Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: qApOPSQih9cX+tcqtoNkT6VSgkYcMvqPyQe+frX+ois=
Subject key identifier: 5C:E2:A8:0C:BE:7E:A7:37:3B:C5:41:BA:AA:DB:D8:04:47:98:9D:CE
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 019D3A1CEADF0BA5E0D8BED08E881718AC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 172F
Signing time: Sun 29 Mar 2026 15:01:06 +0000
Manifest this update: Sun 29 Mar 2026 15:01:06 +0000
Manifest next update: Mon 30 Mar 2026 15:01:06 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: D4SvXQ7+1/+Q9ecjlKWD4ddBZO0UmBZWxwbzJGYYP4o=)
2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ea:df:0b:a5:e0:d8:be:d0:8e:88:17:18:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Mar 29 15:01:06 2026 GMT
Not After : Mar 30 15:01:06 2026 GMT
Subject: CN=5ce2a80cbe7ea7373bc541baaadbd80447989dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:b4:38:7f:5b:eb:a6:d7:d5:b6:04:65:c8:
80:91:cb:10:3b:c7:ea:85:19:20:82:91:fa:72:80:
00:40:6e:94:f4:79:a8:f4:85:e5:ac:eb:50:1b:60:
18:8b:be:d9:97:cf:32:be:16:2b:eb:cd:68:4f:90:
46:d9:cb:cb:21:d5:33:9b:7a:70:98:f5:b1:32:9d:
a1:3f:c9:26:2f:22:2e:02:f0:0e:14:56:36:12:00:
38:48:8e:5f:7e:81:6e:8b:05:0f:9d:37:61:b2:fd:
df:6c:83:bf:8d:bf:83:af:17:d4:81:6b:0b:31:32:
65:8e:ec:58:96:a5:17:51:94:83:63:26:51:7d:d7:
89:e9:09:48:9f:75:57:6f:06:19:61:39:d7:44:f2:
ec:15:40:ae:a6:6e:30:2e:b8:3b:9a:8e:2e:47:db:
be:27:06:3d:f5:80:d8:77:8b:5e:a9:eb:b9:e4:1c:
91:8b:39:aa:c3:20:46:03:2b:47:e7:b7:32:c9:54:
56:9b:e8:ad:d1:a9:94:26:58:51:58:a4:57:7b:a7:
bd:13:03:86:f9:f4:7b:9b:db:23:d1:08:41:e4:58:
1a:68:88:00:f4:f6:25:5c:ea:0c:cc:5e:ec:7f:6b:
4f:71:fd:19:71:07:54:26:6a:50:7a:bf:cd:df:93:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:A8:0C:BE:7E:A7:37:3B:C5:41:BA:AA:DB:D8:04:47:98:9D:CE
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:4c:80:d3:64:65:46:73:4e:f9:23:be:b8:ff:80:18:3f:
8d:f4:89:4a:38:4a:d0:e4:1a:53:35:82:ff:ed:cf:ef:ab:d6:
bb:99:ae:4f:8f:ab:2e:5e:a6:18:f7:a1:90:a1:be:76:e9:8f:
b0:6b:a2:60:56:e1:84:6e:92:19:c1:c6:7b:ea:bd:89:67:79:
c5:d6:2e:2a:5b:02:5a:d8:ba:7e:27:ac:29:00:27:50:b5:6f:
17:ed:57:cd:8e:ea:71:9c:fb:04:9a:a4:8e:41:29:a4:70:be:
c1:6d:74:80:bc:03:b4:f8:67:09:8e:b0:8d:24:c9:aa:7a:17:
fd:83:80:cc:18:85:af:62:95:9e:a1:7a:ce:4c:a9:db:f5:66:
32:a0:ab:bb:1d:8a:99:5d:1e:00:c7:f8:1b:e9:40:f0:4d:4f:
43:06:1a:a4:42:34:6a:e6:3c:6a:32:8c:f8:c5:0f:01:54:bf:
00:e3:d6:43:65:23:a3:24:82:87:4f:b5:e7:89:07:e9:2d:b7:
f9:13:03:1e:1f:25:63:ea:93:63:28:db:65:ed:76:cd:95:84:
18:7f:a6:ee:e2:a0:23:0a:dc:9a:c4:05:af:13:23:26:34:1a:
50:fb:e0:e1:0e:fa:02:e2:65:9d:2e:a7:12:0a:82:a0:f7:81:
ca:6f:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:47:30 2026 by rpki-client