Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: qk5Es9cwgNlnUQdzQggmcY0cdvGC6cWK5eyKSY+AaSI=
Subject key identifier: 20:E4:64:C6:C8:E3:2A:A4:E1:C0:37:BC:D5:C6:D8:5D:33:81:80:5C
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019E2F964C82787FB44B15B7267F4833A98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0CA3
Signing time: Sat 16 May 2026 07:00:39 +0000
Manifest this update: Sat 16 May 2026 07:00:39 +0000
Manifest next update: Sun 17 May 2026 07:00:39 +0000
Files and hashes: 1: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: 0SpFLyhPKIRFvPeRlcvxz/CM66LO5O40JGToMuurSaI=)
2: VjXNqFR-k-RE3bGhNFiBb6fGRIo.roa (hash: 3g7GHBy2J5M65ZKj6UpQWjQ6sqNGGq3QnOtwBXdJZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:4c:82:78:7f:b4:4b:15:b7:26:7f:48:33:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: May 16 07:00:39 2026 GMT
Not After : May 17 07:00:39 2026 GMT
Subject: CN=20e464c6c8e32aa4e1c037bcd5c6d85d3381805c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:6e:6e:3d:f3:4d:ff:0f:92:f6:aa:c9:64:
f1:b2:ac:67:64:41:76:c4:f6:fb:1e:f8:a3:71:ce:
77:4a:ff:69:a8:8d:3e:38:eb:b0:a2:a3:a6:a1:cc:
6c:4f:76:67:e8:6f:c4:ec:cb:3a:a4:a3:8e:53:f0:
aa:0e:38:ec:f1:fb:be:df:a0:01:d3:ef:da:fb:94:
84:ea:bc:9f:53:a6:a4:94:ad:ba:e0:b7:1e:87:09:
e2:02:7c:1d:a5:40:c6:d2:c8:d7:00:db:13:f6:e3:
d6:31:35:93:e7:ef:0e:a5:76:28:d3:e8:42:1b:c0:
c2:71:1e:67:38:c3:15:fb:47:d1:bd:83:cb:15:06:
f9:ad:41:0a:9a:4d:e1:fe:67:e9:22:67:c0:13:c1:
68:57:81:97:ed:ab:17:d0:65:64:0a:b0:04:f8:ae:
54:d5:34:68:1a:95:7a:bd:61:a4:1e:f3:88:39:65:
b2:b1:aa:cd:f6:ca:af:f0:da:bf:2b:6a:d4:b7:fc:
9c:02:c2:e7:99:55:7c:a5:64:6c:1e:15:57:81:1e:
ad:72:2c:0a:9d:1c:cd:00:f4:12:ba:c7:8f:a8:64:
7c:93:7c:bf:d6:98:c8:87:fc:8b:d0:be:b0:3c:7a:
62:f4:2a:d0:e6:0d:ed:1a:42:6d:50:71:80:30:68:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:64:C6:C8:E3:2A:A4:E1:C0:37:BC:D5:C6:D8:5D:33:81:80:5C
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:69:fd:e0:59:18:33:dc:53:80:e2:8c:ea:65:ee:bd:12:
c8:9c:f3:81:0f:b6:6b:95:87:b2:2e:e0:4e:01:c6:24:b5:bb:
35:6b:f6:a6:dc:f2:51:23:e8:b7:5b:52:9d:bf:6c:93:7e:5d:
9b:f0:42:68:3b:cc:d2:24:00:4f:28:dd:a0:df:36:fe:73:1b:
50:db:46:2b:aa:fe:6c:d8:c0:1a:32:42:73:1e:86:bd:9f:89:
f9:3e:19:d1:3a:0b:49:fa:7f:a3:33:da:b6:63:7c:4b:80:b6:
3d:21:af:96:f9:24:a3:d0:06:43:2e:ad:67:5e:ee:a2:5c:25:
45:03:c1:2a:68:53:c9:e6:74:3e:d1:0f:ec:ab:5e:6d:73:a8:
86:9e:4c:4a:21:b3:67:4f:29:ca:0e:5e:91:02:54:7f:ce:47:
b2:37:ac:35:16:01:c3:3b:c0:d8:48:d6:85:98:e3:c8:01:33:
ad:41:40:fb:fd:9c:11:34:ec:0c:81:5f:43:4c:2d:59:58:a7:
72:f4:b0:49:fd:46:21:84:64:02:97:56:66:c7:cb:46:b3:41:
ce:7c:40:c3:5b:f2:18:58:c5:c7:01:90:90:24:73:e1:c5:d6:
b6:3f:27:d0:85:55:c1:76:d0:1b:68:bd:1b:9f:46:40:4f:17:
62:2b:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:04 2026 by rpki-client