Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: ztAlnajIqu3lMV/XPf6DNALwodX0RzDWxFkRPwGyS3o=
Subject key identifier: E2:53:A7:F1:4A:20:4C:F3:3A:9D:9A:6E:D4:52:1D:79:88:38:D9:64
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019D38D3CDF7858B157E2EC0EB036F26C56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: 5Tod3buOySntKuzx4k30P/oJmu/kx9xpCLHHWF5qyRM=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cd:f7:85:8b:15:7e:2e:c0:eb:03:6f:26:c5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=e253a7f14a204cf33a9d9a6ed4521d798838d964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:3b:50:a3:ee:2d:99:e1:c2:9a:4f:81:aa:
d8:f2:07:b9:90:c2:d5:89:d4:29:e3:d7:ab:d9:46:
92:1e:82:a4:89:df:bf:48:34:70:06:a8:a1:88:b0:
99:ed:fe:69:1f:d9:95:26:10:7b:77:cf:9f:55:0c:
fe:bd:14:90:bf:91:4b:5e:01:7f:c2:c0:e6:e8:3b:
89:88:8d:d1:f3:86:a4:cb:ec:dd:d7:d0:aa:4d:9e:
ad:87:d9:ee:45:26:df:fc:59:52:5e:42:24:f4:ef:
ad:eb:15:1b:cb:fe:23:8c:ef:71:4f:62:ad:00:db:
2e:b4:7b:12:a1:a8:0c:0a:a1:c7:60:5a:3b:8d:28:
92:b1:0e:d6:7f:54:1f:1c:1f:71:29:6f:13:a6:74:
b8:a4:56:c3:79:4d:99:90:95:4a:d4:c8:af:88:57:
43:de:5e:b3:17:fb:56:de:9b:86:e4:6c:b9:5a:bd:
7c:67:cb:ed:8c:7d:9b:20:64:12:5d:a3:22:7c:94:
3f:95:97:5f:19:fa:63:4b:da:8d:e9:ed:c0:35:b2:
ec:2a:6d:68:d6:d2:84:1d:b1:7f:df:a3:fb:21:84:
f0:62:2a:6e:d3:85:4e:ab:7a:4e:09:a6:83:46:e6:
7f:3c:97:c1:2e:ab:f5:30:9a:f2:06:19:a8:c9:ea:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:A7:F1:4A:20:4C:F3:3A:9D:9A:6E:D4:52:1D:79:88:38:D9:64
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:dd:10:a9:ae:9a:c3:7c:47:1e:8f:be:a2:e1:c6:f3:07:
d4:1a:81:47:ba:17:f3:ac:bb:a4:e1:e4:21:45:ba:30:2a:c7:
9f:61:05:05:63:68:d8:b1:16:88:6b:b1:9b:84:52:d8:01:22:
f6:ae:aa:ea:c8:a0:89:51:30:a0:45:70:8a:a0:5d:83:62:bb:
f0:44:48:93:f8:c7:80:2b:2f:bb:c4:ac:b3:9c:81:1c:53:fb:
58:9c:80:7c:4c:b3:a5:c6:de:72:e1:55:ea:2c:53:1a:3f:54:
95:fe:73:b7:57:a7:62:6f:68:8b:cc:5a:2c:37:af:67:ff:38:
22:0d:6a:16:bc:3c:25:38:38:da:81:af:fd:c6:6d:d0:eb:8e:
e3:0b:51:45:f8:ea:18:96:55:73:63:09:f1:40:44:4b:68:15:
31:c3:c0:18:c0:f2:45:cc:f6:66:53:f5:f3:d3:df:99:37:86:
06:32:2b:94:62:3e:17:5e:0e:e6:2d:e5:c1:f1:27:0f:f2:b1:
c3:98:20:8d:6b:3a:8e:25:b0:ca:8a:5c:65:bd:47:8b:1e:85:
31:68:e8:8d:db:96:ba:84:7d:9b:93:f5:30:d6:f3:9e:82:21:
63:bf:ec:99:1d:ac:bc:d0:d5:40:29:35:2d:a6:c3:c5:1c:13:
30:f3:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:46 2026 by rpki-client