Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: Zx9x9E5ILwG5yBcfMxqd4EZn4IPgv0SMLTeHO7GveYQ=
Subject key identifier: 5E:69:9B:71:E3:0E:89:F1:FC:C7:C3:69:96:B3:48:05:18:AF:75:E3
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 01A000935AC34946778672D01521B321036C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 14:00:52 +0000
Manifest this update: Fri 14 Aug 2026 14:00:52 +0000
Manifest next update: Sat 15 Aug 2026 14:00:52 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: m53S8wOTzN4Gy75NSafBWg3GN8OXScX9kQD3v6zROBA=)
2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=)
3: qpd4n4rrzsaA26B8vSZr6BByIoc.asa (hash: Df0IXzgRCrgdbnPYYxpAIppxGcx0S+4Gn6gEj4lMYrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:5a:c3:49:46:77:86:72:d0:15:21:b3:21:03:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Aug 14 14:00:52 2026 GMT
Not After : Aug 15 14:00:52 2026 GMT
Subject: CN=5e699b71e30e89f1fcc7c36996b3480518af75e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:4e:96:15:19:2a:cc:af:40:71:74:2f:f1:
7f:e7:29:cb:9d:57:a5:8d:56:1e:38:ec:a8:07:f8:
a2:1a:77:51:b9:34:5b:71:e7:93:86:d6:bc:bb:3b:
65:35:1a:6c:55:94:56:23:1f:a9:62:b0:1a:3a:3f:
1b:7d:35:25:b1:12:eb:3c:24:66:82:95:11:b5:d5:
c8:4e:9a:21:08:f4:4b:50:68:93:83:cd:d1:f0:4a:
8f:41:d9:45:5e:a1:eb:19:fc:07:24:56:f3:02:8b:
f2:30:b3:2a:d6:f7:e6:0f:53:13:1f:54:54:6b:c2:
4e:c2:ba:73:73:45:9a:03:d7:e3:eb:39:31:df:4d:
2d:07:9c:f2:58:77:65:8e:17:9b:e9:de:4b:0d:03:
96:17:55:57:d1:e9:51:20:8a:eb:e2:e7:6a:d2:f4:
f8:b3:b3:a0:e2:f9:70:c1:df:70:98:b9:44:58:ac:
d7:ee:18:2f:27:fa:fc:17:a7:7a:0f:48:03:af:bd:
86:b8:a5:bb:19:f6:50:3e:da:65:18:ff:a3:7f:d6:
6b:29:fb:e7:5c:3b:e7:b3:00:c9:80:3a:72:32:c3:
ec:a6:91:3d:19:42:68:68:af:2a:6c:5e:3b:09:29:
dc:c7:3b:50:13:04:0c:10:dc:e8:da:5b:9c:00:0b:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:9B:71:E3:0E:89:F1:FC:C7:C3:69:96:B3:48:05:18:AF:75:E3
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ec:d9:7c:68:01:33:3c:23:36:fc:b6:79:5a:60:ae:9c:26:
70:7c:fe:7c:a1:2c:3a:bc:dd:f5:7c:1e:a1:ab:bb:f9:30:22:
bf:50:db:3d:4b:c9:e0:54:32:f6:22:8c:e0:4e:5c:3d:0a:5c:
35:9d:32:98:37:a9:49:75:68:0e:c1:d0:b9:9d:88:fa:b3:e3:
33:81:3e:6f:a5:44:8e:30:d3:41:19:b2:ea:f2:38:59:bb:bd:
5f:ec:8e:1b:12:54:81:dc:b2:cb:71:b9:9a:93:a3:dd:67:d5:
c8:d6:2d:64:dd:67:d7:66:18:c9:26:18:61:a0:eb:aa:08:d4:
9b:ce:56:a6:25:5f:16:cb:37:95:b7:33:d3:a5:62:cc:dc:9c:
90:5b:28:a0:28:32:8c:09:54:15:e3:13:2f:fb:42:91:47:cd:
0d:a1:27:70:14:b7:aa:89:ac:0a:84:49:a7:cd:c2:29:3f:a8:
47:bf:46:a2:0b:1e:ae:fa:d8:89:11:3a:1e:4f:b4:87:5e:30:
cb:0c:26:f0:6b:f9:d9:6d:18:96:7e:22:17:57:04:26:07:6f:
c3:01:6a:40:13:a2:89:1f:9d:0d:ab:65:74:cc:73:7c:07:42:
14:b0:26:14:1d:13:df:05:55:8f:23:de:8f:24:4c:bf:3f:9a:
92:fd:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:31 2026 by rpki-client