Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
File: CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft (raw, json)
Hash identifier: pQ3sYHJFBvWZjVsaxnMlEmrBw2EyNjBr7tQNkPvmSPE=
Subject key identifier: 8E:7E:52:B4:5F:A4:37:F9:09:1E:98:83:A2:09:CE:85:64:C8:5C:51
Authority key identifier: 08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
Certificate issuer: /CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Certificate serial: 01A12EEA7DAABC6205D7640EE3FA2380CC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
Manifest number: 015F
Signing time: Mon 12 Oct 2026 07:01:21 +0000
Manifest this update: Mon 12 Oct 2026 07:01:21 +0000
Manifest next update: Tue 13 Oct 2026 07:01:21 +0000
Files and hashes: 1: CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl (hash: ZDti0RiKgq/w7nsMcDJabJbwCAa6P3pc1Zpn2jp/0Dc=)
2: UzH4c4RQOKsiBvBcEIcZh9bQ3WY.roa (hash: 1mgcGfattmpFYTM4j+3LHWqB2+rAmsEmUO132eax4h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:ea:7d:aa:bc:62:05:d7:64:0e:e3:fa:23:80:cc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Validity
Not Before: Oct 12 07:01:21 2026 GMT
Not After : Oct 13 07:01:21 2026 GMT
Subject: CN=8e7e52b45fa437f9091e9883a209ce8564c85c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:8f:b5:55:8f:56:c1:55:67:4d:3c:9a:88:
bd:1f:79:9d:24:46:43:49:7e:ad:61:32:43:24:84:
a4:9d:47:84:75:69:6d:00:cc:34:92:02:eb:f6:fb:
4c:62:88:c4:62:4c:14:14:88:47:99:48:8d:fd:ee:
1e:67:20:c2:6e:d9:ec:a6:2a:ac:be:2a:88:e3:dd:
dc:eb:0a:c0:76:8d:c2:d1:24:5e:54:46:e1:67:c4:
86:7e:22:41:bc:ee:af:a3:7f:e7:94:2c:73:52:b0:
69:36:10:3a:38:56:25:ca:55:ba:70:3b:06:1b:b4:
29:6d:c4:7e:f3:6e:6a:8b:9b:b2:c6:d3:f0:a2:02:
68:67:4c:77:05:cd:2d:21:65:1c:8a:16:08:49:1b:
da:87:3e:c4:2b:fb:ae:33:1c:38:b9:a4:b1:fe:22:
b3:90:76:e7:24:34:df:f8:92:af:45:a0:17:e6:50:
ea:fc:c9:db:be:08:62:7a:5a:96:19:29:59:75:63:
87:c6:7d:ba:a9:2f:35:ad:f3:3b:b8:56:a9:05:c2:
51:1f:41:f0:5e:c8:53:d3:09:95:94:5c:34:08:21:
67:6b:20:e9:3a:0a:a6:67:4d:25:0c:b9:13:21:d2:
c2:dc:d9:78:38:c0:23:fb:a5:14:82:50:f2:78:fb:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7E:52:B4:5F:A4:37:F9:09:1E:98:83:A2:09:CE:85:64:C8:5C:51
X509v3 Authority Key Identifier:
keyid:08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:5a:f9:6d:cc:34:07:30:17:10:0e:ed:7f:18:d3:a0:66:
8c:48:9e:cb:a6:ad:32:fa:4c:f6:a4:11:99:3c:a6:45:64:22:
f3:5e:9b:b9:bb:f3:c8:fb:a9:33:1a:b6:15:54:b7:ce:9b:02:
2b:8d:30:e7:b9:cf:09:85:6f:5e:30:e1:3f:45:b2:d4:5b:27:
11:e4:01:98:72:45:39:95:e2:17:9e:8f:6e:9a:fc:e6:3e:4d:
70:f7:da:33:6b:9a:f1:70:a4:07:f8:b7:d0:7d:31:8f:a2:57:
90:98:b3:d4:e7:ea:ea:aa:f3:34:fb:56:3d:63:a5:12:bd:d4:
d9:45:90:0b:48:4b:31:be:5d:77:fc:95:e3:59:b8:53:f8:01:
ab:e6:1f:55:7a:a0:3c:15:08:ff:4e:cf:eb:23:c7:3d:67:de:
66:c8:fe:ca:2d:5b:eb:79:78:cd:12:24:50:be:89:10:05:ae:
7e:32:6f:1e:30:22:97:a7:e0:e2:2e:b2:a3:e4:43:7b:da:69:
fc:03:1b:d2:26:30:80:87:b2:c3:d4:31:b0:91:5f:6f:65:f7:
87:a2:5b:0e:f6:a1:e9:d3:7a:ea:6c:01:1d:2d:b1:cd:25:5b:
ba:24:be:19:7a:6b:00:87:d6:f4:0d:39:72:62:6f:32:75:5f:
3b:05:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:04:30 2026 by rpki-client