Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: ByNU3QEJ7wmEF+z1RfiqTNk2PMVnsSa5YukB8AGi3mQ=
Subject key identifier: 4C:93:DF:6E:EA:A9:02:46:9B:38:7F:46:8E:BF:A9:58:90:B6:52:E3
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019CE3DA35BAB0A63FEAFF3A7BFB76304F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0B5C
Signing time: Thu 12 Mar 2026 21:00:54 +0000
Manifest this update: Thu 12 Mar 2026 21:00:54 +0000
Manifest next update: Fri 13 Mar 2026 21:00:54 +0000
Files and hashes: 1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: GfwCXY2czgAukY+wcy35sDLibnPZXO19GtBxI+ROqVI=)
2: rRTCz9gdKZmCD2CPH7ZEPITaxno.roa (hash: IkdpUdMuuhLbUbcbS19kzqtq8+mEc9r+5ZSOWumJXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:35:ba:b0:a6:3f:ea:ff:3a:7b:fb:76:30:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Mar 12 21:00:54 2026 GMT
Not After : Mar 13 21:00:54 2026 GMT
Subject: CN=4c93df6eeaa902469b387f468ebfa95890b652e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:c2:24:d6:3f:99:5c:d3:a9:28:c7:8c:5d:
a5:84:fc:6e:d0:a6:c8:a7:f6:03:2d:15:d1:b8:b7:
3e:21:f8:ab:ed:7e:b2:2e:bc:bd:0e:92:28:7f:e0:
f5:1f:35:56:73:6c:21:25:c1:be:26:f5:95:aa:08:
f2:f5:d3:76:03:a3:03:98:10:80:7a:c2:13:1c:33:
cb:08:23:cf:05:de:92:de:3e:b2:fd:81:61:7a:1b:
8c:8e:5f:22:ac:32:eb:4c:05:ab:de:ae:07:d4:fc:
37:8c:3e:39:aa:56:ee:79:7f:13:b8:1f:f2:c4:1d:
b4:97:a1:fa:36:d5:ce:f4:3c:fa:0e:d4:1b:28:c4:
33:31:35:1d:52:e9:43:09:38:53:0d:77:04:c1:36:
40:0e:e5:64:f9:ac:03:72:9d:88:ae:fb:33:ac:75:
a8:fb:d9:64:78:8d:13:c5:bd:13:08:0e:70:a1:64:
ff:47:0f:ee:c1:f2:de:8e:1b:89:8f:95:99:66:3b:
d2:2d:8b:c6:e2:cd:a5:9a:7e:7a:10:2a:47:34:50:
64:8a:5c:94:b3:7c:29:5c:bd:68:a6:8c:4f:16:c7:
37:5c:6c:8a:e8:48:c9:8e:93:dc:cd:26:db:17:8a:
7c:be:5f:0d:29:2b:02:89:55:ab:c7:36:12:57:bc:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:93:DF:6E:EA:A9:02:46:9B:38:7F:46:8E:BF:A9:58:90:B6:52:E3
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:64:5b:82:29:5b:11:68:b1:4b:1d:0c:ab:2e:96:d6:54:d9:
8b:77:6e:c6:8c:1c:8d:0a:9f:2e:3f:67:0a:ed:f0:7d:05:4b:
ad:36:24:16:ba:bb:d8:a4:4d:5d:1c:81:6e:ea:84:44:39:ff:
a5:af:81:41:84:a7:f0:60:28:8c:cb:15:64:8c:5b:b0:50:fc:
b5:29:d6:49:f0:f7:8e:ec:ad:50:8a:12:19:4c:bf:4e:9e:66:
dc:ef:fa:8e:b2:1d:28:65:e3:a6:64:1f:d1:bb:62:49:cf:dc:
76:a2:cf:5a:12:bf:88:98:a6:d7:84:7e:22:1a:f4:08:73:47:
51:b4:8f:d4:ab:d9:f2:c2:d2:ac:de:db:b0:ec:9c:51:89:6c:
27:6e:76:d1:c6:c1:7b:fb:dc:03:53:31:7d:39:0a:c9:eb:06:
7f:b3:27:1f:56:9e:38:47:c9:48:8a:34:f9:4c:d3:64:55:79:
70:ed:f9:c5:7b:96:57:24:d9:1b:03:f1:f1:4f:9b:92:16:bc:
e4:d3:74:ed:cf:31:60:b0:e0:52:39:27:36:b7:21:cb:d2:df:
93:0b:ca:ce:ed:d1:2d:ba:d0:45:4d:bc:ea:51:39:12:14:80:
99:2c:81:da:25:0f:53:f6:bb:21:80:1b:cb:7b:72:af:65:06:
01:07:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:42:13 2026 by rpki-client