:f5:b4:1b:53:80:4b:
d0:3c:cd:1c:cd:4a:ed:04:e1:27:36:e7:5d:c5:dc:1a:17:7d:
8e:e6:69:d7:be:57:d4:df:a7:55:19:ed:ca:86:da:34:40:24:
cc:52:fd:26:b5:88:a4:32:91:32:9d:89:3b:cc:dd:f1:4a:50:
ab:62:e2:39:6c:61:2d:ba:d9:5d:cb:10:4d:ea:18:17:a6:4d:
ce:8c:19:31:20:be:5f:5d:e9:0e:d9:ab:33:81:c2:90:f9:2f:
df:7d:84:1a:de:08:a9:31:8e:a6:f9:4c:81:34:b1:24:64:b1:
4c:9e:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:58:52 2026 by rpki-client