Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: m1HwqJplZAQMSsQdLZmpUyeDdy7QImCtfvH5CqqmUTQ=
Subject key identifier: C5:84:1F:5A:CA:73:09:5F:C1:C2:D2:72:6F:5C:63:AA:99:47:35:67
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019F111BFAC57640C1D3AD9FAE7447F2EDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 02:01:14 +0000
Manifest this update: Mon 29 Jun 2026 02:01:14 +0000
Manifest next update: Tue 30 Jun 2026 02:01:14 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: eVitaB1VDH9vUxcjnFAbJjsI5LSnRhHBhFu+aVNh0oU=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
3: qpd4n4rrzsaA26B8vSZr6BByIoc.asa (hash: Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:fa:c5:76:40:c1:d3:ad:9f:ae:74:47:f2:ed:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jun 29 02:01:14 2026 GMT
Not After : Jun 30 02:01:14 2026 GMT
Subject: CN=c5841f5aca73095fc1c2d2726f5c63aa99473567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:dd:a8:f0:20:c5:24:fb:4e:48:45:87:f0:
65:da:39:77:c8:fd:83:b1:21:9f:37:cf:30:a0:bf:
36:a4:9f:7b:8b:a5:22:2a:72:12:1d:57:4b:22:71:
b8:16:e8:41:a4:76:7f:1b:13:e6:8f:49:83:05:11:
0f:0f:13:77:f0:aa:94:80:af:2b:0f:75:1c:63:e9:
ef:38:b8:bd:1c:71:63:dc:ef:0e:f7:90:f9:2c:0b:
3f:66:44:d1:a0:b2:de:86:d3:2e:fa:41:a6:05:15:
9e:69:ea:19:77:39:d6:ba:62:51:74:f5:a5:b4:9d:
79:f5:6d:6a:3b:22:1e:d8:3b:4c:ba:40:f5:17:4d:
9e:df:92:36:b0:28:b4:b6:73:ef:5f:a6:8a:cf:ac:
20:36:27:df:9a:ab:84:29:d7:ed:4a:b1:25:f2:b9:
34:93:57:7c:7b:64:32:03:e2:bf:b0:f0:40:78:8b:
d6:84:7b:98:43:da:50:48:ed:27:9e:d6:55:91:6e:
05:cd:c3:0d:e4:cd:c5:a8:ad:6c:7d:dc:5f:9d:a5:
f4:d8:b4:4b:eb:5c:4a:40:8c:be:8e:05:98:3a:ba:
3b:29:e4:23:84:91:73:b4:5a:89:7a:f0:47:02:19:
1d:a4:28:53:a9:4b:ce:3a:de:05:6d:2b:c5:e7:8b:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:84:1F:5A:CA:73:09:5F:C1:C2:D2:72:6F:5C:63:AA:99:47:35:67
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8d:47:b8:b8:9f:4c:cb:ff:86:f0:5f:32:76:ae:ae:f5:12:
ad:92:08:fe:a9:8d:ba:bd:bd:f2:f5:15:96:47:29:17:55:47:
fc:c4:05:f9:ae:9a:23:4f:8e:30:39:36:65:07:f9:06:f7:52:
16:98:be:a1:7a:6b:30:27:95:7b:70:a8:77:6c:e2:24:bd:31:
31:74:d3:02:9d:85:12:65:83:24:cc:a1:d1:fc:fe:fb:4c:b4:
66:2f:57:df:1e:df:a8:16:c4:06:20:12:3f:c9:14:ef:17:74:
f7:05:cf:62:64:68:06:a0:46:0f:c4:a5:69:3f:94:31:11:42:
50:3a:f7:98:f3:73:52:bd:9c:ab:77:46:9b:b6:f3:02:21:be:
44:80:e8:ed:67:f1:bb:d9:d5:9a:41:fe:1b:80:f9:27:dd:dc:
63:7c:6b:bb:ae:eb:a6:4f:16:49:df:18:30:54:df:7a:d9:5d:
65:3c:6b:79:7f:0b:3a:8a:c0:88:2c:d2:49:a5:39:6f:b8:33:
53:d7:00:5c:78:56:fb:12:c3:1a:53:91:52:cc:05:62:c1:0e:
bf:e4:3c:d0:26:21:4a:29:7b:32:71:fa:73:a3:f2:97:de:b8:
a3:0d:8f:d0:9d:44:a2:25:da:39:94:b6:47:2f:2c:ed:41:1d:
5a:35:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:37 2026 by rpki-client