Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
File: Cad0S6nE8QGkiT5HlnacSRNRBns.mft (raw, json)
Hash identifier: Xg38NU4LZRId8qS+tRjnYmbJ8vZBtCLjcP6JBH24JpQ=
Subject key identifier: DD:B1:D7:3F:FB:9B:AB:AC:AD:E7:78:AB:92:67:E4:BA:00:8D:E2:2D
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 019E284AFD15C99CAA08B9BE0B74537C623A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
Manifest number: 0B
Signing time: Thu 14 May 2026 21:01:03 +0000
Manifest this update: Thu 14 May 2026 21:01:03 +0000
Manifest next update: Fri 15 May 2026 21:01:03 +0000
Files and hashes: 1: 6ktBmS6SHlobAW5cvJeOvutHtZs.asa (hash: 7DpGNlMiGk8A1TQJ6XbwsyG1xZX9cAbn/j2aQrzkLSo=)
2: Cad0S6nE8QGkiT5HlnacSRNRBns.crl (hash: eufYf8K5QsIiloImvmV55yXlJ76QB9TWLxbUcV38VgU=)
3: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (hash: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:fd:15:c9:9c:aa:08:b9:be:0b:74:53:7c:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: May 14 21:01:03 2026 GMT
Not After : May 15 21:01:03 2026 GMT
Subject: CN=ddb1d73ffb9babacade778ab9267e4ba008de22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:80:76:41:a2:3e:0c:15:de:fd:9f:fb:42:
fa:aa:1e:1c:39:2a:cf:c5:9e:a3:8b:e1:33:f4:41:
82:ac:97:fb:53:ad:c2:ff:04:4b:a0:27:bc:49:19:
ff:35:b4:c9:08:8b:f4:e0:87:d9:e9:76:da:3a:ef:
43:c1:01:30:4b:0e:17:16:31:41:19:bb:1e:65:32:
97:26:ab:45:f3:cb:ed:40:8d:94:cd:33:a0:2f:a4:
c9:dd:7d:a3:ae:3f:f2:b1:31:0c:cd:c2:db:97:c6:
dc:00:c2:d4:90:37:7c:e7:cc:d6:3e:be:38:c0:b8:
05:b4:95:6e:31:87:41:bd:ec:13:ba:a3:d7:10:fd:
e9:4d:41:b4:23:14:7b:0f:52:b9:d7:e3:06:a4:ea:
5e:61:82:ef:30:37:fc:41:25:ba:fe:21:21:2c:4f:
d5:0a:ea:44:e3:c5:8a:29:e5:e1:9a:84:c8:76:18:
98:56:4b:6b:cc:bd:20:38:29:89:67:aa:30:2b:b9:
c4:ab:bc:1b:ac:1c:3a:36:77:66:16:8d:c0:99:1a:
fe:06:79:fe:ad:13:e5:2d:f5:c0:bd:c2:f2:e9:e8:
bc:43:9d:91:88:a1:15:c4:2b:cc:51:a7:eb:6c:22:
44:25:04:1f:71:d7:c4:70:82:94:24:31:9e:28:fd:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B1:D7:3F:FB:9B:AB:AC:AD:E7:78:AB:92:67:E4:BA:00:8D:E2:2D
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:25:89:15:7b:08:f5:db:c6:f5:92:aa:02:7c:81:c4:b6:8e:
82:82:1b:2e:e6:f6:fb:be:97:0a:47:7c:01:af:56:4f:0c:95:
49:ed:ad:9b:87:b9:12:81:c0:33:15:bd:e7:fb:aa:a1:d1:d7:
ca:c8:75:0f:b2:7f:52:22:f0:56:00:2a:d1:f0:f2:7e:ee:cd:
67:07:71:07:67:77:59:68:98:8e:48:d2:7a:aa:47:0e:3f:8e:
fa:bd:60:56:03:42:50:e2:ba:bf:06:21:41:58:b9:46:65:9d:
0c:c4:1c:96:cf:2d:1d:49:b4:97:0a:22:18:30:2b:a8:f7:35:
5f:b7:1f:f7:7c:03:54:5c:f3:5e:8a:3c:07:a5:c3:cb:6a:ad:
77:85:77:ad:b7:cb:85:a5:b8:72:f0:b2:10:a5:b8:68:be:30:
17:45:6f:62:0c:64:62:48:64:d4:95:1e:b0:7e:05:49:2b:c5:
5d:2e:48:f4:cf:b4:74:1b:04:f8:e0:3a:58:f0:71:a6:4b:84:
83:02:54:1b:be:3c:57:c2:e3:40:5c:7b:74:e9:8f:8e:6c:f6:
62:29:75:85:32:e5:08:22:bc:3e:d1:76:1b:d2:4c:f3:b3:df:
c0:33:63:f1:44:67:22:9c:03:86:fd:ce:72:62:00:4b:a4:ac:
fa:57:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:53:24 2026 by rpki-client