Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
File: CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft (raw, json)
Hash identifier: /nIzY2pSjj6qYVr+l7cuW0dXJfP3a/8qBRgKNv06UgE=
Subject key identifier: 48:1C:79:C4:5C:B7:BB:40:75:DF:09:D9:0D:3F:80:12:5F:53:9F:34
Authority key identifier: 08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
Certificate issuer: /CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Certificate serial: 019F38603E85D5B90848F45C1C908A66DCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
Manifest number: 5A
Signing time: Mon 06 Jul 2026 17:00:59 +0000
Manifest this update: Mon 06 Jul 2026 17:00:59 +0000
Manifest next update: Tue 07 Jul 2026 17:00:59 +0000
Files and hashes: 1: CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl (hash: kwD+EmgNb/S4N5NABAQkBEYcvdlIpMz9wwd5dmcNEnU=)
2: hR2Y21D7bGLkXBKfLZ5CaTvZjkk.roa (hash: YlH5pSNmOHP/rxbn9aW9AqtUI/I4F8K3HIAacFaEpNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:60:3e:85:d5:b9:08:48:f4:5c:1c:90:8a:66:dc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Validity
Not Before: Jul 6 17:00:59 2026 GMT
Not After : Jul 7 17:00:59 2026 GMT
Subject: CN=481c79c45cb7bb4075df09d90d3f80125f539f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:58:48:56:b0:f3:7a:d9:e5:00:6c:b6:11:b2:
c6:d1:61:2f:ff:b9:2d:6d:c4:12:24:d5:fa:b7:73:
0d:20:76:d6:1d:4d:17:da:ef:c5:19:64:22:83:52:
c7:6c:6c:03:81:0e:00:b3:13:5d:94:9a:c6:02:d4:
c5:16:fd:98:11:8a:43:be:04:c2:b0:72:7a:04:34:
9c:3b:3a:fb:6c:41:7c:56:e5:b3:bb:f5:20:c0:88:
fa:5b:e2:1a:61:c4:ba:f1:f7:ce:8b:4e:b6:f4:60:
19:18:65:33:31:e3:af:a6:ca:b2:d3:2e:e9:7c:02:
3e:c6:2a:cf:e2:b3:49:49:26:e7:a5:29:9e:14:d3:
5b:5d:c9:55:5c:04:8a:87:ff:75:c6:7f:60:0b:df:
0b:1b:cf:c8:d7:dd:1d:44:78:3c:62:cd:7f:41:b7:
eb:d0:19:b1:19:cf:d9:15:70:5f:e8:0e:72:44:53:
27:cb:f2:e9:b4:24:fd:7f:68:c2:f3:d2:c1:20:b6:
f1:9a:90:cf:bf:1d:e7:92:bc:3c:fc:f9:46:bf:9e:
39:32:08:f3:ed:dd:ec:e8:93:52:a0:ea:4c:f3:fe:
a1:e7:64:8b:ec:0a:20:a8:cf:66:39:fd:cb:48:29:
be:8d:84:09:b7:e4:c8:6e:c6:7b:9a:9b:cd:2f:64:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:79:C4:5C:B7:BB:40:75:DF:09:D9:0D:3F:80:12:5F:53:9F:34
X509v3 Authority Key Identifier:
keyid:08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1b:ab:26:dc:0e:b8:fd:6e:05:25:d4:cb:20:bd:42:a0:1b:
2a:61:2e:aa:83:26:12:c3:f2:41:24:56:98:cf:7c:1e:8c:98:
79:91:f7:e3:cd:b4:69:67:e4:86:02:23:ff:eb:25:91:38:e1:
da:32:8f:b7:60:5c:13:43:a6:9d:16:bf:bb:e6:f7:25:e9:b5:
1a:a0:c4:38:80:af:d1:ca:3d:f4:c4:5f:0e:c8:1f:c5:52:01:
f5:07:5f:b1:70:27:c5:ee:d0:67:c4:dd:94:d6:8d:54:98:71:
9f:f7:eb:5b:06:24:03:0c:4d:51:c4:7f:58:60:eb:8c:33:a2:
0c:a6:0a:68:b0:82:e7:8e:78:ed:7b:76:c3:91:65:1b:8c:66:
2f:54:d2:37:02:79:31:4b:80:3f:ac:f9:f1:0d:b9:20:ae:db:
17:5e:ea:8f:b5:83:a2:fc:44:36:e4:44:2e:66:04:1c:77:ac:
e0:26:5b:1f:7f:14:92:bf:9e:82:40:62:64:4a:35:bf:62:e5:
39:9e:89:6d:33:db:30:59:11:0b:d6:ed:6f:90:55:6e:9a:4e:
99:00:9a:1f:1f:68:64:d4:e4:90:03:38:bd:af:cd:d1:7d:17:
8c:50:11:88:db:c2:5a:39:95:6d:d6:f0:37:22:b7:14:78:d8:
4e:f9:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:17:27 2026 by rpki-client