Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: UTfKOwpCR3KmIfqrHvdh0n+OL2914gX8GJPRv4zuofM=
Subject key identifier: EF:69:52:D9:E9:F1:F3:91:9E:51:16:8A:81:21:0F:0B:5F:94:52:23
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 019E2F5FC146865CF510BFF67E296769E386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 17AE
Signing time: Sat 16 May 2026 06:01:04 +0000
Manifest this update: Sat 16 May 2026 06:01:04 +0000
Manifest next update: Sun 17 May 2026 06:01:04 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: dNLOHT55es6X8xctJyonJXL4jCfJ+AbarlmUkfd1uDw=)
2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:c1:46:86:5c:f5:10:bf:f6:7e:29:67:69:e3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: May 16 06:01:04 2026 GMT
Not After : May 17 06:01:04 2026 GMT
Subject: CN=ef6952d9e9f1f3919e51168a81210f0b5f945223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:d6:5f:f2:38:a3:45:6d:41:f7:2a:1c:7d:
cd:5a:1c:fe:c4:0f:00:b3:22:33:38:38:93:52:88:
c3:d9:74:c9:e8:7b:29:aa:d6:62:fc:a6:7d:bc:4b:
15:9f:71:0f:48:40:d3:b3:e2:73:1d:77:cf:57:a0:
f9:44:5d:7e:22:13:04:a9:92:3f:71:8f:74:a8:c3:
62:cd:e6:e1:67:32:c8:45:cf:63:a8:b2:d6:7f:ed:
97:aa:71:61:cd:48:15:35:76:b0:71:38:7f:82:b3:
8f:64:cf:15:d6:ff:45:27:9b:ab:b0:eb:09:85:6c:
58:e3:30:a5:21:4c:89:4a:2c:54:57:20:9f:41:53:
21:d6:6f:f3:e1:00:83:11:50:39:30:0d:55:a2:f0:
3e:3b:46:66:b1:e9:87:d1:06:d6:5a:eb:ae:22:4d:
f1:d4:af:26:cd:d5:aa:ad:9e:14:99:5c:5f:08:9a:
8a:f9:58:fc:11:13:84:9f:43:19:39:ce:46:eb:5c:
ad:0e:37:4c:04:be:61:79:82:ad:a1:c9:51:fa:f8:
a3:6f:c0:6e:a8:aa:ae:7a:e6:ad:51:aa:90:d7:b0:
6b:98:d3:6d:b5:68:2d:8d:6e:7d:97:70:c8:d7:26:
d8:45:30:a3:4e:16:b8:f2:77:25:b6:19:dd:4c:d9:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:69:52:D9:E9:F1:F3:91:9E:51:16:8A:81:21:0F:0B:5F:94:52:23
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:7a:a5:48:28:4b:40:1a:63:ad:2f:2a:e6:95:36:c0:25:
8f:3d:58:8c:42:3c:43:86:58:39:d5:c7:83:e6:fc:a8:bd:ab:
75:22:4f:5f:4a:45:df:86:63:41:ea:68:90:73:28:94:3d:7b:
a6:8d:dd:da:48:74:fb:ef:5a:0e:fd:62:2e:ac:09:8f:4b:48:
95:27:b0:7c:18:d3:69:c7:16:5d:09:72:d6:e3:89:4e:f8:73:
23:a7:4d:00:67:6a:99:10:77:e3:a5:b7:75:34:80:bc:4a:55:
30:b3:af:e0:b5:49:02:74:8b:f6:d7:ce:68:29:36:82:aa:2b:
a4:72:de:64:2a:ff:4b:3d:c1:6b:92:cf:ef:34:4c:6a:04:f4:
ab:fb:d7:2b:73:46:f1:ae:f9:0c:3f:31:6e:6d:d5:61:7a:fc:
28:4f:a2:0a:fd:e0:59:5c:97:90:3e:cf:3c:64:77:9f:37:3c:
51:0f:e1:3e:f6:fe:38:9c:25:3c:d9:94:80:85:f7:f8:07:90:
de:66:74:9b:d1:11:e0:e3:b9:d0:42:ab:15:2e:71:d5:39:7f:
5b:36:6c:a5:50:91:7e:48:6f:bf:75:4e:71:81:4c:a2:65:6b:
59:07:dd:53:eb:ff:d5:13:0f:39:05:13:40:22:90:83:62:ea:
dc:c1:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:38 2026 by rpki-client